| 0 |
| url |
VCID-14vg-wbxe-6ffj |
| vulnerability_id |
VCID-14vg-wbxe-6ffj |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
| reference_url |
http://ubuntu.com/usn/usn-2469-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://ubuntu.com/usn/usn-2469-1 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.6.10 |
| purl |
pkg:pypi/django@1.6.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 4 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 5 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 6 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 7 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 8 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 9 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 10 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 11 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 12 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 13 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 14 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 15 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 16 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 17 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 18 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 19 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 20 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.10 |
|
| 1 |
| url |
pkg:pypi/django@1.7.3 |
| purl |
pkg:pypi/django@1.7.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 2 |
| vulnerability |
VCID-4v6q-ktnr-gue3 |
|
| 3 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 8 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 9 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 10 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 11 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 12 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 13 |
| vulnerability |
VCID-p94q-m8sa-s7by |
|
| 14 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 15 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 16 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 17 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 18 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 19 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 20 |
| vulnerability |
VCID-xg1w-8bd8-fbhu |
|
| 21 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 22 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 23 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.3 |
|
|
| aliases |
CVE-2015-0220, GHSA-gv98-g628-m9x5, PYSEC-2015-5
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-14vg-wbxe-6ffj |
|
| 1 |
| url |
VCID-1d73-dpsg-wkhk |
| vulnerability_id |
VCID-1d73-dpsg-wkhk |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N |
|
| 1 |
| value |
6.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
| reference_url |
http://www.ubuntu.com/usn/USN-2915-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N |
|
| 1 |
| value |
6.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.ubuntu.com/usn/USN-2915-1 |
|
| 23 |
| reference_url |
http://www.ubuntu.com/usn/USN-2915-2 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N |
|
| 1 |
| value |
6.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.ubuntu.com/usn/USN-2915-2 |
|
| 24 |
| reference_url |
http://www.ubuntu.com/usn/USN-2915-3 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N |
|
| 1 |
| value |
6.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.ubuntu.com/usn/USN-2915-3 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.8.10 |
| purl |
pkg:pypi/django@1.8.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3arc-t7n7-53ew |
|
| 1 |
| vulnerability |
VCID-577n-ucjg-9udw |
|
| 2 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 3 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 4 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 5 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 6 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 7 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 8 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 9 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 10 |
| vulnerability |
VCID-q9zk-pp6y-m7hu |
|
| 11 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 12 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 13 |
| vulnerability |
VCID-ud47-2t6q-pycj |
|
| 14 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 15 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 16 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 17 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.10 |
|
| 1 |
| url |
pkg:pypi/django@1.9.3 |
| purl |
pkg:pypi/django@1.9.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3arc-t7n7-53ew |
|
| 1 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 2 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 3 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 4 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 5 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 6 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 7 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 8 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 9 |
| vulnerability |
VCID-q9zk-pp6y-m7hu |
|
| 10 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 11 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 12 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 13 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 14 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 15 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.3 |
|
|
| aliases |
