Vulnerability index

Browse CVEs

129 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Django MEDIUM 5.0
CVE-2011-4137

The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt …

Fix: after 1.2.6
Fix from $1,600 2011-10-19
Django MEDIUM 5.0
CVE-2011-4138

The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity throug…

Fix: after 1.2.6
Fix from $1,600 2011-10-19
Django MEDIUM 5.0
CVE-2011-4139

Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote at…

Fix: after 1.2.6
Fix from $1,600 2011-10-19
Django MEDIUM 5.8
CVE-2011-4136

django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both ses…

Fix: after 1.2.6
Fix from $1,600 2011-10-19
Django HIGH 7.5
CVE-2011-0698

Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute file…

Patch available
Fix from $1,950 2011-02-14
Django MEDIUM 6.8
CVE-2011-0696

Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it eas…

Patch available
Fix from $1,600 2011-02-14
Django MEDIUM 5.0
CVE-2010-4535

The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the…

Fix: after 1.1.2
Fix from $1,600 2011-01-10
Django MEDIUM 5.0
CVE-2009-3695

Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial o…

Patch available
Fix from $1,600 2009-10-13
Django MEDIUM 5.8
CVE-2008-3909

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentic…

Fix: 0.91.3 / 0.95.4+
Fix from $1,600 2008-09-04