Known vulnerabilities in Django - page 6

Software: Django
Software CPE: cpe:2.3:a:django_software_foundation:django:*:*:*:*:*:*:*:*
Total vulnerabilities: 137
Public exploits: 12
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Django Django is affected by 137 known vulnerabilities: 19 high, 82 medium, 36 low Critical High Medium Low

Vulnerabilities (137)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12763 - Improper Access Control
CVE-2016-2048
CWE-284 Low
No
No
- 16.05.2018 SB2016020101
SB2016020201
SB2016020202
#VU10386 - Exposure of sensitive information to an unauthorized actor
CVE-2018-6188
CWE-200 Low
No
No
- 06.02.2018 SB2018020605
SB2018020708
SB2018022301
and 3 more
#VU8115 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12794
CWE-79 Low
No
No
- 06.09.2017 SB2017090602
SB2018020708
SB2018020216
and 1 more
#VU7106 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-7234
CWE-601 Low
No
No
- 16.06.2017 SB2017061603
SB2017040601
SB2017040602
and 2 more
#VU7105 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7233
CWE-79 Low
No
No
- 16.06.2017 SB2017061603
SB2017040601
SB2017040602
and 12 more
#VU1605 - Information Exposure Through Timing Discrepancy
CVE-2016-2513
CWE-208 Low
No
No
- 21.12.2016 SB2016030103
SB2016030701
SB2016030702
and 13 more
#VU1603 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-2512
CWE-79 Low
No
No
- 21.12.2016 SB2016030103
SB2016030701
SB2016030702
and 13 more
#VU698 - Cross-Site Request Forgery (CSRF)
CVE-2016-7401
CWE-352 Medium
No
No
- 30.09.2016 SB2016100101
SB2016092701
SB2016092702
and 12 more
#VU32379 - Exposure of sensitive information to an unauthorized actor
CVE-2015-8213
CWE-200 Medium
No
No
1.9 07.12.2015 SB2015120701
SB2015112905
SB2015112906
and 2 more
#VU32403 - Resource Management Errors
CVE-2015-5145
CWE-399 Medium
No
No
1.8.3 14.07.2015 SB2015071413
SB2015073106
SB2015103104
and 2 more
#VU32402 - Improper input validation
CVE-2015-5144
CWE-20 Medium
No
No
1.4.21, 1.7.9, 1.8.3 14.07.2015 SB2015071412
SB2015073105
SB2015103104
and 2 more
#VU32401 - Resource Management Errors
CVE-2015-5143
CWE-399 Medium
No
No
1.4.21, 1.7.9, 1.8.3 14.07.2015 SB2015071411
SB2015071415
SB2015103104
and 3 more
#VU40729 - Improper input validation
CVE-2015-3982
CWE-20 Medium
No
No
- 02.06.2015 SB2015060201
SB2015052110
#VU40875 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-2241
CWE-79 Low
No
No
- 12.03.2015 SB2015031204
#VU40937 - Improper input validation
CVE-2015-0219
CWE-20 Medium
No
No
- 16.01.2015 SB2015011603
#VU32537 - Improper input validation
CVE-2014-3730
CWE-20 Medium
No
No
1.4.13 16.05.2014 SB2014051601
SB2014051510
SB2014051607
#VU33846 - Improper input validation
CVE-2014-1418
CWE-20 Medium
No
No
1.4.13 16.05.2014 SB2014051602
SB2014051509
SB2014062602
and 1 more
#VU32541 - Cross-Site Request Forgery (CSRF)
CVE-2014-0473
CWE-352 Medium
No
No
1.7 23.04.2014 SB2014042302
SB2014042603
SB2014062602
and 1 more
#VU32542 - Resource Management Errors
CVE-2014-0474
CWE-399 High
No
No
1.7 23.04.2014 SB2014042303
SB2014042604
SB2014062602
and 1 more
#VU32540 - Improper Control of Generation of Code ('Code Injection')
CVE-2014-0472
CWE-94 Medium
No
No
1.7 23.04.2014 SB2014042301
SB2014042602
SB2014062602


Showing elements 101 - 120 out of 137