Known vulnerabilities in Django - page 7

Software: Django
Software CPE: cpe:2.3:a:django_software_foundation:django:*:*:*:*:*:*:*:*
Total vulnerabilities: 137
Public exploits: 12
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Django Django is affected by 137 known vulnerabilities: 19 high, 82 medium, 36 low Critical High Medium Low

Vulnerabilities (137)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU42484 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-6044
CWE-79 Low
No
No
- 04.10.2013 SB2013091607
#VU42485 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4249
CWE-79 Low
No
No
- 04.10.2013 SB2013091607
#VU32615 - Improper Authentication
CVE-2013-1443
CWE-287 Medium
No
No
1.4.8 23.09.2013 SB2013092301
SB2013112632
SB2013091629
#VU42562 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2013-4315
CWE-22 Medium
No
No
- 16.09.2013 SB2013091607
SB2013091204
SB2013091629
#VU43328 - Improper input validation
CVE-2012-4520
CWE-20 Medium
No
No
- 19.11.2012 SB2012111905
SB2012101802
#VU32759 - Improper input validation
CVE-2012-3443
CWE-20 Medium
No
No
1.3.2 31.07.2012 SB2012073102
SB2012100131
SB2012073003
#VU32760 - Memory corruption
CVE-2012-3444
CWE-119 Medium
No
No
1.3.2 31.07.2012 SB2012073103
SB2012100132
SB2012073003
#VU32758 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-3442
CWE-79 Low
No
No
1.3.2 31.07.2012 SB2012073101
SB2012100130
SB2012073003
#VU44585 - Resource Management Errors
CVE-2011-4137
CWE-399 Medium
No
No
- 19.10.2011 SB2011011001
SB2011093001
#VU44586 - Improper input validation
CVE-2011-4138
CWE-20 Medium
No
No
- 19.10.2011 SB2011011001
SB2011093001
#VU44587 - Improper input validation
CVE-2011-4139
CWE-20 Medium
No
No
- 19.10.2011 SB2011011001
SB2011093001
#VU44588 - Cross-Site Request Forgery (CSRF)
CVE-2011-4140
CWE-352 Medium
No
No
- 19.10.2011 SB2011011001
SB2011093001
#VU44589 - Improper input validation
CVE-2011-4136
CWE-20 Medium
No
No
- 19.10.2011 SB2011011001
SB2011093001
#VU45322 - Cross-Site Request Forgery (CSRF)
CVE-2011-0696
CWE-352 Medium
No
No
- 14.02.2011 SB2011021401
SB2011020902
SB2011020903
#VU45323 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-0697
CWE-79 Low
No
No
- 14.02.2011 SB2011021401
SB2011020902
SB2011020903
#VU45481 - Permissions, Privileges, and Access Controls
CVE-2010-4534
CWE-264 Low
No
No
- 10.01.2011 SB2011011001
SB2011010311
#VU45482 - Improper input validation
CVE-2010-4535
CWE-20 Medium
No
No
- 10.01.2011 SB2011011001
SB2011010311


Showing elements 121 - 140 out of 137