https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T22:40:45.113053+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2016-4428 CVE-2016-4428 2026-09-29T22:40:52.586773+00:00

Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form.

 https://vulnerability.circl.lu/vuln/usn-3447-1 USN-3447-1 — horizon vulnerability 2026-09-29T22:40:52.586900+00:00

Affected: Ubuntu:14.04:LTS: horizon

Beth Lancaster and Brandon Sawyers discovered that OpenStack Horizon was incorrect protected against cross-site scripting (XSS) attacks. A remote authenticated user could use this issue to inject web script or HTML in a dashboard form.