Known vulnerabilities in python-django - page 3

Vendor: openEuler
Software: python-django
Software CPE: cpe:2.3:o:openeuler:python-django:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 61
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python-django python-django is affected by 61 known vulnerabilities: 11 high, 38 medium, 12 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95445 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-42005		 CWE-89 High
No
No
 2.2.27-12, 4.2.15-1 07.08.2024 SB2024080728
SB2024080771
SB2024080772
and 12 more
#VU95444 - Improper input validation
CVE-2024-41991		 CWE-20 Medium
No
No
 2.2.27-12, 4.2.15-1 07.08.2024 SB2024080728
SB2024080771
SB2024080772
and 12 more
#VU95443 - Improper input validation
CVE-2024-41990		 CWE-20 Medium
No
No
 2.2.27-12, 4.2.15-1 07.08.2024 SB2024080728
SB2024080771
SB2024080772
and 11 more
#VU94188 - Improper input validation
CVE-2024-39614		 CWE-20 Medium
Available
No
 2.2.27-12, 4.2.14-1, 4.2.15-1 12.07.2024 SB2024071225
SB2024071228
SB2024071229
and 15 more
#VU94182 - Improper input validation
CVE-2024-38875		 CWE-20 Medium
No
No
 2.2.27-12, 4.2.14-1, 4.2.15-1 12.07.2024 SB2024071225
SB2024071228
SB2024071229
and 13 more
#VU87033 - Inefficient Regular Expression Complexity
CVE-2024-27351		 CWE-1333 Medium
No
No
 2.2.27-11 04.03.2024 SB2024030431
SB2024030441
SB2024030442
and 21 more
#VU86190 - Resource exhaustion
CVE-2024-24680		 CWE-400 Medium
No
No
 2.2.27-10, 3.2.12-9 06.02.2024 SB2024020643
SB2024020644
SB2024021223
and 17 more
#VU82638 - Resource exhaustion
CVE-2023-46695		 CWE-400 Medium
No
No
 2.2.27-9 01.11.2023 SB2023110106
SB2024013141
SB2023111749
and 1 more
#VU81657 - Resource exhaustion
CVE-2023-43665		 CWE-400 Medium
No
No
 2.2.27-8 05.10.2023 SB2023100544
SB2023100545
SB2023100546
and 16 more
#VU80395 - Resource exhaustion
CVE-2023-41164		 CWE-400 Medium
No
No
 2.2.27-7 04.09.2023 SB2023090432
SB2023090550
SB2023091166
and 19 more
#VU77880 - Inefficient Regular Expression Complexity
CVE-2023-36053		 CWE-1333 Medium
No
No
 2.2.27-6 03.07.2023 SB2023070325
SB2023070532
SB2023071502
and 16 more
#VU75707 - Unrestricted Upload of File with Dangerous Type
CVE-2023-31047		 CWE-434 High
No
No
 2.2.27-5 03.05.2023 SB2023050350
SB2023050351
SB2023052531
and 11 more
#VU72330 - Resource exhaustion
CVE-2023-24580		 CWE-400 Medium
No
No
 2.2.27-4 16.02.2023 SB2023021645
SB2023021648
SB2023031032
and 15 more
#VU71737 - Improper input validation
CVE-2023-23969		 CWE-20 Medium
No
No
 2.2.27-2, 2.2.27-3, 3.2.12-1, 3.2.12-2 01.02.2023 SB2023020139
SB2023020143
SB2023020151
and 13 more
#VU62050 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-28346		 CWE-89 High
Available
No
 2.2.27-2 11.04.2022 SB2022041110
SB2022041125
SB2022041126
and 14 more
#VU60198 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23833		 CWE-835 Medium
No
No
 2.2.27-1, 2.2.27-2 01.02.2022 SB2022020110
SB2022041954
SB2022020334
and 11 more
#VU60197 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-22818		 CWE-79 Medium
Available
No
 2.2.27-1, 2.2.27-2 01.02.2022 SB2022020110
SB2022041954
SB2022020334
and 12 more
#VU59181 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-45452		 CWE-22 Low
No
No
 2.2.27-1, 2.2.27-2 04.01.2022 SB2022010412
SB2022031201
SB2022011843
and 7 more
#VU59180 -
CVE-2021-45116		 Low
No
No
 2.2.27-1, 2.2.27-2 04.01.2022 SB2022010412
SB2022031201
SB2022011843
and 6 more
#VU59179 - Resource Management Errors
CVE-2021-45115		 CWE-399 Medium
No
No
 2.2.27-1, 2.2.27-2 04.01.2022 SB2022010412
SB2022031201
SB2022011843
and 6 more


Showing elements 41 - 60 out of 61