Lucene search
K

6 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:19 a.m.1 views

SUSE CVE-2015-3219

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in OpenStack Dashboard Horizon 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handl...

4.3CVSS6AI score0.00408EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/05/17 3:17 a.m.19 views

OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in OpenStack Dashboard Horizon 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handl...

4.3CVSS6AI score0.00408EPSS
Exploits1References12Affected Software1
Veracode
Veracode
added 2019/01/15 9:7 a.m.18 views

Cross-site Scripting (XSS)

python-django-horizon is vulnerable to cross-site scripting XSS attacks. The vulnerability exists as the Orchestration/Stack section in OpenStack Dashboard Horizon 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the descriptio...

4.3CVSS5.1AI score0.00408EPSS
Exploits1References12Affected Software1
OSV
OSV
added 2015/08/20 8:59 p.m.3 views

DEBIAN-CVE-2015-3219

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in OpenStack Dashboard Horizon 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handl...

4.3CVSS6AI score0.00408EPSS
Exploits1References1
Prion
Prion
added 2015/08/20 8:59 p.m.13 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in OpenStack Dashboard Horizon 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handl...

4.3CVSS6.1AI score0.00408EPSS
Exploits1References7Affected Software3
Cvelist
Cvelist
added 2015/08/20 8:0 p.m.20 views

CVE-2015-3219

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in OpenStack Dashboard Horizon 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handl...

5.3AI score0.00408EPSS
Exploits1References7
Rows per page
Query Builder