Known vulnerabilities in python-django (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
python-django (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:python-django_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
106
Public exploits:
9
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
5.2.12-2.el10ap
4.2.28-0.1.el8pc
4.2.28-0.1.el9pc
4.2.27-2.el10ap
4.2.26-2.el10ap
4.2.24-0.1.el8pc
4.2.24-0.1.el9pc
3.2.12-9.el9ost
2.2.24-12.el9ost
4.2.24-1.el9ap
2.2.24-9.el9ost
4.2.19-1.el8pc
4.2.19-1.el9pc
4.2.15-1.el8ui
3.2.12-8.el9ost
4.2.16-1.el8pc
4.2.16-1.el9pc
4.2.15-1.el8pc
4.2.16-1.el9ap
4.2.15-1.el9ap
2.2.24-8.el9ost
4.2.9-1.el8pc
4.2.11-1.el8ui
4.2.11-1.el9ap
3.2.22-1.el8pc
4.2.10-1.el9ap
3.2.21-1.el8pc
3.2.22-1.el9ap
3.2.21-1.el9ap
3.2.20-1.el9ap
3.2.19-1.0.1.el8ui
3.2.18-1.0.1.el8ui
3.2.16-1.el8pc
1.11.27-4.el7rhgs
3.2.16-1.0.1.el8ui
2.0.10-1.el8ost
1.11.27-1.el7ost
3.2.14-2.el8pc
3.2.14-3.el8ui
3.2.13-2.el8ui
3.2.13-1.el8pc
1.11.29-1.el7sat
1.11.27-3.el7ost
1.11.13-1.el7ui
1.11.27-1.el7rhgs
2.1.11-1.el8ost
2.1.7-1.el8
2.0.10-1.el8
1.11.13-1.el7sat
1.11.15-4.el7rhgs
1.11.11-1.el7ost
1.8.19-1.el7ost
1.11.11-1.el7sat
1.6.11-7.el7ost
1.8.18-1.el7ost
1.6.11-1.el6ost
1.6.11-3.el6ost
1.6.11-4.el6ost
1.6.11-4.el7ost
1.6.11-5.el6ost
1.8.11-1.el7ost
1.6.11-5.el7ost
1.6.11-5.el6sat
1.6.11-5.el7sat
1.8.14-1.el7ost
1.6.11-6.el6ost
1.6.11-6.el7ost
1.8.15-1.el7ost
1.11.13-1.el7
1.6.10-1.el7
1.11.15-4.el7
1.11.13-2.el7
1.11.11-1.el7
1.11.10-1.el7
1.8.19-1.el7
1.8.15-1.el7
1.8.14-1.el7
1.8.11-1.el7
1.8.7-1.el7
1.8.3-1.el7
1.6.11-7.el7
1.6.11-6.el7
1.6.11-5.el7
1.6.11-4.el7
1.6.11-3.el7
1.6.11-2.el7
1.6.5-1.el7
1.8.4-1.el7
1.8.18-1.el7
1.6.10-3.el6
1.6.11-6.el6
1.6.11-5.el6
1.6.11-4.el6
1.6.11-3.el6
1.6.11-1.el6
1.6.5-2.el6
Vulnerabilities (106)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU99568 - Missing release of memory after effective lifetime CVE-2024-8376 |
CWE-401 | Medium | 4.2.16-1.el8pc, 4.2.16-1.el9pc | 31.10.2024 |
SB20241031109 SB2024110111 SB2024110112 and 7 more |
||
| #VU97631 - Insecure inherited permissions CVE-2024-7143 |
CWE-277 | Medium | 4.2.16-1.el9ap | 20.09.2024 |
SB2024092030 SB2024092068 SB2025060536 and 2 more |
||
| #VU97594 - Improper Authentication CVE-2024-7923 |
CWE-287 | High | 4.2.16-1.el8pc, 4.2.16-1.el9pc | 19.09.2024 |
SB2024092064 SB2024092065 SB2024092066 and 1 more |
||
| #VU97593 - Improper Authentication CVE-2024-7012 |
CWE-287 | High | 4.2.16-1.el8pc, 4.2.16-1.el9pc | 19.09.2024 |
SB2024092064 SB2024092065 SB2024092066 and 1 more |
||
| #VU95445 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-42005 |
CWE-89 | High | 4.2.15-1.el9ap, 4.2.15-1.el8ui, 4.2.16-1.el8pc, 4.2.16-1.el9pc | 07.08.2024 |
SB2024080728 SB2024080771 SB2024080772 and 12 more |
||
| #VU95444 - Improper input validation CVE-2024-41991 |
