https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:37:32.718910+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99245 EUVD-2026-99245 2026-10-04T00:37:32.727837+00:00 EUVD-2026-99245 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3475 fkie_cve-2014-3475 2026-10-04T00:37:32.727871+00:00

Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578.

 https://cve.radiocsirt.org/vuln/ghsa-vw9p-vx37-72h4 GHSA-vw9p-vx37-72h4 2026-10-04T00:37:32.727904+00:00

Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578.

 https://cve.radiocsirt.org/vuln/gsd-2014-3475 gsd-2014-3475 2026-10-04T00:37:32.727944+00:00 gsd-2014-3475 https://cve.radiocsirt.org/vuln/rhsa-2014:0939 RHSA-2014:0939 — Red Hat Security Advisory: python-django-horizon security, bug fix, and enhancement update 2026-10-04T00:37:32.727963+00:00

openstack-horizon: multiple XSS flaws openstack-horizon: multiple XSS flaws openstack-horizon: multiple XSS flaws openstack-horizon: multiple XSS flaws

 https://cve.radiocsirt.org/vuln/suse-ru-2015:0410-1 SUSE-RU-2015:0410-1 — Security update for openstack-dashboard 2026-10-04T00:37:32.728006+00:00

Security update for openstack-dashboard

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3475 UBUNTU-CVE-2014-3475 2026-10-04T00:37:32.728036+00:00

Affected: Ubuntu:14.04:LTS: horizon

Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578.