CVE-2020-29539

The CVE-2020-29539 entry concerns a Cross-Site Scripting (XSS) vulnerability in the WebUI Translation component of Systran Pure Neural Server prior to version 9.7.0. The issue allows a remote, authenticated attacker to cause a victim user to execute JavaScript from a malicious site via the affect...

CVE-2020-29540

Systran Pure Neural Server (prior to version 9.7.0) contains an API-level vulnerability in the Translation API feature that can be exploited to use the server as a Denial-of-Service proxy. An attacker can flood a destination host on any TCP port with translation requests, even when no web service...