CVE-2016-2512, GHSA-pw27-w7w4-9qc7, PYSEC-2016-15
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.7 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1d73-dpsg-wkhk |
|
| 2 |
| url |
VCID-55n8-mzj7-z7hh |
| vulnerability_id |
VCID-55n8-mzj7-z7hh |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
| reference_url |
http://www.ubuntu.com/usn/USN-2671-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.ubuntu.com/usn/USN-2671-1 |
|
| 20 |
|
| 21 |
|
| 22 |
| reference_url |
https://github.com/advisories/GHSA-h582-2pch-3xv3 |
| reference_id |
GHSA-h582-2pch-3xv3 |
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
HIGH |
| scoring_system |
cvssv3.1_qr |
| scoring_elements |
|
|
| 2 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/advisories/GHSA-h582-2pch-3xv3 |
|
| 23 |
| reference_url |
https://security.gentoo.org/glsa/201510-06 |
| reference_id |
GLSA-201510-06 |
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://security.gentoo.org/glsa/201510-06 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.7.9 |
| purl |
pkg:pypi/django@1.7.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-4v6q-ktnr-gue3 |
|
| 2 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 3 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 4 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 5 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 6 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 7 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 8 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 9 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 10 |
| vulnerability |
VCID-p94q-m8sa-s7by |
|
| 11 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 12 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 13 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 14 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 15 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 16 |
| vulnerability |
VCID-xg1w-8bd8-fbhu |
|
| 17 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 18 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.9 |
|
| 1 |
| url |
pkg:pypi/django@1.8.3 |
| purl |
pkg:pypi/django@1.8.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-3arc-t7n7-53ew |
|
| 2 |
| vulnerability |
VCID-4v6q-ktnr-gue3 |
|
| 3 |
| vulnerability |
VCID-577n-ucjg-9udw |
|
| 4 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 5 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 6 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 7 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 8 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 9 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 10 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 11 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 12 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 13 |
| vulnerability |
VCID-p94q-m8sa-s7by |
|
| 14 |
| vulnerability |
VCID-q9zk-pp6y-m7hu |
|
| 15 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 16 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 17 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 18 |
| vulnerability |
VCID-ud47-2t6q-pycj |
|
| 19 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 20 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 21 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 22 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.3 |
|
|
| aliases |
CVE-2015-5143, GHSA-h582-2pch-3xv3, PYSEC-2015-20
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-55n8-mzj7-z7hh |
|
| 3 |
| url |
VCID-5bnx-5d1x-k3by |
| vulnerability_id |
VCID-5bnx-5d1x-k3by |
| summary |
ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate values, which triggers a large number of SQL queries. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.6.10 |
| purl |
pkg:pypi/django@1.6.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 4 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 5 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 6 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 7 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 8 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 9 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 10 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 11 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 12 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 13 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 14 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 15 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 16 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 17 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 18 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 19 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 20 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.10 |
|
| 1 |
| url |
pkg:pypi/django@1.7.3 |
| purl |
pkg:pypi/django@1.7.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 2 |
| vulnerability |
VCID-4v6q-ktnr-gue3 |
|
| 3 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 8 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 9 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 10 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 11 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 12 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 13 |
| vulnerability |
VCID-p94q-m8sa-s7by |
|
| 14 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 15 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 16 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 17 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 18 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 19 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 20 |
