Skip to contentDjangoproject vulnerabilities
Newest
- djangoproject django, fedoraproject fedora +1 moreDjango allows unintended model editingCVE-2019-19118Fix available6.5 Medium
- djangoproject django, opensuse leap +1 moreUncontrolled Recursion in DjangoCVE-2019-14235Fix available7.5 High
- djangoproject django, debian linux, fedoraproject fedora +2 moreSQL Injection in DjangoCVE-2019-14234Public exploitFix availableEPSS 47.7%9.8 Critical
- djangoproject django, opensuse leap +1 moreDjango Denial-of-service in strip_tags()CVE-2019-14233Fix available7.5 High
- djangoproject django, djangoblog project djangoblog, opensuse leap +2 moreDjango Denial-of-service in django.utils.text.TruncatorCVE-2019-14232Fix available7.5 High
- djangoproject django, canonical ubuntu linux, debian linux +2 moreDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPSCVE-2019-12781Fix available5.3 Medium
- djangoproject djangoDjango Cross-site Scripting in AdminURLFieldWidgetCVE-2019-12308Fix available6.1 Medium
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 moreUncontrolled Memory Consumption in DjangoCVE-2019-6975Fix available7.5 High
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreImproper Input Validation in DjangoCVE-2019-3498Fix available6.5 Medium
- djangoproject djangoDjango allows unprivileged users to read the password hashes of arbitrary accountsCVE-2018-16984Fix available4.9 Medium
- djangoproject django, canonical ubuntu linux, debian linux +2 moreDjango open redirectCVE-2018-14574Fix availableEPSS 25.5%6.1 Medium
- djangoproject django, canonical ubuntu linux, debian linux +2 moreDjango Denial-of-service possibility in truncatechars_html and truncatewords_html template filtersCVE-2018-7537Fix available5.3 Medium
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango denial-of-service possibility in urlize and urlizetrunc template filtersCVE-2018-7536Fix available5.3 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango vulnerable to information leakage in AuthenticationFormCVE-2018-6188Fix available7.5 High
- djangoproject djangoDjango vulnerable to XSS on 500 pagesCVE-2017-12794Fix availableEPSS 23.6%6.1 Medium
- djangoproject djangoDjango open redirectCVE-2017-7234Fix available6.1 Medium
- djangoproject djangoDjango open redirect and possible XSS attack via user-supplied numeric redirect URLsCVE-2017-7233Fix available6.1 Medium
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 moreDjango DNS Rebinding VulnerabilityCVE-2016-9014Fix available8.1 High
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 moreDjango user with hardcoded password created when running tests on OracleCVE-2016-9013Fix available9.8 Critical
- djangoproject django, canonical ubuntu linux, debian linux +2 moreDjango CSRF Protection BypassCVE-2016-7401Fix available7.5 High
- djangoproject django, debian linux +1 moreDjango Cross-site scripting VulnerabilityCVE-2016-6186Public exploitFix available6.1 Medium
- djangoproject djangoDjango User Enumeration VulnerabilityCVE-2016-2513Fix available3.1 Low
- djangoproject djangoDjango XSS VulnerabilityCVE-2016-2512Fix available7.4 High
- djangoproject djangoDjango Access Restrictions BypassCVE-2016-2048Fix available5.5 Medium
- djangoproject djangoDjango settings leak in date template filterCVE-2015-8213Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux, oracle solaris +2 moreDenial-of-service possibility in logout() view by filling session storeCVE-2015-5964Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux, oracle solaris +2 moreDjango denial of service via empty session record creationCVE-2015-5963Fix available5.0 Medium
- djangoproject djangoDjango ReDoS in validators.URLValidatorCVE-2015-5145Fix available7.8 High
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango Vulnerable to HTTP Response Splitting AttackCVE-2015-5144Fix available4.3 Medium
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango Denial-of-service by filling session storeCVE-2015-5143Fix available7.8 High
- djangoproject djangoDjango allows user sessions hijacking via an empty string in the session keyCVE-2015-3982Fix available5.0 Medium
- djangoproject djangoDjango Cross-site Scripting VulnerabilityCVE-2015-2241Fix available4.3 Medium
- djangoproject tastypieDjango Tastypie Improper Deserialization of YAML DataCVE-2011-4104Fix available7.5 High
- djangoproject django, canonical ubuntu linux, debian linux +3 more +5 moreDjango cross-site scripting (XSS) attack via user-supplied redirect URLsCVE-2015-2317Fix available4.3 Medium
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreDjango Denial-of-service possibility with strip_tagsCVE-2015-2316Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango database denial-of-service with ModelMultipleChoiceFieldCVE-2015-0222Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango DoS in django.views.static.serveCVE-2015-0221Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango Cross-site Scripting VulnerabilityCVE-2015-0220Fix available4.3 Medium
- djangoproject djangoDjango WSGI Header Spoofing VulnerabilityCVE-2015-0219Fix available5.0 Medium
- djangoproject django, opensuse +1 moreDjango data leakage via querystring manipulation in adminCVE-2014-0483Fix available3.5 Low
- djangoproject django, opensuse +1 moreDjango Middleware Enables Session HijackingCVE-2014-0482Fix available6.0 Medium
- djangoproject django, debian linux, opensuse +2 moreDjango denial of service via file upload namingCVE-2014-0481Fix available4.3 Medium
- djangoproject django, opensuse +1 moreDjango Incorrectly Validates URLsCVE-2014-0480Fix available5.8 Medium
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango Allows Open RedirectsCVE-2014-3730Fix available4.3 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango Vulnerable to Cache PoisoningCVE-2014-1418Fix available6.4 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango Vulnerable to MySQL InjectionCVE-2014-0474Fix available10.0 High
- djangoproject django, canonical ubuntu linux +1 moreDjango Reuses Cached CSRF TokenCVE-2014-0473Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux +1 moreCode Injection in DjangoCVE-2014-0472Public exploitFix available5.1 Medium
- djangoproject djangoDjango Denial of Service Vulnerability in the authentication frameworkCVE-2013-1443Fix available5.0 Medium
- djangoproject djangoDjango Directory Traversal via ssi template tagCVE-2013-4315Fix available5.0 Medium
- Show moreLoading…