Known vulnerabilities in py-django (Alpine package) - page 2

Vendor: Alpine Linux Development Team
Software: py-django (Alpine package)
Software CPE: cpe:2.3:o:alpine:py-django_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 39
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting py-django (Alpine package) py-django (Alpine package) is affected by 39 known vulnerabilities: 5 high, 19 medium, 15 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU1605 - Information Exposure Through Timing Discrepancy
CVE-2016-2513		 CWE-208 Low
No
No
 1.8.10-r0 21.12.2016 SB2016030103
SB2016030701
SB2016030702
and 13 more
#VU1603 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-2512		 CWE-79 Low
No
No
 1.8.10-r0 21.12.2016 SB2016030103
SB2016030701
SB2016030702
and 13 more
#VU1131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-9014		 CWE-79 Low
No
No
 1.8.16-r0 02.11.2016 SB2016110103
SB2016111602
SB2016111603
and 6 more
#VU1130 - Use of Hard-coded Password
CVE-2016-9013		 CWE-259 Low
No
No
 1.8.16-r0 02.11.2016 SB2016110103
SB2016111602
SB2016111603
and 6 more
#VU165 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-6186		 CWE-79 High
Available
No
 1.7.9-r2 19.07.2016 SB2016071907
SB2016072204
SB2016072205
and 9 more
#VU32379 - Exposure of sensitive information to an unauthorized actor
CVE-2015-8213		 CWE-200 Medium
No
No
 1.5.10-r1 07.12.2015 SB2015120701
SB2015112905
SB2015112906
and 2 more
#VU32403 - Resource Management Errors
CVE-2015-5145		 CWE-399 Medium
No
No
 1.7.9-r0 14.07.2015 SB2015071413
SB2015073106
SB2015103104
and 2 more
#VU32402 - Improper input validation
CVE-2015-5144		 CWE-20 Medium
No
No
 1.7.9-r0 14.07.2015 SB2015071412
SB2015073105
SB2015103104
and 2 more
#VU32401 - Resource Management Errors
CVE-2015-5143		 CWE-399 Medium
No
No
 1.7.9-r0 14.07.2015 SB2015071411
SB2015071415
SB2015103104
and 3 more
#VU32537 - Improper input validation
CVE-2014-3730		 CWE-20 Medium
No
No
 1.5.8-r0 16.05.2014 SB2014051601
SB2014051510
SB2014051607
#VU33846 - Improper input validation
CVE-2014-1418		 CWE-20 Medium
No
No
 1.5.8-r0 16.05.2014 SB2014051602
SB2014051509
SB2014062602
and 1 more
#VU32541 - Cross-Site Request Forgery (CSRF)
CVE-2014-0473		 CWE-352 Medium
No
No
 1.5.6-r0 23.04.2014 SB2014042302
SB2014042603
SB2014062602
and 1 more
#VU32542 - Resource Management Errors
CVE-2014-0474		 CWE-399 High
No
No
 1.5.6-r0 23.04.2014 SB2014042303
SB2014042604
SB2014062602
and 1 more
#VU32540 - Improper Control of Generation of Code ('Code Injection')
CVE-2014-0472		 CWE-94 Medium
No
No
 1.5.6-r0 23.04.2014 SB2014042301
SB2014042602
SB2014062602
#VU33092 - Heap-based Buffer Overflow
CVE-2014-2525		 CWE-122 Medium
No
No
 1.5.6-r0 28.03.2014 SB2014042405
SB2014041109
SB2014052301
and 3 more
#VU32615 - Improper Authentication
CVE-2013-1443		 CWE-287 Medium
No
No
 1.5.5-r0 23.09.2013 SB2013092301
SB2013112632
SB2013091629
#VU32759 - Improper input validation
CVE-2012-3443		 CWE-20 Medium
No
No
 1.4.1-r0 31.07.2012 SB2012073102
SB2012100131
SB2012073003
#VU32760 - Memory corruption
CVE-2012-3444		 CWE-119 Medium
No
No
 1.4.1-r0 31.07.2012 SB2012073103
SB2012100132
SB2012073003
#VU32758 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-3442		 CWE-79 Low
No
No
 1.4.1-r0 31.07.2012 SB2012073101
SB2012100130
SB2012073003


Showing elements 21 - 40 out of 39