| vulnerability |
VCID-xg1w-8bd8-fbhu |
|
| 21 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 22 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 23 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.3 |
|
|
| aliases |
CVE-2015-0222, GHSA-6g95-x6cj-mg4v, PYSEC-2015-7
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5bnx-5d1x-k3by |
|
| 4 |
| url |
VCID-7kbt-73z6-wfar |
| vulnerability_id |
VCID-7kbt-73z6-wfar |
| summary |
directory traversal |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.6 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.5.3 |
| purl |
pkg:pypi/django@1.5.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 8 |
| vulnerability |
VCID-b97e-fw2q-nqhk |
|
| 9 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 10 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 11 |
| vulnerability |
VCID-dr33-d1ck-wycg |
|
| 12 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 13 |
| vulnerability |
VCID-fsgd-8jz7-zkdn |
|
| 14 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 15 |
| vulnerability |
VCID-h328-c9gp-9ybg |
|
| 16 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 17 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 18 |
| vulnerability |
VCID-ss1p-jz2s-wyh7 |
|
| 19 |
| vulnerability |
VCID-ted5-qgyr-7ucf |
|
| 20 |
| vulnerability |
VCID-tr9m-84nc-x3cw |
|
| 21 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 22 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 23 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 24 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 25 |
| vulnerability |
VCID-v7kk-jbkz-77hf |
|
| 26 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 27 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 28 |
| vulnerability |
VCID-wvh5-z294-ffev |
|
| 29 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 30 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 31 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 32 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
| 33 |
| vulnerability |
VCID-yefp-r2s6-e7fe |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.3 |
|
|
| aliases |
CVE-2013-4315, GHSA-vjjp-9r83-22rc, PYSEC-2013-20
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7kbt-73z6-wfar |
|
| 5 |
| url |
VCID-7xx2-z2tg-7khd |
| vulnerability_id |
VCID-7xx2-z2tg-7khd |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
| reference_url |
https://seclists.org/bugtraq/2020/Jan/9 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://seclists.org/bugtraq/2020/Jan/9 |
|
| 16 |
|
| 17 |
|
| 18 |
| reference_url |
https://usn.ubuntu.com/4224-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://usn.ubuntu.com/4224-1 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
| reference_url |
https://github.com/advisories/GHSA-vfq6-hq5r-27r6 |
| reference_id |
GHSA-vfq6-hq5r-27r6 |
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
CRITICAL |
| scoring_system |
cvssv3.1_qr |
| scoring_elements |
|
|
| 2 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/advisories/GHSA-vfq6-hq5r-27r6 |
|
| 30 |
|
|
| fixed_packages |
| 0 |
|
| 1 |
| url |
pkg:pypi/django@2.2.9 |
| purl |
pkg:pypi/django@2.2.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-27gm-2u1q-skh1 |
|
| 1 |
| vulnerability |
VCID-2qu4-qayw-a7ec |
|
| 2 |
| vulnerability |
VCID-2sve-8b9b-hud7 |
|
| 3 |
| vulnerability |
VCID-38w8-jbku-eugu |
|
| 4 |
| vulnerability |
VCID-5zzj-9ez5-6ub1 |
|
| 5 |
| vulnerability |
VCID-6uja-brvn-rufw |
|
| 6 |
| vulnerability |
VCID-9qxj-9mb9-7bcv |
|
| 7 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 8 |
| vulnerability |
VCID-cece-1mun-ckgh |
|
| 9 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 10 |
| vulnerability |
VCID-djh3-m1t4-2qe1 |
|
| 11 |
| vulnerability |
VCID-dttw-t3a9-gbbn |
|
| 12 |
| vulnerability |
VCID-gtkn-prux-vbdb |
|
| 13 |
| vulnerability |
VCID-j3bz-6jqe-ffgm |
|
| 14 |
| vulnerability |
VCID-nwtr-br34-qkbv |
|
| 15 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 16 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 17 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 18 |
| vulnerability |
VCID-vc8c-7qn1-9uaz |
|
| 19 |
| vulnerability |
VCID-vcqt-n2pk-kyeb |
|
| 20 |
| vulnerability |
VCID-w3dy-chny-5fbc |
|
| 21 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 22 |
| vulnerability |
VCID-x1qk-bs7j-63ch |
|
| 23 |
| vulnerability |
VCID-x91x-cxp9-4fgp |
|
| 24 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 25 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
| 26 |
| vulnerability |
VCID-ymm2-ns18-wkcw |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@2.2.9 |
|
| 2 |
| url |
pkg:pypi/django@3.0.1 |
| purl |
pkg:pypi/django@3.0.1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-27gm-2u1q-skh1 |
|
| 1 |
| vulnerability |
VCID-28ff-ng96-5ugk |
|
| 2 |
| vulnerability |
VCID-2qu4-qayw-a7ec |
|
| 3 |
| vulnerability |
VCID-9qxj-9mb9-7bcv |
|
| 4 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 5 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 6 |
| vulnerability |
VCID-djh3-m1t4-2qe1 |
|
| 7 |
| vulnerability |
VCID-dttw-t3a9-gbbn |
|
| 8 |
| vulnerability |
VCID-j3bz-6jqe-ffgm |
|
| 9 |
| vulnerability |
VCID-nwtr-br34-qkbv |
|
| 10 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 11 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 12 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 13 |
| vulnerability |
VCID-vc8c-7qn1-9uaz |
|
| 14 |
