High
CVE-2009-3695
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 307
Reset filters
High
CVE-2009-2659
The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory trave
High
CVE-2008-3909
The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to cond
Medium
CVE-2008-2302
Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject
High
CVE-2007-5712
The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows rem
High
CVE-2022-24857
Improper Authentication in django-mfa3
Critical
CVE-2022-28347
SQL Injection in Django
Critical
CVE-2022-28346
SQL Injection in Django
High
CVE-2022-23833
Infinite Loop in Django
Medium
CVE-2022-22818
Cross-site Scripting in Django
Medium
CVE-2022-21683
Comment reply notifications sent to incorrect users
Medium
CVE-2021-44649
Cross-site Scripting in django-cms
Medium
CVE-2021-45452
Directory-traversal in Django
High
CVE-2021-45116
Information disclosure in Django
High
CVE-2021-45115
Denial-of-service in Django
Medium
CVE-2021-44420
Potential bypass of an upstream access control based on URL paths in Django
High
CVE-2021-3994
django-helpdesk is vulnerable to Cross-site Scripting
Medium
CVE-2021-25986
Cross-site Scripting in django-wiki
High
CVE-2021-3950
Cross-site Scripting in django-helpdesk
High
CVE-2021-3945
Cross-site Scripting in django-helpdesk
Medium
CVE-2024-21910
Cross-site scripting vulnerability in TinyMCE plugins
Medium
CVE-2021-42134
Cross-site Scripting in django-unicorn
Medium
CVE-2021-42053
Cross-site scripting in Unicorn framework
Critical
CVE-2020-18704
Unrestricted Upload of File with Dangerous Type in django-widgy
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.