High
CVE-2024-53908
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 307
Reset filters
Medium
CVE-2024-53907
Django denial-of-service in django.utils.html.strip_tags()
Medium
CVE-2024-11319
django CMS Cross-Site Scripting (XSS)
Low
CVE-2024-45231
Django allows enumeration of user e-mail addresses
Medium
CVE-2024-45230
An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via ver
Medium
CVE-2024-47082
Cross-Site Request Forgery (CSRF) in strawberry-graphql
Medium
CVE-2024-41990
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with
Medium
CVE-2024-41989
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number in
Critical
CVE-2024-42005
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values() and values_list() methods on models with a JSONField are subject to SQL injection in column aliases via a cr
Medium
CVE-2024-41991
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service
High
CVE-2024-39614
Django vulnerable to Denial of Service
High
CVE-2024-39330
Django Path Traversal vulnerability
Medium
CVE-2024-39329
Django vulnerable to user enumeration attack
High
CVE-2024-38875
Django vulnerable to Denial of Service
Medium
CVE-2024-38356
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
Medium
CVE-2024-38357
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Medium
CVE-2024-27351
Regular expression denial-of-service in Django
High
CVE-2024-24680
Django denial-of-service attack in the intcomma template filter
Medium
CVE-2024-23633
Cross-site Scripting Vulnerability on Data Import
High
CVE-2023-47115
Cross-site Scripting Vulnerability on Avatar Upload
Medium
CVE-2024-23341
html injection vulnerability in the `tuitse_html` function.
Low
CVE-2023-50263
Unauthenticated db-file-storage views
High
CVE-2023-48705
Cross-site Scripting potential in custom links, job buttons, and computed fields
High
CVE-2023-47117
Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.