| vulnerability |
VCID-vcqt-n2pk-kyeb |
|
| 15 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 16 |
| vulnerability |
VCID-x1qk-bs7j-63ch |
|
| 17 |
| vulnerability |
VCID-x91x-cxp9-4fgp |
|
| 18 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 19 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.0.1 |
|
|
| aliases |
CVE-2019-19844, GHSA-vfq6-hq5r-27r6, PYSEC-2019-16
|
| risk_score |
10.0 |
| exploitability |
2.0 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7xx2-z2tg-7khd |
|
| 6 |
| url |
VCID-8h18-d5hr-rqas |
| vulnerability_id |
VCID-8h18-d5hr-rqas |
| summary |
Possible XSS via is_safe_url
The is_safe_url() function, due to the manner in which it parses the URL, will permit redirects to schemes other than HTTP and HTTPS such as javascript:. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.5.2 |
| purl |
pkg:pypi/django@1.5.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 4 |
| vulnerability |
VCID-7kbt-73z6-wfar |
|
| 5 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 6 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 7 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 8 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 9 |
| vulnerability |
VCID-b97e-fw2q-nqhk |
|
| 10 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 11 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 12 |
| vulnerability |
VCID-dr33-d1ck-wycg |
|
| 13 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 14 |
| vulnerability |
VCID-fsgd-8jz7-zkdn |
|
| 15 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 16 |
| vulnerability |
VCID-h328-c9gp-9ybg |
|
| 17 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 18 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 19 |
| vulnerability |
VCID-ss1p-jz2s-wyh7 |
|
| 20 |
| vulnerability |
VCID-ted5-qgyr-7ucf |
|
| 21 |
| vulnerability |
VCID-tr9m-84nc-x3cw |
|
| 22 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 23 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 24 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 25 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 26 |
| vulnerability |
VCID-v7kk-jbkz-77hf |
|
| 27 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 28 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 29 |
| vulnerability |
VCID-wvh5-z294-ffev |
|
| 30 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 31 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 32 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 33 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
| 34 |
| vulnerability |
VCID-yefp-r2s6-e7fe |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.2 |
|
|
| aliases |
GMS-2013-18
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8h18-d5hr-rqas |
|
| 7 |
| url |
VCID-8uyx-7dub-hka9 |
| vulnerability_id |
VCID-8uyx-7dub-hka9 |
| summary |
Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an attacker to be sent a password reset token for the matched user account. (One mitigation in the new releases is to send password reset tokens only to the registered user email address.) |
| references |
|
| fixed_packages |
| 0 |
|
| 1 |
| url |
pkg:pypi/django@2.2.9 |
| purl |
pkg:pypi/django@2.2.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-27gm-2u1q-skh1 |
|
| 1 |
| vulnerability |
VCID-2qu4-qayw-a7ec |
|
| 2 |
| vulnerability |
VCID-2sve-8b9b-hud7 |
|
| 3 |
| vulnerability |
VCID-38w8-jbku-eugu |
|
| 4 |
| vulnerability |
VCID-5zzj-9ez5-6ub1 |
|
| 5 |
| vulnerability |
VCID-6uja-brvn-rufw |
|
| 6 |
| vulnerability |
VCID-9qxj-9mb9-7bcv |
|
| 7 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 8 |
| vulnerability |
VCID-cece-1mun-ckgh |
|
| 9 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 10 |
| vulnerability |
VCID-djh3-m1t4-2qe1 |
|
| 11 |
| vulnerability |
VCID-dttw-t3a9-gbbn |
|
| 12 |
| vulnerability |
VCID-gtkn-prux-vbdb |
|
| 13 |
| vulnerability |
VCID-j3bz-6jqe-ffgm |
|
| 14 |
| vulnerability |
VCID-nwtr-br34-qkbv |
|
| 15 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 16 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 17 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 18 |
| vulnerability |
VCID-vc8c-7qn1-9uaz |
|
| 19 |
| vulnerability |
VCID-vcqt-n2pk-kyeb |
|
| 20 |
| vulnerability |
VCID-w3dy-chny-5fbc |
|
| 21 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 22 |
| vulnerability |
VCID-x1qk-bs7j-63ch |
|
| 23 |
| vulnerability |
VCID-x91x-cxp9-4fgp |
|
| 24 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 25 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
| 26 |
| vulnerability |
VCID-ymm2-ns18-wkcw |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@2.2.9 |
|
|
| aliases |
PYSEC-2019-86
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8uyx-7dub-hka9 |
|
| 8 |
| url |
VCID-9mmy-6rvf-1qbp |
| vulnerability_id |
VCID-9mmy-6rvf-1qbp |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
2.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
| reference_url |
http://www.securityfocus.com/bid/77750 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
2.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.securityfocus.com/bid/77750 |
|
| 23 |
| reference_url |
http://www.securitytracker.com/id/1034237 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
2.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.securitytracker.com/id/1034237 |
|
| 24 |
| reference_url |
http://www.ubuntu.com/usn/USN-2816-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
2.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.ubuntu.com/usn/USN-2816-1 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.7.11 |
