https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:56:37.009576+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-96690 EUVD-2026-96690 2026-10-03T13:56:37.013881+00:00 EUVD-2026-96690 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0157 fkie_cve-2014-0157 2026-10-03T13:56:37.013911+00:00

Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to inject arbitrary web script or HTML via the description field of a Heat template.

 https://cve.radiocsirt.org/vuln/ghsa-cmg8-5c63-pg95 GHSA-cmg8-5c63-pg95 — OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting 2026-10-03T13:56:37.013942+00:00

Affected: PyPI: horizon

Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to inject arbitrary web script or HTML via the description field of a Heat template.

 https://cve.radiocsirt.org/vuln/gsd-2014-0157 gsd-2014-0157 2026-10-03T13:56:37.013966+00:00 gsd-2014-0157 https://cve.radiocsirt.org/vuln/pysec-2026-822 PYSEC-2026-822 — OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting 2026-10-03T13:56:37.013979+00:00

Affected: PyPI: horizon

Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to inject arbitrary web script or HTML via the description field of a Heat template.

 https://cve.radiocsirt.org/vuln/rhsa-2014:0581 RHSA-2014:0581 — Red Hat Security Advisory: python-django-horizon security update 2026-10-03T13:56:37.013998+00:00

openstack-horizon: XSS in Horizon orchestration dashboard when using a malicious template

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0157 Withdrawn: UBUNTU-CVE-2014-0157 2026-10-03T13:56:37.014015+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: horizon

Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to inject arbitrary web script or HTML via the description field of a Heat template.