Known vulnerabilities in py-django (Alpine package) - page 2

Vendor: Alpine Linux Development Team
Software: py-django (Alpine package)
Software CPE: cpe:2.3:o:alpine:py-django_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 39
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting py-django (Alpine package) py-django (Alpine package) is affected by 39 known vulnerabilities: 5 high, 19 medium, 15 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46660 - Incorrect Default Permissions
CVE-2020-24584		 CWE-276 Medium
No
No
 1.11.29-r1 11.09.2020 SB2020091027
SB2020091118
SB2020121611
and 5 more
#VU46659 - Incorrect Default Permissions
CVE-2020-24583		 CWE-276 Medium
No
No
 1.11.29-r1 11.09.2020 SB2020091027
SB2020091118
SB2020121610
and 5 more
#VU7106 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-7234		 CWE-601 Low
No
No
 1.8.18-r0 16.06.2017 SB2017061603
SB2017040601
SB2017040602
and 2 more
#VU7105 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7233		 CWE-79 Low
No
No
 1.8.18-r0 16.06.2017 SB2017061603
SB2017040601
SB2017040602
and 12 more
#VU1131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-9014		 CWE-79 Low
No
No
 1.8.16-r0 02.11.2016 SB2016110103
SB2016111602
SB2016111603
and 6 more
#VU1130 - Use of Hard-coded Password
CVE-2016-9013		 CWE-259 Low
No
No
 1.8.16-r0 02.11.2016 SB2016110103
SB2016111602
SB2016111603
and 6 more
#VU32403 - Resource Management Errors
CVE-2015-5145		 CWE-399 Medium
No
No
 1.7.9-r0 14.07.2015 SB2015071413
SB2015073106
SB2015103104
and 2 more
#VU32402 - Improper input validation
CVE-2015-5144		 CWE-20 Medium
No
No
 1.7.9-r0 14.07.2015 SB2015071412
SB2015073105
SB2015103104
and 3 more
#VU32401 - Resource Management Errors
CVE-2015-5143		 CWE-399 Medium
No
No
 1.7.9-r0 14.07.2015 SB2015071411
SB2015071415
SB2015103104
and 4 more
#VU32537 - Improper input validation
CVE-2014-3730		 CWE-20 Medium
No
No
 1.5.8-r0 16.05.2014 SB2014051601
SB2014051510
SB2014051607
#VU33846 - Improper input validation
CVE-2014-1418		 CWE-20 Medium
No
No
 1.5.8-r0 16.05.2014 SB2014051602
SB2014051509
SB2014062602
and 2 more
#VU32541 - Cross-Site Request Forgery (CSRF)
CVE-2014-0473		 CWE-352 Medium
No
No
 1.5.6-r0 23.04.2014 SB2014042302
SB2014042603
SB2014062602
and 2 more
#VU32542 - Resource Management Errors
CVE-2014-0474		 CWE-399 High
No
No
 1.5.6-r0 23.04.2014 SB2014042303
SB2014042604
SB2014062602
and 2 more
#VU32540 - Improper Control of Generation of Code ('Code Injection')
CVE-2014-0472		 CWE-94 Medium
No
No
 1.5.6-r0 23.04.2014 SB2014042301
SB2014042602
SB2014062602
and 1 more
#VU33092 - Heap-based Buffer Overflow
CVE-2014-2525		 CWE-122 Medium
No
No
 1.5.6-r0 28.03.2014 SB2014042405
SB2014041109
SB2014052301
and 4 more
#VU32615 - Improper Authentication
CVE-2013-1443		 CWE-287 Medium
No
No
 1.5.5-r0 23.09.2013 SB2013092301
SB2013112632
SB2013091629
and 1 more
#VU32759 - Improper input validation
CVE-2012-3443		 CWE-20 Medium
No
No
 1.4.1-r0 31.07.2012 SB2012073102
SB2012100131
SB2012073003
and 1 more
#VU32760 - Memory corruption
CVE-2012-3444		 CWE-119 Medium
No
No
 1.4.1-r0 31.07.2012 SB2012073103
SB2012100132
SB2012073003
and 1 more
#VU32758 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-3442		 CWE-79 Low
No
No
 1.4.1-r0 31.07.2012 SB2012073101
SB2012100130
SB2012073003
and 1 more


Showing elements 21 - 40 out of 39