CWE-20 | Medium | 4.2.15-1.el9ap, 4.2.15-1.el8pc, 4.2.15-1.el8ui | 07.08.2024 |
SB2024080728 SB2024080771 SB2024080772 and 12 more |
||
| #VU95443 - Improper input validation CVE-2024-41990 |
CWE-20 | Medium | 4.2.15-1.el9ap, 4.2.15-1.el8ui | 07.08.2024 |
SB2024080728 SB2024080771 SB2024080772 and 11 more |
||
| #VU95442 - Resource exhaustion CVE-2024-41989 |
CWE-400 | High | 4.2.15-1.el9ap, 4.2.15-1.el8ui | 07.08.2024 |
SB2024080722 SB2024080728 SB2024080771 and 14 more |
||
| #VU94188 - Improper input validation CVE-2024-39614 |
CWE-20 | Medium | 3.2.12-8.el9ost, 4.2.15-1.el9ap, 4.2.15-1.el8ui, 4.2.16-1.el8pc, 4.2.16-1.el9pc | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 15 more |
||
| #VU94184 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-39330 |
CWE-22 | Medium | 3.2.12-8.el9ost, 4.2.15-1.el9ap, 4.2.16-1.el8pc, 4.2.16-1.el9pc | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 13 more |
||
| #VU94183 - Exposure of sensitive information to an unauthorized actor CVE-2024-39329 |
CWE-200 | Medium | 3.2.12-8.el9ost, 4.2.15-1.el9ap, 4.2.16-1.el8pc, 4.2.16-1.el9pc | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 14 more |
||
| #VU92406 - Incorrect Regular Expression CVE-2024-4067 |
CWE-185 | Medium | 4.2.16-1.el8pc, 4.2.16-1.el9pc | 20.06.2024 |
SB20240620121 SB2024062832 SB2024070501 and 41 more |
||
| #VU92262 - Exposure of sensitive information to an unauthorized actor CVE-2024-37891 |
CWE-200 | Low | 4.2.16-1.el9ap, 4.2.16-1.el8pc, 4.2.16-1.el9pc | 19.06.2024 |
SB2024061955 SB20240625146 SB2024062605 and 194 more |
||
| #VU91833 - Cryptographic Issues CVE-2024-33663 |
CWE-310 | Medium | 4.2.15-1.el9ap | 12.06.2024 |
SB2024061202 SB2024090612 SB2024110708 and 2 more |
||
| #VU91160 - Improper input validation CVE-2024-24790 |
CWE-20 | Medium | 4.2.15-1.el8pc, 4.2.16-1.el9ap | 05.06.2024 |
SB2024060520 SB2024060635 SB2024060729 and 90 more |
||
| #VU89296 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-24788 |
CWE-835 | Medium | 4.2.16-1.el9ap | 09.05.2024 |
SB2024050936 SB2024050937 SB2024051029 and 43 more |
||
| #VU89167 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-1135 |
CWE-444 | Medium | 4.2.15-1.el8pc, 4.2.15-1.el8ui | 06.05.2024 |
SB2024050631 SB2024050632 SB2024050633 and 40 more |
||
| #VU89132 - Improper Handling of Case Sensitivity CVE-2024-32879 |
CWE-178 | Medium | 4.2.15-1.el9ap | 03.05.2024 |
SB2024050319 SB2024050321 SB2024061929 and 3 more |
||
| #VU87734 - Resource exhaustion CVE-2024-28863 |
CWE-400 | Medium | 4.2.16-1.el8pc, 4.2.16-1.el9pc | 22.03.2024 |
SB2024032234 SB2024052306 SB2024061114 and 30 more |
||
| #VU87129 - NULL Pointer Dereference CVE-2024-26130 |
CWE-476 | Medium | 4.2.15-1.el8pc, 4.2.15-1.el8ui | 05.03.2024 |
SB2024030534 SB2024030535 SB2024030546 and 41 more |
Showing elements 21 - 40 out of 106