https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:25:32.253958+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-04031 cnvd-2015-04031 2026-10-04T16:25:32.258877+00:00 cnvd-2015-04031 https://cve.radiocsirt.org/vuln/euvd-2026-91699 EUVD-2026-91699 2026-10-04T16:25:32.258917+00:00 EUVD-2026-91699 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3219 fkie_cve-2015-3219 2026-10-04T16:25:32.258932+00:00

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handled in the help_text attribute in the Field class.

 https://cve.radiocsirt.org/vuln/ghsa-rhjj-f6gq-6gx2 GHSA-rhjj-f6gq-6gx2 — OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability 2026-10-04T16:25:32.258972+00:00

Affected: PyPI: horizon

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handled in the help_text attribute in the Field class.

 https://cve.radiocsirt.org/vuln/gsd-2015-3219 gsd-2015-3219 2026-10-04T16:25:32.258999+00:00 gsd-2015-3219 https://cve.radiocsirt.org/vuln/pysec-2015-40 PYSEC-2015-40 2026-10-04T16:25:32.259011+00:00

Affected: PyPI: horizon

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handled in the help_text attribute in the Field class.

 https://cve.radiocsirt.org/vuln/rhsa-2015:1679 RHSA-2015:1679 — Red Hat Security Advisory: python-django-horizon security and bug fix update 2026-10-04T16:25:32.259030+00:00

python-django-horizon: XSS in Heat stack creation python-django-horizon: persistent XSS in Horizon metadata dashboard

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3219 Withdrawn: UBUNTU-CVE-2015-3219 2026-10-04T16:25:32.259049+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: horizon

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handled in the help_text attribute in the Field class.