Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

176 matches found

CVE
CVE•added 2014/10/31 3:00 p.m.•100 views

CVE-2014-8578

CVE-2014-8578 : XSS in the OpenStack Horizon Groups panel (remote administrators) via a user email address, affecting Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2. Root cause: input handling flaw enables arbitrary script/HTML injection. Connected sources confirm the sam...

3.5CVSS5.5AI score0.0118EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE•added 2014/10/31 3:00 p.m.•94 views

CVE-2014-3474

Cross-site scripting XSS vulnerability in horizon/static/horizon/js/horizon.instances.js in the Launch Instance menu in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to inject arbitrary web script or HTML via a networ...

3.5CVSS5.1AI score0.01933EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2014/10/31 12:00 a.m.•6 views

CVE-2014-8578: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Groups panel in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-3475...

3.5CVSS5.9AI score0.0118EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2014/10/31 12:00 a.m.•8 views

CVE-2014-3474: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in horizon/static/horizon/js/horizon.instances.js in the Launch Instance menu in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to inject arbitrary web script or HTML via a networ...

3.5CVSS5.9AI score0.01933EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2014/10/31 12:00 a.m.•6 views

CVE-2014-3475: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Users panel admin/users/ in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than...

3.5CVSS5.9AI score0.01235EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2014/10/31 12:00 a.m.•7 views

CVE-2014-3473: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject...

4.3CVSS6AI score0.01703EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux•added 2014/09/30 6:00 p.m.•67 views

Moderate: Red Hat Security Advisory: python-django-horizon security and bug fix update

Updated python-django-horizon packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scori...

3.5CVSS5.6AI score0.0207EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux•added 2014/09/15 5:52 a.m.•42 views

Moderate: Red Hat Security Advisory: python-django-horizon security update

Updated python-django-horizon packages that fix multiple security issues are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

4.3CVSS5.7AI score0.0207EPSS
SaveExploits2References3
osv_suse
osv_suse•added 2014/08/28 12:06 p.m.•21 views

SUSE-RU-2015:0410-1 Security update for openstack-dashboard

This update for openstack-dashboard fixes a cross-site scripting issue on the unorderedlist filter. bnc891815, CVE-2014-3594 Security Issues: CVE-2014-3475...

5CVSS5.6AI score0.02944EPSS
SaveExploits0References9
osv_cve
osv_cve•added 2014/08/22 2:55 p.m.•21 views

CVE-2014-3594

Cross-site scripting XSS vulnerability in the Host Aggregates interface in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name...

5.3AI score
SaveExploits0References17
Prion
Prion•added 2014/08/22 2:55 p.m.•35 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Host Aggregates interface in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name...

3.5CVSS5.9AI score0.0207EPSS
SaveExploits1References10Affected Software2
Debian CVE
Debian CVE•added 2014/08/22 2:00 p.m.•83 views

CVE-2014-3594

Cross-site scripting XSS vulnerability in the Host Aggregates interface in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name...

3.5CVSS5.4AI score0.0207EPSS
SaveExploits1
Mend
Mend•added 2014/08/22 2:00 p.m.•9 views

CVE-2014-3594

Cross-site scripting XSS vulnerability in the Host Aggregates interface in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name...

3.5CVSS0.0207EPSS
SaveExploits1References21
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2014/08/22 12:00 a.m.•6 views

CVE-2014-3594: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Host Aggregates interface in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name...

3.5CVSS6AI score0.0207EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies•added 2014/08/21 12:00 a.m.•5 views

PT-2014-8627

Name of the Vulnerable Software and Affected Versions OpenStack Dashboard Horizon versions prior to 2013.2.4 OpenStack Dashboard Horizon versions 2014.1 prior to 2014.1.2 OpenStack Dashboard Horizon Juno versions prior to Juno-2 Description A cross-site scripting XSS issue exists in the Groups...

4.3CVSS0.01933EPSS
SaveExploits1References22
UbuntuCve
UbuntuCve•added 2014/08/19 3:00 p.m.•34 views

CVE-2014-3594

Cross-site scripting XSS vulnerability in the Host Aggregates interface in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name...

3.5CVSS6AI score0.0207EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux•added 2014/07/24 5:21 p.m.•49 views

Moderate: Red Hat Security Advisory: python-django-horizon security, bug fix, and enhancement update

Updated python-django-horizon packages that fix three security issues, multiple bugs, and add an enhancement are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 Icehouse for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Moderate...

4.3CVSS5.6AI score0.01933EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu•added 2014/07/09 12:00 a.m.•20 views

UBUNTU-CVE-2014-3475

Cross-site scripting XSS vulnerability in the Users panel admin/users/ in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than...

3.5CVSS5.9AI score0.01235EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2014/07/09 12:00 a.m.•17 views

PT-2014-5347 · Openstack +1 · Openstack Dashboard +1

Name of the Vulnerable Software and Affected Versions: OpenStack Dashboard Horizon versions prior to 2013.2.4 OpenStack Dashboard Horizon versions 2014.1 prior to 2014.1.2 OpenStack Dashboard Horizon Juno versions prior to Juno-2 Description: A cross-site scripting XSS issue exists in the Users...

4.3CVSS5.1AI score0.0207EPSS
SaveExploits2References22
Positive Technologies
Positive Technologies•added 2014/07/09 12:00 a.m.•11 views

PT-2014-5346

Name of the Vulnerable Software and Affected Versions OpenStack Dashboard Horizon versions 2013.2.3 and earlier OpenStack Dashboard Horizon versions 2014.1 and earlier, excluding 2014.1.2 and later OpenStack Dashboard Horizon versions Juno and earlier, excluding Juno-2 and later Description A...

3.5CVSS6AI score0.01933EPSS
SaveExploits1References31
Rows per page
Query Builder