Low
CVE-2018-7537
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 308
Reset filters
Medium
CVE-2018-7536
Django denial-of-service possibility in urlize and urlizetrunc template filters
High
CVE-2018-6188
Django vulnerable to information leakage in AuthenticationForm
Critical
CVE-2018-6596
Django-Anymail prone to a timing attack
Critical
CVE-2017-16764
django_make_app is vulnerable to Code Injection
Medium
CVE-2017-12794
Django vulnerable to XSS on 500 pages
Medium
CVE-2017-7234
Django open redirect
Medium
CVE-2017-7233
Django open redirect and possible XSS attack via user-supplied numeric redirect URLs
Medium
CVE-2017-6591
django-epiceditor vulnerable to XSS in form field
High
CVE-2015-5143
Django Denial-of-service by filling session store
Critical
CVE-2011-4103
Django-piston and Django-tastypie do not properly deserialize YAML data
High
CVE-2011-4140
Django Cross-Site Request Forgery vulnerability
High
CVE-2011-4137
Denial of service in django
Medium
CVE-2011-4136
Session manipulation in Django
High
CVE-2011-0696
Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site requ
Medium
CVE-2011-0697
Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file u
Critical
CVE-2011-0698
Directory traversal in Django
High
CVE-2010-4534
The administrative interface in django.contrib.admin in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not properly restrict use of the query string to perform certain objec
Medium
CVE-2010-4535
The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp
Medium
CVE-2010-3082
Cross-site scripting in django
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.