Known vulnerabilities in Django - page 7

Software: Django
Software CPE: cpe:2.3:a:django_software_foundation:django:*:*:*:*:*:*:*:*
Total vulnerabilities: 141
Public exploits: 12
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Django Django is affected by 141 known vulnerabilities: 19 high, 86 medium, 36 low Critical High Medium Low

Vulnerabilities (141)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU33846 - Improper input validation
CVE-2014-1418
CWE-20 Medium
No
No
1.4.13 16.05.2014 SB2014051602
SB2014051509
SB2014062602
and 1 more
#VU32541 - Cross-Site Request Forgery (CSRF)
CVE-2014-0473
CWE-352 Medium
No
No
1.7 23.04.2014 SB2014042302
SB2014042603
SB2014062602
and 1 more
#VU32542 - Resource Management Errors
CVE-2014-0474
CWE-399 High
No
No
1.7 23.04.2014 SB2014042303
SB2014042604
SB2014062602
and 1 more
#VU32540 - Improper Control of Generation of Code ('Code Injection')
CVE-2014-0472
CWE-94 Medium
No
No
1.7 23.04.2014 SB2014042301
SB2014042602
SB2014062602
#VU42484 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-6044
CWE-79 Low
No
No
- 04.10.2013 SB2013091607
#VU42485 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4249
CWE-79 Low
No
No
- 04.10.2013 SB2013091607
#VU32615 - Improper Authentication
CVE-2013-1443
CWE-287 Medium
No
No
1.4.8 23.09.2013 SB2013092301
SB2013112632
SB2013091629
#VU42562 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2013-4315
CWE-22 Medium
No
No
- 16.09.2013 SB2013091607
SB2013091204
SB2013091629
#VU43328 - Improper input validation
CVE-2012-4520
CWE-20 Medium
No
No
- 19.11.2012 SB2012111905
SB2012101802
#VU32759 - Improper input validation
CVE-2012-3443
CWE-20 Medium
No
No
1.3.2 31.07.2012 SB2012073102
SB2012100131
SB2012073003
#VU32760 - Memory corruption
CVE-2012-3444
CWE-119 Medium
No
No
1.3.2 31.07.2012 SB2012073103
SB2012100132
SB2012073003
#VU32758 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-3442
CWE-79 Low
No
No
1.3.2 31.07.2012 SB2012073101
SB2012100130
SB2012073003
#VU44585 - Resource Management Errors
CVE-2011-4137
CWE-399 Medium
No
No
- 19.10.2011 SB2011011001
SB2011093001
#VU44586 - Improper input validation
CVE-2011-4138
CWE-20 Medium
No
No
- 19.10.2011 SB2011011001
SB2011093001
#VU44587 - Improper input validation
CVE-2011-4139
CWE-20 Medium
No
No
- 19.10.2011 SB2011011001
SB2011093001
#VU44588 - Cross-Site Request Forgery (CSRF)
CVE-2011-4140
CWE-352 Medium
No
No
- 19.10.2011 SB2011011001
SB2011093001
#VU44589 - Improper input validation
CVE-2011-4136
CWE-20 Medium
No
No
- 19.10.2011 SB2011011001
SB2011093001
#VU45322 - Cross-Site Request Forgery (CSRF)
CVE-2011-0696
CWE-352 Medium
No
No
- 14.02.2011 SB2011021401
SB2011020902
SB2011020903
#VU45323 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-0697
CWE-79 Low
No
No
- 14.02.2011 SB2011021401
SB2011020902
SB2011020903
#VU45481 - Permissions, Privileges, and Access Controls
CVE-2010-4534
CWE-264 Low
No
No
- 10.01.2011 SB2011011001
SB2011010311


Showing elements 121 - 140 out of 141