Known vulnerabilities in python-django (Red Hat package) - page 5

Vendor: Red Hat Inc.
Software: python-django (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:python-django_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 106
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python-django (Red Hat package) python-django (Red Hat package) is affected by 106 known vulnerabilities: 16 high, 71 medium, 19 low Critical High Medium Low

Vulnerabilities (106)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80395 - Resource exhaustion
CVE-2023-41164		 CWE-400 Medium
No
No
 3.2.21-1.el9ap, 3.2.22-1.el9ap, 4.2.9-1.el8pc, 4.2.11-1.el8ui 04.09.2023 SB2023090432
SB2023090550
SB2023091166
and 19 more
#VU79815 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4380		 CWE-200 Low
No
No
 3.2.20-1.el9ap 22.08.2023 SB2023082206
#VU77880 - Inefficient Regular Expression Complexity
CVE-2023-36053		 CWE-1333 Medium
No
No
 3.2.20-1.el9ap, 3.2.21-1.el8pc, 4.2.11-1.el8ui 03.07.2023 SB2023070325
SB2023070532
SB2023071502
and 16 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681		 CWE-200 Medium
Available
No
 3.2.20-1.el9ap 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU75707 - Unrestricted Upload of File with Dangerous Type
CVE-2023-31047		 CWE-434 High
No
No
 3.2.19-1.0.1.el8ui, 3.2.21-1.el8pc 03.05.2023 SB2023050350
SB2023050351
SB2023052531
and 11 more
#VU75412 - Resource exhaustion
CVE-2023-30608		 CWE-400 Medium
No
No
 3.2.19-1.0.1.el8ui 21.04.2023 SB2023042135
SB2023051047
SB2023060826
and 13 more
#VU72036 - Error Handling
CVE-2023-23931		 CWE-388 Low
No
No
 3.2.20-1.el9ap 08.02.2023 SB2023020813
SB2023030952
SB2023031419
and 68 more
#VU69545 - Incorrect Default Permissions
CVE-2022-41946		 CWE-276 Low
No
No
 3.2.16-1.el8pc 23.11.2022 SB2022112335
SB2023010922
SB2023011025
and 42 more
#VU68860 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-31163		 CWE-22 Medium
No
No
 1.11.27-4.el7rhgs 31.10.2022 SB2022103147
SB2022103161
SB2022072942
and 6 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 1.11.27-4.el7rhgs 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU64905 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-34265		 CWE-89 High
Available
No
 3.2.14-3.el8ui 04.07.2022 SB2022070425
SB2022070438
SB2022080147
and 8 more
#VU64863 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-30123		 CWE-78 High
No
No
 1.11.27-4.el7rhgs 02.07.2022 SB2022070222
SB2022070430
SB2022072530
and 14 more
#VU64862 - Improper input validation
CVE-2022-30122		 CWE-20 Medium
No
No
 1.11.27-4.el7rhgs 02.07.2022 SB2022070222
SB2022070430
SB2022072530
and 8 more
#VU62051 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-28347		 CWE-89 High
No
No
 3.2.13-1.el8pc, 3.2.13-2.el8ui 11.04.2022 SB2022041110
SB2022041125
SB2022041267
and 8 more
#VU62050 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-28346		 CWE-89 High
Available
No
 3.2.13-1.el8pc, 3.2.13-2.el8ui 11.04.2022 SB2022041110
SB2022041125
SB2022041126
and 14 more
#VU61798 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24790		 CWE-444 Medium
No
No
 1.11.27-4.el7rhgs 01.04.2022 SB2022040112
SB2022052603
SB2022092241
and 12 more
#VU28581 - Server-Side Request Forgery (SSRF)
CVE-2020-13379		 CWE-918 Medium
Available
No
 1.11.27-1.el7rhgs 04.06.2020 SB2020060421
SB2020062606
SB2020062610
and 10 more
#VU19618 - Resource Management Errors
CVE-2019-14233		 CWE-399 Medium
No
No
 2.1.11-1.el8ost 01.08.2019 SB2019080105
SB2019080204
SB2019080601
and 12 more
#VU19617 - Resource Management Errors
CVE-2019-14232		 CWE-399 Medium
No
No
 2.1.11-1.el8ost 01.08.2019 SB2019080105
SB2019080204
SB2019080601
and 14 more
#VU18967 - Cleartext Transmission of Sensitive Information
CVE-2019-12781		 CWE-319 Medium
No
No
 2.1.11-1.el8ost 02.07.2019 SB2019070211
SB2019070601
SB2019070602
and 8 more


Showing elements 81 - 100 out of 106