Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:14:15 +0000 cnvd-2015-04031 https://cve.radiocsirt.org/vuln/cnvd-2015-04031 cnvd-2015-04031 https://cve.radiocsirt.org/vuln/cnvd-2015-04031 EUVD-2026-91699 https://cve.radiocsirt.org/vuln/euvd-2026-91699 EUVD-2026-91699 https://cve.radiocsirt.org/vuln/euvd-2026-91699 fkie_cve-2015-3219 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3219 <p>Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handled in the help_text attribute in the Field class.</p> <p>Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handled in the help_text attribute in the Field class.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-3219 GHSA-rhjj-f6gq-6gx2 — OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability https://cve.radiocsirt.org/vuln/ghsa-rhjj-f6gq-6gx2 <p><strong>Affected:</strong> PyPI: horizon</p> <p>Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handled in the help_text attribute in the Field class.</p> <p><strong>Affected:</strong> PyPI: horizon</p> <p>Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handled in the help_text attribute in the Field class.</p> https://cve.radiocsirt.org/vuln/ghsa-rhjj-f6gq-6gx2 gsd-2015-3219 https://cve.radiocsirt.org/vuln/gsd-2015-3219 gsd-2015-3219 https://cve.radiocsirt.org/vuln/gsd-2015-3219 PYSEC-2015-40 https://cve.radiocsirt.org/vuln/pysec-2015-40 <p><strong>Affected:</strong> PyPI: horizon</p> <p>Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handled in the help_text attribute in the Field class.</p> <p><strong>Affected:</strong> PyPI: horizon</p> <p>Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handled in the help_text attribute in the Field class.</p> https://cve.radiocsirt.org/vuln/pysec-2015-40 RHSA-2015:1679 — Red Hat Security Advisory: python-django-horizon security and bug fix update https://cve.radiocsirt.org/vuln/rhsa-2015:1679 <p>python-django-horizon: XSS in Heat stack creation python-django-horizon: persistent XSS in Horizon metadata dashboard</p> <p>python-django-horizon: XSS in Heat stack creation python-django-horizon: persistent XSS in Horizon metadata dashboard</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1679 Withdrawn: UBUNTU-CVE-2015-3219 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3219 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: horizon</p> <p>Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handled in the help_text attribute in the Field class.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: horizon</p> <p>Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handled in the help_text attribute in the Field class.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3219