Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 2 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Django MEDIUM 6.1

CVE-2017-7233

Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. T…

Mitigation only

Fix from $1,600 2017-04-04

Django MEDIUM 6.1

CVE-2017-7234

A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``django.views.static.serve()`` v…

Mitigation only

Fix from $1,600 2017-04-04

Django CRITICAL 9.8

CVE-2016-9013EPSS 5%

Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running…

Mitigation only

Fix from $2,300 2016-12-09

Django MEDIUM 5.5

CVE-2016-2048

Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and creat…

Mitigation only

Fix from $1,600 2016-02-08

Django HIGH 7.8

CVE-2015-5145

validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.

Mitigation only

Fix from $1,950 2015-07-14

Django MEDIUM 5.0

CVE-2013-0306

The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended reso…

Mitigation only

Fix from $1,600 2013-05-02