6001 matches found
PT-2021-1582
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 87.0.4280.141 Description The issue is related to insufficient policy enforcement in the WebUI of Google Chrome, which could allow an attacker to perform a sandbox escape via a crafted Chrome Extension if a user...
Arbitrary Code Execution
chromium is vulnerable to arbitrary code execution. The vulnerability exists through insufficient data validation in webUI that allows a local attacker to bypass content security policy via a crafted HTML page...
Cross-Site Scripting (XSS)
chromium is vulnerable to cross-site scripting. Insufficient data validation in WebUI allows a remote attacker, who has compromised the renderer process, to inject scripts or HTML into a privileged page via a malicious HTML page...
cv-letter (1.0.0), docogen (>=0.0.3, <=0.1.6) +4 more potentially affected by CVE-2020-28433 via node-latex-pdf (0.0.2)
node-latex-pdf NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on node-latex-pdf and may be impacted: - cv-letter 1.0.0 - docogen =0.0.3, =0.0.1, =0.0.7 - resume-builder-iitrpr 1.0.0 Source cves: CVE-2020-28433 Source advisory:...
CVE-2020-29539
A Cross-Site Scripting XSS issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor to have a remote authenticated user run JavaScript from a malicious site...
CVE-2020-29539
A Cross-Site Scripting XSS issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor to have a remote authenticated user run JavaScript from a malicious site...
Cross site scripting
A Cross-Site Scripting XSS issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor to have a remote authenticated user run JavaScript from a malicious site...
CVE-2020-29539
The CVE-2020-29539 entry concerns a Cross-Site Scripting (XSS) vulnerability in the WebUI Translation component of Systran Pure Neural Server prior to version 9.7.0. The issue allows a remote, authenticated attacker to cause a victim user to execute JavaScript from a malicious site via the affect...
CVE-2020-29539
A Cross-Site Scripting XSS issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor to have a remote authenticated user run JavaScript from a malicious site...
CVE-2020-29539: Improper Neutralization of Input During Web Page Generation
A Cross-Site Scripting XSS issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor to have a remote authenticated user run JavaScript from a malicious site...
PT-2020-17184
Name of the Vulnerable Software and Affected Versions Systran Pure Neural Server versions prior to 9.7.0 Description A Cross-Site Scripting XSS issue in WebUI Translation allows a threat actor to have a remote authenticated user run JavaScript from a malicious site. Recommendations For versions...
Systran Pure Neural Server Cross-Site Scripting Vulnerability
Systran Pure Neural Server is a Web platform product for document translation from Systran, Germany. A cross-site scripting vulnerability previously existed in Systran Pure Neural Server 9.7.0, which stemmed from a cross-site scripting XSS issue in WebUI Translation that allowed a threat actor to...
Clickjacking
WebUI is vulnerable to clickjacking. The vulnerability existed when the X-Frame-Options header is not set...
Cross-Site Scripting (XSS)
qbittorrent is vulnerable to cross-site scripting XSS. The WebUI does not escape data values before rendering on a user's browser, allowing an attacker to inject and execute arbitrary Javascript...
Google Chrome WebUI Code Execution
The vulnerability of the WebUI user interface of Google Chrome is related to the overflow of buffers in the dynamic memory during the processing of HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...
idm:DL1 and idm:client security, bug fix, and enhancement update
bind-dyndb-ldap 11.3-1 - New upstream release - Resolves: rhbz1845211 ipa 4.8.7-12.0.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 4.8.7-12 - Require selinux sub package in the proper version Related: RHBZ1868432 - SELinux: do not double-define nodet and pkitomcatcertt...
Security update for chromium, gn (important)
openSUSE Security Update: Security update for chromium, gn Announcement ID: openSUSE-SU-2020:1829-1 Rating: important References: 1177408 1177936 1178375 Cross-References: CVE-2020-15967 CVE-2020-15968 CVE-2020-15969 CVE-2020-15970 CVE-2020-15971 CVE-2020-15972 CVE-2020-15973 CVE-2020-15974...
CVE-2020-15983
Insufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed a local attacker to bypass content security policy via a crafted HTML page...