https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:23:39.062962+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99218 EUVD-2026-99218 2026-10-03T08:23:39.070241+00:00 EUVD-2026-99218 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3473 fkie_cve-2014-3473 2026-10-03T08:23:39.070273+00:00

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject arbitrary web script or HTML via a crafted template.

 https://cve.radiocsirt.org/vuln/ghsa-8vwv-2v7v-jmgr GHSA-8vwv-2v7v-jmgr — Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name 2026-10-03T08:23:39.070304+00:00

Affected: PyPI: horizon

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject arbitrary web script or HTML via a crafted template.

 https://cve.radiocsirt.org/vuln/gsd-2014-3473 gsd-2014-3473 2026-10-03T08:23:39.070328+00:00 gsd-2014-3473 https://cve.radiocsirt.org/vuln/pysec-2026-642 PYSEC-2026-642 — Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name 2026-10-03T08:23:39.070340+00:00

Affected: PyPI: horizon

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject arbitrary web script or HTML via a crafted template.

 https://cve.radiocsirt.org/vuln/rhsa-2014:0939 RHSA-2014:0939 — Red Hat Security Advisory: python-django-horizon security, bug fix, and enhancement update 2026-10-03T08:23:39.070358+00:00

openstack-horizon: multiple XSS flaws openstack-horizon: multiple XSS flaws openstack-horizon: multiple XSS flaws openstack-horizon: multiple XSS flaws

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3473 UBUNTU-CVE-2014-3473 2026-10-03T08:23:39.070376+00:00

Affected: Ubuntu:14.04:LTS: horizon

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject arbitrary web script or HTML via a crafted template.