Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
djangoproject vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2013-4249
Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x prior to 1.5.2 and 1.6.x prior to 1.6 beta 2 allows remote malicious users to inject arbitrary web script or HTML via a URLField.
Djangoproject Django 1.5
Djangoproject Django 1.6
Djangoproject Django 1.5.1
445
VMScore
CVE-2013-1443
The authentication framework (django.contrib.auth) in Django 1.4.x prior to 1.4.8, 1.5.x prior to 1.5.4, and 1.6.x prior to 1.6 beta 4 allows remote malicious users to cause a denial of service (CPU consumption) via a long password which is then hashed.
Djangoproject Django 1.4.5
Djangoproject Django 1.4.6
Djangoproject Django 1.4
Djangoproject Django 1.4.1
Djangoproject Django 1.4.2
Djangoproject Django 1.4.4
Djangoproject Django 1.4.7
Djangoproject Django 1.6
Djangoproject Django 1.5
Djangoproject Django 1.5.3
Djangoproject Django 1.5.1
Djangoproject Django 1.5.2
356
VMScore
CVE-2013-0305
The administrative interface for Django 1.3.x prior to 1.3.6, 1.4.x prior to 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information.
Djangoproject Django 1.3.2
Djangoproject Django 1.3.3
Djangoproject Django 1.3
Djangoproject Django 1.3.1
Djangoproject Django 1.4
Djangoproject Django 1.4.1
Djangoproject Django 1.4.2
Djangoproject Django 1.5
Canonical Ubuntu Linux 10.04
Canonical Ubuntu Linux 12.10
Canonical Ubuntu Linux 12.04
Canonical Ubuntu Linux 11.10
445
VMScore
CVE-2013-0306
The form library in Django 1.3.x prior to 1.3.6, 1.4.x prior to 1.4.4, and 1.5 before release candidate 2 allows remote malicious users to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_n...
Djangoproject Django 1.3.2
Djangoproject Django 1.3.3
Djangoproject Django 1.3
Djangoproject Django 1.3.1
Djangoproject Django 1.4
Djangoproject Django 1.4.1
Djangoproject Django 1.4.2
Djangoproject Django 1.5
Canonical Ubuntu Linux 12.04
Canonical Ubuntu Linux 12.10
Canonical Ubuntu Linux 11.10
Canonical Ubuntu Linux 10.04
570
VMScore
CVE-2012-4520
The django.http.HttpRequest.get_host function in Django 1.3.x prior to 1.3.4 and 1.4.x prior to 1.4.2 allows remote malicious users to generate and display arbitrary URLs via crafted username and password Host header values.
Djangoproject Django 1.3.2
Djangoproject Django 1.3.3
Djangoproject Django 1.3
Djangoproject Django 1.3.1
Djangoproject Django 1.4
Djangoproject Django 1.4.1
383
VMScore
CVE-2012-3442
The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django prior to 1.3.2 and 1.4.x prior to 1.4.1 do not validate the scheme of a redirect target, which might allow remote malicious users to conduct cross-site scripting (XSS) att...
Djangoproject Django 1.2
Djangoproject Django 1.2-alpha1
Djangoproject Django 1.1
Djangoproject Django 1.0
Djangoproject Django 1.3
Djangoproject Django 1.2.2
Djangoproject Django 0.95
Djangoproject Django 1.4
Djangoproject Django 1.2.7
Djangoproject Django 1.2.6
Djangoproject Django 1.1.4
Djangoproject Django 1.0.2
Djangoproject Django
Djangoproject Django 1.2.5
Djangoproject Django 1.2.4
Djangoproject Django 1.1.3
Djangoproject Django 1.1.2
Djangoproject Django 1.0.1
Djangoproject Django 0.96
445
VMScore
CVE-2012-3443
The django.forms.ImageField class in the form system in Django prior to 1.3.2 and 1.4.x prior to 1.4.1 completely decompresses image data during image validation, which allows remote malicious users to cause a denial of service (memory consumption) by uploading an image file.
Djangoproject Django
Djangoproject Django 1.3
Djangoproject Django 1.2.6
Djangoproject Django 1.2.5
Djangoproject Django 1.1.4
Djangoproject Django 1.1.3
Djangoproject Django 1.0.1
Djangoproject Django 0.96
Djangoproject Django 1.2
Djangoproject Django 1.2.7
Djangoproject Django 1.1
Djangoproject Django 1.0
Djangoproject Django 1.0.2
Djangoproject Django 1.2.4
Djangoproject Django 1.2.2
Djangoproject Django 1.1.2
Djangoproject Django 0.95
Djangoproject Django 1.4
Djangoproject Django 1.2-alpha1
445
VMScore
CVE-2012-3444
The get_image_dimensions function in the image-handling functionality in Django prior to 1.3.2 and 1.4.x prior to 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote malicious users to cause a denial of service (process or thread consumpt...
Djangoproject Django 1.2
Djangoproject Django 1.2.2
Djangoproject Django 1.1
Djangoproject Django 1.0
Djangoproject Django 1.4
Djangoproject Django 1.3
Djangoproject Django 1.2.5
Djangoproject Django 1.2.4
Djangoproject Django 1.1.2
Djangoproject Django 0.96
Djangoproject Django 0.95
Djangoproject Django 1.2-alpha1
Djangoproject Django
Djangoproject Django 1.2.7
Djangoproject Django 1.2.6
Djangoproject Django 1.1.4
Djangoproject Django 1.1.3
Djangoproject Django 1.0.2
Djangoproject Django 1.0.1
516
VMScore
CVE-2011-4136
django.contrib.sessions in Django prior to 1.2.7 and 1.3.x prior to 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers and application-data keys, which allows remote malicious users to modify a session by triggering use of a key ...
Djangoproject Django 1.2.1
Djangoproject Django 1.1.2
Djangoproject Django 1.0.2
Djangoproject Django
Djangoproject Django 0.95
Djangoproject Django 0.95.1
Djangoproject Django 1.2.3
Djangoproject Django 1.1.0
Djangoproject Django 1.2.4
Djangoproject Django 1.2.5
Djangoproject Django 1.1
Djangoproject Django 1.0
Djangoproject Django 1.3
Djangoproject Django 1.2
Djangoproject Django 1.1.3
Djangoproject Django 0.91
Djangoproject Django 1.2.2
Djangoproject Django 1.0.1
Djangoproject Django 0.96
445
VMScore
CVE-2011-4137
The verify_exists functionality in the URLField implementation in Django prior to 1.2.7 and 1.3.x prior to 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which allows remote malicious users to cause a denial of service (resource consumpt...
Djangoproject Django 0.91
Djangoproject Django 1.2.2
Djangoproject Django 1.0.1
Djangoproject Django 0.96
Djangoproject Django 1.2.1
Djangoproject Django 1.1.2
Djangoproject Django 1.0.2
Djangoproject Django
Djangoproject Django 0.95
Djangoproject Django 0.95.1
Djangoproject Django 1.2.3
Djangoproject Django 1.1.0
Djangoproject Django 1.2.4
Djangoproject Django 1.2.5
Djangoproject Django 1.1
Djangoproject Django 1.0
Djangoproject Django 1.3
Djangoproject Django 1.2
Djangoproject Django 1.1.3
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2023-52689
CVE-2024-23803
client side
CVE-2023-52696
information disclosure
CVE-2024-35843
CVE-2024-27130
CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
3
4
5
6
7
8
9
NEXT »