python-django vulnerabilities (Ubuntu)
136 vulnerabilities.
python-djangoUbuntuDjango open redirect and possible XSS attack via user-supplied numeric redirect URLs6.1 Mediumpython-djangoUbuntuDjango DNS Rebinding Vulnerability8.1 Highpython-djangoUbuntuDjango user with hardcoded password created when running tests on Oracle9.8 Criticalpython-djangoUbuntuDjango CSRF Protection Bypass7.5 Highpython-djangoUbuntuDjango Cross-site scripting Vulnerability6.1 Mediumpython-djangoUbuntupython-django regressionNo scorepython-djangoUbuntupython-django regressionNo scorepython-djangoUbuntuDjango User Enumeration Vulnerability3.1 Lowpython-djangoUbuntuDjango XSS Vulnerability7.4 Highpython-djangoUbuntuDjango settings leak in date template filter5.0 Mediumpython-djangoUbuntuDenial-of-service possibility in logout() view by filling session store5.0 Mediumpython-djangoUbuntuDjango denial of service via empty session record creation5.0 Mediumpython-djangoUbuntuDjango Vulnerable to HTTP Response Splitting Attack4.3 Mediumpython-djangoUbuntuDjango Denial-of-service by filling session store7.8 Highpython-djangoUbuntuDjango cross-site scripting (XSS) attack via user-supplied redirect URLs4.3 Mediumpython-djangoUbuntuDjango Denial-of-service possibility with strip_tags5.0 Mediumpython-djangoUbuntuDjango database denial-of-service with ModelMultipleChoiceField5.0 Mediumpython-djangoUbuntuDjango DoS in django.views.static.serve5.0 Mediumpython-djangoUbuntuDjango Cross-site Scripting Vulnerability4.3 Mediumpython-djangoUbuntuDjango WSGI Header Spoofing Vulnerability5.0 Mediumpython-djangoUbuntuDjango data leakage via querystring manipulation in admin3.5 Lowpython-djangoUbuntuDjango Middleware Enables Session Hijacking6.0 Mediumpython-djangoUbuntuDjango denial of service via file upload naming4.3 Mediumpython-djangoUbuntuDjango Incorrectly Validates URLs5.8 Mediumpython-djangoUbuntuDjango Allows Open Redirects4.3 Mediumpython-djangoUbuntuDjango Vulnerable to Cache Poisoning6.4 Mediumpython-djangoUbuntupython-django regressionNo scorepython-djangoUbuntuDjango Vulnerable to MySQL Injection10.0 Highpython-djangoUbuntuDjango Reuses Cached CSRF Token5.0 Mediumpython-djangoUbuntuCode Injection in Django5.1 Medium