CVE-2021-21111

Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

CVE-2021-21111

Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

CVE-2021-21111

Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

CVE-2021-21111: Improper Restriction of Rendered UI Layers or Frames

Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

Google Chrome 访问控制错误漏洞

Google Chrome is a web browser from Google, an American company. A policy enforcement deficiency vulnerability exists in the WebUI in versions prior to Google Chrome 87.0.4280.141. An attacker can exploit the vulnerability to perform sandbox escaping via a specially crafted Chrome extension...

Google Chrome Insufficient Policy Enforcement Vulnerability (CNVD-2021-04416)

Google Chrome is a web browser from Google, an American company. A policy enforcement deficiency vulnerability exists in the WebUI in versions prior to Google Chrome 87.0.4280.141. An attacker can exploit the vulnerability to perform sandbox escaping via a specially crafted Chrome extension...

PT-2021-1582

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 87.0.4280.141 Description The issue is related to insufficient policy enforcement in the WebUI of Google Chrome, which could allow an attacker to perform a sandbox escape via a crafted Chrome Extension if a user...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. The vulnerability exists through insufficient data validation in webUI that allows a local attacker to bypass content security policy via a crafted HTML page...

Cross-Site Scripting (XSS)

chromium is vulnerable to cross-site scripting. Insufficient data validation in WebUI allows a remote attacker, who has compromised the renderer process, to inject scripts or HTML into a privileged page via a malicious HTML page...

docogen (>=0.0.3, <=0.1.6), docogen-cli (0.0.1) +3 more potentially affected by CVE-2020-28433 via node-latex-pdf (0.0.2)

node-latex-pdf NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on node-latex-pdf and may be impacted: - docogen =0.0.3, =0.0.1, =0.0.7 - resume-builder-iitrpr 1.0.0 Source cves: CVE-2020-28433 Source advisory: SNYK:JS-NODELATEXPDF-105042...

CVE-2020-29539

A Cross-Site Scripting XSS issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor to have a remote authenticated user run JavaScript from a malicious site...

CVE-2020-29539

A Cross-Site Scripting XSS issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor to have a remote authenticated user run JavaScript from a malicious site...

Cross site scripting

A Cross-Site Scripting XSS issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor to have a remote authenticated user run JavaScript from a malicious site...

CVE-2020-29539

A Cross-Site Scripting XSS issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor to have a remote authenticated user run JavaScript from a malicious site...

CVE-2020-29539

The CVE-2020-29539 entry concerns a Cross-Site Scripting (XSS) vulnerability in the WebUI Translation component of Systran Pure Neural Server prior to version 9.7.0. The issue allows a remote, authenticated attacker to cause a victim user to execute JavaScript from a malicious site via the affect...

PT-2020-17184

Name of the Vulnerable Software and Affected Versions Systran Pure Neural Server versions prior to 9.7.0 Description A Cross-Site Scripting XSS issue in WebUI Translation allows a threat actor to have a remote authenticated user run JavaScript from a malicious site. Recommendations For versions...

CVE-2020-29539: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor to have a remote authenticated user run JavaScript from a malicious site...

Systran Pure Neural Server Cross-Site Scripting Vulnerability

Systran Pure Neural Server is a Web platform product for document translation from Systran, Germany. A cross-site scripting vulnerability previously existed in Systran Pure Neural Server 9.7.0, which stemmed from a cross-site scripting XSS issue in WebUI Translation that allowed a threat actor to...

Clickjacking

WebUI is vulnerable to clickjacking. The vulnerability existed when the X-Frame-Options header is not set...

Cross-Site Scripting (XSS)

qbittorrent is vulnerable to cross-site scripting XSS. The WebUI does not escape data values before rendering on a user's browser, allowing an attacker to inject and execute arbitrary Javascript...