Known vulnerabilities in Django - page 6

Software: Django
Software CPE: cpe:2.3:a:django_software_foundation:django:*:*:*:*:*:*:*:*
Total vulnerabilities: 141
Public exploits: 12
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Django Django is affected by 141 known vulnerabilities: 19 high, 86 medium, 36 low Critical High Medium Low

Vulnerabilities (141)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16832 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2019-3498
CWE-451 Low
No
No
1.11.18, 2.0.10, 2.1.5 07.01.2019 SB2019010703
SB2019010907
SB2019011001
and 7 more
#VU31195 - Insufficiently Protected Credentials
CVE-2018-16984
CWE-522 Medium
No
No
2.1.2 02.10.2018 SB2018100210
SB2018100114
#VU14175 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-14574
CWE-601 Low
No
No
1.11.15, 2.0.8 01.08.2018 SB2018080209
SB2018080301
SB2018080401
and 12 more
#VU12763 - Improper Access Control
CVE-2016-2048
CWE-284 Low
No
No
- 16.05.2018 SB2016020101
SB2016020201
SB2016020202
#VU10952 - Improper input validation
CVE-2018-7536
CWE-20 Low
No
No
- 13.03.2018 SB2018030605
SB2018030608
SB2018030609
and 12 more
#VU10386 - Exposure of sensitive information to an unauthorized actor
CVE-2018-6188
CWE-200 Low
No
No
- 06.02.2018 SB2018020605
SB2018020708
SB2018022301
and 3 more
#VU8115 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12794
CWE-79 Low
No
No
- 06.09.2017 SB2017090602
SB2018020708
SB2018020216
and 1 more
#VU7106 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-7234
CWE-601 Low
No
No
- 16.06.2017 SB2017061603
SB2017040601
SB2017040602
and 2 more
#VU7105 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7233
CWE-79 Low
No
No
- 16.06.2017 SB2017061603
SB2017040601
SB2017040602
and 12 more
#VU1605 - Information Exposure Through Timing Discrepancy
CVE-2016-2513
CWE-208 Low
No
No
- 21.12.2016 SB2016030103
SB2016030701
SB2016030702
and 13 more
#VU1603 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-2512
CWE-79 Low
No
No
- 21.12.2016 SB2016030103
SB2016030701
SB2016030702
and 13 more
#VU698 - Cross-Site Request Forgery (CSRF)
CVE-2016-7401
CWE-352 Medium
No
No
- 30.09.2016 SB2016100101
SB2016092701
SB2016092702
and 12 more
#VU32379 - Exposure of sensitive information to an unauthorized actor
CVE-2015-8213
CWE-200 Medium
No
No
1.9 07.12.2015 SB2015120701
SB2015112905
SB2015112906
and 2 more
#VU32403 - Resource Management Errors
CVE-2015-5145
CWE-399 Medium
No
No
1.8.3 14.07.2015 SB2015071413
SB2015073106
SB2015103104
and 2 more
#VU32402 - Improper input validation
CVE-2015-5144
CWE-20 Medium
No
No
1.4.21, 1.7.9, 1.8.3 14.07.2015 SB2015071412
SB2015073105
SB2015103104
and 2 more
#VU32401 - Resource Management Errors
CVE-2015-5143
CWE-399 Medium
No
No
1.4.21, 1.7.9, 1.8.3 14.07.2015 SB2015071411
SB2015071415
SB2015103104
and 3 more
#VU40729 - Improper input validation
CVE-2015-3982
CWE-20 Medium
No
No
- 02.06.2015 SB2015060201
SB2015052110
#VU40875 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-2241
CWE-79 Low
No
No
- 12.03.2015 SB2015031204
#VU40937 - Improper input validation
CVE-2015-0219
CWE-20 Medium
No
No
- 16.01.2015 SB2015011603
#VU32537 - Improper input validation
CVE-2014-3730
CWE-20 Medium
No
No
1.4.13 16.05.2014 SB2014051601
SB2014051510
SB2014051607


Showing elements 101 - 120 out of 141