| Max CVSS | 5.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-8124 | 5.0 |
OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests
|
13-02-2023 - 00:43 | 12-12-2014 - 15:59 | |
| CVE-2014-3594 | 3.5 |
Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new h
|
13-02-2023 - 00:40 | 22-08-2014 - 14:55 | |
| CVE-2014-3473 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Or
|
13-02-2023 - 00:39 | 31-10-2014 - 15:55 | |
| CVE-2014-3475 | 3.5 |
Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user
|
13-02-2023 - 00:39 | 31-10-2014 - 15:55 | |
| CVE-2014-3474 | 3.5 |
Cross-site scripting (XSS) vulnerability in horizon/static/horizon/js/horizon.instances.js in the Launch Instance menu in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote authenticated users
|
13-02-2023 - 00:39 | 31-10-2014 - 15:55 | |
| CVE-2014-0157 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to inject arbitrary web script or HTML via the descri
|
13-02-2023 - 00:34 | 15-04-2014 - 14:55 | |
| CVE-2013-6858 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.
|
09-03-2021 - 14:50 | 23-11-2013 - 17:55 |