Browse CVEs

MEDIUM 5.0 CVE-2011-4137 The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt … Django after 1.2.6 Fix from $1,6002011-10-19 MEDIUM 5.0 CVE-2011-4138 The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity throug… Django after 1.2.6 Fix from $1,6002011-10-19 MEDIUM 5.0 CVE-2011-4139 Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote at… Django after 1.2.6 Fix from $1,6002011-10-19 MEDIUM 5.8 CVE-2011-4136 django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both ses… Django after 1.2.6 Fix from $1,6002011-10-19 HIGH 7.5 CVE-2011-0698 Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute file… Django Patch available Fix from $1,9502011-02-14 MEDIUM 6.8 CVE-2011-0696 Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it eas… Django Patch available Fix from $1,6002011-02-14 MEDIUM 5.0 CVE-2010-4535 The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the… Django after 1.1.2 Fix from $1,6002011-01-10 MEDIUM 5.0 CVE-2009-3695 Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial o… Django Patch available Fix from $1,6002009-10-13 MEDIUM 5.8 CVE-2008-3909 The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentic… Django 0.91.3 / 0.95.4+ Fix from $1,6002008-09-04