Skip to contentDjangoproject Django vulnerabilities
- djangoproject djangoDjango SQL injection in HasKey(lhs, rhs) on OracleCVE-2024-53908Fix available9.8 Critical
- djangoproject djangoDjango denial-of-service in django.utils.html.strip_tags()CVE-2024-53907Fix available7.5 High
- djangoproject djangoDjango allows enumeration of user e-mail addressesCVE-2024-45231Fix available5.3 Medium
- djangoproject djangoDjango vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filtersCVE-2024-45230Fix availableEPSS 25.8%7.5 High
- djangoproject djangoDjango SQL injection vulnerabilityCVE-2024-42005Fix available7.3 High
- djangoproject djangoDjango vulnerable to denial-of-service attackCVE-2024-41991Fix available7.5 High
- djangoproject djangoDjango vulnerable to a denial-of-service attackCVE-2024-41990Fix available7.5 High
- djangoproject djangoDjango memory consumption vulnerabilityCVE-2024-41989Fix available7.5 High
- djangoproject djangoDjango vulnerable to Denial of ServiceCVE-2024-39614Public exploitFix availableEPSS 28.6%7.5 High
- djangoproject djangoDjango Path Traversal vulnerabilityCVE-2024-39330Fix available4.3 Medium
- djangoproject djangoDjango vulnerable to user enumeration attackCVE-2024-39329Fix available5.3 Medium
- djangoproject djangoDjango vulnerable to Denial of ServiceCVE-2024-38875Fix available7.5 High
- djangoproject django, django-rest-framework django rest framework +1 moreRegular expression denial-of-service in DjangoCVE-2024-27351Fix available5.3 Medium
- djangoproject djangoDjango denial-of-service attack in the intcomma template filterCVE-2024-24680Fix available7.5 High
- djangoproject djangoDjango potential denial of service vulnerability in UsernameField on WindowsCVE-2023-46695Fix availableEPSS 53.4%7.5 High
- djangoproject django, fedoraproject fedora +1 moreDjango Denial-of-service in django.utils.text.TruncatorCVE-2023-43665Fix available7.5 High
- djangoproject django, fedoraproject fedora +1 moreDjango Denial of service vulnerability in django.utils.encoding.uri_to_iriCVE-2023-41164Fix available7.5 High
- djangoproject django, debian linux, fedoraproject fedora +2 moreDjango has regular expression denial of service vulnerability in EmailValidator/URLValidatorCVE-2023-36053Fix available7.5 High
- djangoproject django, fedoraproject fedora +1 moreDjango bypasses validation when using one form field to upload multiple filesCVE-2023-31047Fix available9.8 Critical
- djangoproject django, debian linux +1 moreResource exhaustion in DjangoCVE-2023-24580Fix availableEPSS 62.6%7.5 High
- djangoproject django, debian linux +1 moreDjango contains Uncontrolled Resource Consumption via cached headerCVE-2023-23969Fix availableEPSS 47.4%7.5 High
- djangoproject djangoDjango denial-of-service vulnerability in internationalized URLsCVE-2022-41323Fix available7.5 High
- djangoproject django, debian linux +1 moreDjango vulnerable to Reflected File Download attackCVE-2022-36359Fix available8.8 High
- djangoproject djangoDjango `Trunc()` and `Extract()` database functions vulnerable to SQL InjectionCVE-2022-34265Public exploitFix availableEPSS 73.6%9.8 Critical
- djangoproject django, debian linux +1 moreSQL Injection in DjangoCVE-2022-28347Fix available9.8 Critical
- djangoproject django, debian linux +1 moreSQL Injection in DjangoCVE-2022-28346Public exploitFix availableEPSS 18.7%9.8 Critical
- djangoproject django, debian linux, fedoraproject fedora +2 moreInfinite Loop in DjangoCVE-2022-23833Fix availableEPSS 49.5%7.5 High
- djangoproject django, debian linux, fedoraproject fedora +2 moreCross-site Scripting in DjangoCVE-2022-22818Public exploitFix available6.1 Medium
- djangoproject django, fedoraproject fedora +1 moreDirectory-traversal in DjangoCVE-2021-45452Fix available5.3 Medium
- djangoproject django, fedoraproject fedora +1 moreInformation disclosure in DjangoCVE-2021-45116Fix available7.5 High
- djangoproject django, fedoraproject fedora +1 moreDenial-of-service in DjangoCVE-2021-45115Fix available7.5 High
- djangoproject django, canonical ubuntu linux, debian linux +2 more +4 morePotential bypass of an upstream access control based on URL paths in DjangoCVE-2021-44420Fix available7.3 High
- djangoproject django, fedoraproject fedora +1 moreSQL Injection in DjangoCVE-2021-35042Public exploitFix availableEPSS 44.4%9.8 Critical
- djangoproject django, fedoraproject fedora +1 moreDjango Access Control Bypass possibly leading to SSRF, RFI, and LFI attacksCVE-2021-33571Fix available7.5 High
- djangoproject django, fedoraproject fedora +1 morePath Traversal in DjangoCVE-2021-33203Fix available4.9 Medium
- djangoproject django, fedoraproject fedora +1 moreHeader injection possible in DjangoCVE-2021-32052Fix available6.1 Medium
- djangoproject django, debian linux, fedoraproject fedora +2 morePath Traversal in DjangoCVE-2021-31542Fix available7.5 High
- djangoproject django, debian linux, fedoraproject fedora +2 moreDirectory Traversal in DjangoCVE-2021-28658Fix available5.3 Medium
- python, debian linux, djangoproject django +12 more +14 moreWeb Cache PoisoningCVE-2021-23336Fix availableEPSS 41.1%5.9 Medium
- djangoproject django, fedoraproject fedora, netapp snapcenter +2 moreDjango Directory Traversal via archive.extractCVE-2021-3281Public exploitFix available5.3 Medium
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreDjango Incorrect Default PermissionsCVE-2020-24584Fix available7.5 High
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreDjango Incorrect Default PermissionsCVE-2020-24583Fix available7.5 High
- djangoproject django, canonical ubuntu linux, debian linux +4 more +6 moreXSS in DjangoCVE-2020-13596Fix available6.1 Medium
- djangoproject django, canonical ubuntu linux, debian linux +4 more +6 moreData leakage via cache key collision in DjangoCVE-2020-13254Public exploitFix available5.9 Medium
- djangoproject django, canonical ubuntu linux, debian linux +2 more +4 moreSQL injection in DjangoCVE-2020-9402Fix availableEPSS 24.0%8.8 High
- djangoproject djangoSQL injection in DjangoCVE-2020-7471Public exploitFix availableEPSS 65.6%9.8 Critical
- djangoproject django, canonical ubuntu linux +1 moreDjango Potential account hijack via password reset formCVE-2019-19844Public exploitFix availableEPSS 53.6%9.8 Critical
- djangoproject django, fedoraproject fedora +1 moreDjango allows unintended model editingCVE-2019-19118Fix available6.5 Medium
- djangoproject django, opensuse leap +1 moreUncontrolled Recursion in DjangoCVE-2019-14235Fix available7.5 High
- djangoproject django, debian linux, fedoraproject fedora +2 moreSQL Injection in DjangoCVE-2019-14234Public exploitFix availableEPSS 47.7%9.8 Critical
- Show moreLoading…