| Django cross-site scripting (XSS) attack via user-supplied redirect URLsCVE-2015-2317 · GHSA-7FQ8-4PV5-5W5CVersion ranges need review. |
djangoRed Hat Enterprise Linux OpenStack Platform 5 (Icehouse)/python-django |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django XSS VulnerabilityCVE-2016-2512 · GHSA-PW27-W7W4-9QC7Version ranges need review. |
djangoRed Hat Ceph Storage 1.2/Django |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django User Enumeration VulnerabilityCVE-2016-2513 · GHSA-FP6P-5XVW-M74FVersion ranges need review. |
djangoRed Hat Ceph Storage 1.2/Django |
PyPIRed Hat |
Low
|
Fix reported |
|
| Django user with hardcoded password created when running tests on OracleCVE-2016-9013 · GHSA-MV8G-FHH6-6267Version ranges need review. |
djangoRed Hat Subscription Asset Manager/Django |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Django DNS Rebinding VulnerabilityCVE-2016-9014 · GHSA-3F2C-JM6V-CR35Version ranges need review. |
djangoRed Hat Ceph Storage 1.3/calamari-server |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Django Cross-site scripting VulnerabilityCVE-2016-6186 · GHSA-C8C8-9472-W52HVersion ranges need review. |
djangoRed Hat Ceph Storage 1.3/Django |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django settings leak in date template filterCVE-2015-8213 · GHSA-6WCR-WCQM-3MFHVersion ranges need review. |
djangoRed Hat Ceph Storage 1.2/Django |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django Vulnerable to MySQL InjectionCVE-2014-0474 · GHSA-WQJJ-HX84-V449Version ranges need review. |
djangoRed Hat Subscription Asset Manager/Django |
PyPIRed Hat |
High
|
Fix reported |
|
| Django denial of service via file upload namingCVE-2014-0481 · GHSA-296W-6QHQ-GF92Version ranges need review. |
djangoRed Hat Enterprise Linux OpenStack Platform 5 (Icehouse)/python-django |
PyPIRed Hat |
High
|
Fix reported |
|
| Django Incorrectly Validates URLsCVE-2014-0480 · GHSA-F7CM-CCFP-3Q4RVersion ranges need review. |
djangoRed Hat Enterprise Linux OpenStack Platform 5 (Icehouse)/python-django |
PyPIRed Hat |
High
|
Fix reported |
|
| Django Middleware Enables Session HijackingCVE-2014-0482 · GHSA-625G-GX8C-XCMGVersion ranges need review. |
djangoRed Hat Enterprise Linux OpenStack Platform 5 (Icehouse)/python-django |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django data leakage via querystring manipulation in adminCVE-2014-0483 · GHSA-RW75-M7GP-92M3Version ranges need review. |
djangoRed Hat Enterprise Linux OpenStack Platform 5 (Icehouse)/python-django |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django Vulnerable to HTTP Response Splitting AttackCVE-2015-5144 · GHSA-Q5QW-4364-5HHMVersion ranges need review. |
djangoRed Hat Enterprise Linux OpenStack Platform 5 (Icehouse)/python-django |
PyPIRed Hat |
High
|
Fix reported |
|
| Django Denial of Service Vulnerability in the authentication framework CVE-2013-1443 · GHSA-4C42-4RXM-X6QFVersion ranges need review. |
djangoRed Hat Subscription Asset Manager/Django |
PyPIRed Hat |
High
|
Fix reported |
|
| Django Directory Traversal via ssi template tagCVE-2013-4315 · GHSA-VJJP-9R83-22RCVersion ranges need review. |
djangoRed Hat OpenStack Platform 4/Django14 |
PyPIRed Hat |
High
|
Fix reported |
|
| Django Vulnerable to Cache PoisoningCVE-2014-1418 · GHSA-Q7Q2-QF2Q-RW3WVersion ranges need review. |
djangoRed Hat OpenStack Platform 3/Django |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Django Reuses Cached CSRF TokenCVE-2014-0473 · GHSA-89HJ-XFX5-7Q66Version ranges need review. |
djangoRed Hat Subscription Asset Manager/Django |
PyPIRed Hat |
High
|
Fix reported |
|
| Django cross-site scripting (XSS) vulnerability via is_safe_url function CVE-2013-6044 · GHSA-9CWG-MHXF-HH59Version ranges need review. |
djangoRed Hat Subscription Asset Manager/Django |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django Allows Arbitrary URL GenerationCVE-2012-4520 · GHSA-2655-Q453-22F9Version ranges need review. |
djangoRed Hat Subscription Asset Manager/Django |
PyPIRed Hat |
High
|
Fix reported |
|
| Code Injection in DjangoCVE-2014-0472 · GHSA-RVQ6-MRPV-M6RMVersion ranges need review. |
djangoRed Hat Subscription Asset Manager/Django |
PyPIRed Hat |
Critical
|
Fix reported |
|
