Known vulnerabilities in python-django (Debian package) 1:1.10.7-2+deb9u5

Vendor: Debian
Version: 1:1.10.7-2+deb9u5
Software CPE: cpe:2.3:o:debian:python-django_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 6
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting python-django (Debian package) version 1:1.10.7-2+deb9u5 python-django (Debian package) 1:1.10.7-2+deb9u5 is affected by 6 vulnerabilities: 2 high, 4 medium Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU24846 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-7471
CWE-89 Medium
Public exploit available
No
1:1.10.7-2+deb9u8, 1:1.11.28-1~deb10u1 03.02.2020 SB2020020315
SB2020020316
SB2020021911
and 6 more
#VU23667 - Improper input validation
CVE-2019-19844
CWE-20 High
Public exploit available
No
1:1.10.7-2+deb9u7, 1:1.11.27-1~deb10u1 18.12.2019 SB2019121815
SB2019121916
SB2020010811
and 7 more
#VU19620 - Resource Management Errors
CVE-2019-14235
CWE-399 Medium
No
No
1:1.10.7-2+deb9u6 01.08.2019 SB2019080105
SB2019080204
SB2019080601
and 9 more
#VU19619 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-14234
CWE-89 High
No
No
1:1.10.7-2+deb9u6 01.08.2019 SB2019080105
SB2019080204
SB2019080601
and 9 more
#VU19618 - Resource Management Errors
CVE-2019-14233
CWE-399 Medium
No
No
1:1.10.7-2+deb9u6 01.08.2019 SB2019080105
SB2019080204
SB2019080601
and 12 more
#VU19617 - Resource Management Errors
CVE-2019-14232
CWE-399 Medium
No
No
1:1.10.7-2+deb9u6 01.08.2019 SB2019080105
SB2019080204
SB2019080601
and 14 more