Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 22:40:38 +0000 CVE-2016-4428 https://vulnerability.circl.lu/vuln/cve-2016-4428 <p>Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form.</p> <p>Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form.</p> https://vulnerability.circl.lu/vuln/cve-2016-4428 USN-3447-1 — horizon vulnerability https://vulnerability.circl.lu/vuln/usn-3447-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: horizon</p> <p>Beth Lancaster and Brandon Sawyers discovered that OpenStack Horizon was incorrect protected against cross-site scripting (XSS) attacks. A remote authenticated user could use this issue to inject web script or HTML in a dashboard form.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: horizon</p> <p>Beth Lancaster and Brandon Sawyers discovered that OpenStack Horizon was incorrect protected against cross-site scripting (XSS) attacks. A remote authenticated user could use this issue to inject web script or HTML in a dashboard form.</p> https://vulnerability.circl.lu/vuln/usn-3447-1