Medium
CVE-2026-84379
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 19
Reset filters
Medium
CVE-2026-59223
Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching
Medium
CVE-2026-55748
OpenStack Horizon RC file generation does not escape special characters in project names
Medium
CVE-2026-43002
OpenStack Horizon has Incorrect Behavior Order
Medium
CVE-2026-40071
pyload-ng has a WebUI JSON permission mismatch that lets ADD/DELETE users invoke MODIFY-only actions
Medium
CVE-2025-66034
fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib
High
CVE-2023-45139
fonttools XML External Entity Injection (XXE) Vulnerability
Medium
CVE-2017-7400
OpenStack Horizon Cross-site Scripting (XSS)
Medium
CVE-2014-0157
OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting
Low
CVE-2014-3474
OpenStack Horizon Cross-site scripting (XSS) vulnerability
Medium
CVE-2014-3473
Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name
Low
CVE-2014-3594
OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface
Medium
CVE-2016-4428
OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability
Medium
CVE-2022-45582
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.
Medium
CVE-2020-29565
An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allo
Medium
CVE-2020-26943
Arbitrary Code Execution in blazar-dashboard
Critical
CVE-2016-4009
Pillow Integer overflow in ImagingResampleHorizontal
Medium
CVE-2015-3219
OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability
Unrated
CVE-2012-3540
Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a U
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.