Skip to content

Djangoproject vulnerabilities

Products

Newest

djangoproject djangoDjango cross-site scripting (XSS) vulnerability via is_safe_url functionCVE-2013-6044Fix available4.3 MediumAugust 23, 2013
djangoproject djangoDjango cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widgetCVE-2013-4249Fix available4.3 MediumAugust 22, 2013
djangoproject django, canonical ubuntu linux +1 moreDjango is vulnerable to Denial of Service attack in formsetCVE-2013-0306Fix available5.0 MediumFebruary 27, 2013
djangoproject django, canonical ubuntu linux +1 moreDjango Data leakage via admin history logCVE-2013-0305Fix available4.0 MediumFebruary 27, 2013
djangoproject djangoDjango Allows Arbitrary URL GenerationCVE-2012-4520Fix available6.4 MediumNovember 18, 2012
djangoproject djangoDjango vulnerable to Improper Restriction of Operations within the Bounds of a Memory BufferCVE-2012-3444Fix available5.0 MediumJuly 31, 2012
djangoproject djangoDjango Image Field Vulnerable to Image Decompression BombsCVE-2012-3443Fix available5.0 MediumJuly 31, 2012
djangoproject djangoDjango Allows Redirect via Data URLCVE-2012-3442Fix available4.3 MediumJuly 31, 2012
djangoproject pistonDjango-piston and Django-tastypie do not properly deserialize YAML dataCVE-2011-4103Fix available7.5 HighNovember 11, 2011
djangoproject djangoDjango Cross-Site Request Forgery vulnerabilityCVE-2011-4140Fix available6.8 MediumOctober 19, 2011
djangoproject djangoDjango Vulnerable to Cache PoisoningCVE-2011-4139Fix available5.0 MediumOctober 19, 2011
djangoproject djangoDjango Might Allow CSRF Requests via URL VerificationCVE-2011-4138Fix available5.0 MediumOctober 19, 2011
djangoproject djangoDenial of service in djangoCVE-2011-4137Fix available5.0 MediumOctober 19, 2011
djangoproject djangoSession manipulation in DjangoCVE-2011-4136Fix available5.8 MediumOctober 19, 2011
djangoproject djangoDirectory traversal in DjangoCVE-2011-0698Fix available7.5 HighFebruary 14, 2011
djangoproject djangoCross-site scripting in djangoCVE-2011-0697Fix available4.3 MediumFebruary 14, 2011
djangoproject djangoCross-site request forgery in DjangoCVE-2011-0696Fix available6.8 MediumFebruary 14, 2011
djangoproject djangoImproper date handling in DjangoCVE-2010-4535Fix available5.0 MediumJanuary 10, 2011
djangoproject djangoImproper query string handling in DjangoCVE-2010-4534Fix available4.0 MediumJanuary 10, 2011
djangoproject djangoCross-site scripting in djangoCVE-2010-3082Fix available4.3 MediumSeptember 14, 2010
djangoproject djangoDjango Regex Algorithmic Complexity Causes Denial of ServiceCVE-2009-3695Fix available5.0 MediumOctober 10, 2009
djangoproject djangoDjango cross-site request forgery (CSRF) vulnerabilityCVE-2008-3909Fix available5.8 MediumSeptember 4, 2008