| purl |
pkg:pypi/django@1.7.11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 2 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 3 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 4 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 5 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 6 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 7 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 8 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 9 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 10 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 11 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 12 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 13 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 14 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.11 |
|
| 1 |
| url |
pkg:pypi/django@1.8.7 |
| purl |
pkg:pypi/django@1.8.7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-3arc-t7n7-53ew |
|
| 2 |
| vulnerability |
VCID-577n-ucjg-9udw |
|
| 3 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 7 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 8 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 9 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 10 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 11 |
| vulnerability |
VCID-q9zk-pp6y-m7hu |
|
| 12 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 13 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 14 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 15 |
| vulnerability |
VCID-ud47-2t6q-pycj |
|
| 16 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 17 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 18 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 19 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.7 |
|
| 2 |
| url |
pkg:pypi/django@1.9rc2 |
| purl |
pkg:pypi/django@1.9rc2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-3arc-t7n7-53ew |
|
| 2 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 3 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 4 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 5 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 6 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 7 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 8 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 9 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 10 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 11 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 12 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 13 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 14 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9rc2 |
|
|
| aliases |
CVE-2015-8213, GHSA-6wcr-wcqm-3mfh, PYSEC-2015-11
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9mmy-6rvf-1qbp |
|
| 9 |
| url |
VCID-a36b-7nxc-5ffg |
| vulnerability_id |
VCID-a36b-7nxc-5ffg |
| summary |
Cross-site scripting (XSS) vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows remote attackers to inject arbitrary web script or HTML via a model attribute in ModelAdmin.readonly_fields, as demonstrated by a @property. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.7.6 |
| purl |
pkg:pypi/django@1.7.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 2 |
| vulnerability |
VCID-4v6q-ktnr-gue3 |
|
| 3 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 8 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 9 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 10 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 11 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 12 |
| vulnerability |
VCID-p94q-m8sa-s7by |
|
| 13 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 14 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 15 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 16 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 17 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 18 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 19 |
| vulnerability |
VCID-xg1w-8bd8-fbhu |
|
| 20 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 21 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 22 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.6 |
|
| 1 |
| url |
pkg:pypi/django@1.8b2 |
| purl |
pkg:pypi/django@1.8b2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 2 |
| vulnerability |
VCID-3arc-t7n7-53ew |
|
| 3 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 8 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 9 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 10 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 11 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 12 |
| vulnerability |
VCID-p94q-m8sa-s7by |
|
| 13 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 14 |
| vulnerability |
VCID-u2c7-nvng-eya1 |
|
| 15 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 16 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 17 |
| vulnerability |
VCID-ud47-2t6q-pycj |
|
| 18 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 19 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 20 |
| vulnerability |
VCID-x3rb-wf8q-auer |
|
| 21 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 22 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 23 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 24 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8b2 |
|
|
| aliases |
CVE-2015-2241, GHSA-6565-fg86-6jcx, PYSEC-2015-8
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-a36b-7nxc-5ffg |
|
| 10 |
| url |
VCID-b97e-fw2q-nqhk |
| vulnerability_id |
VCID-b97e-fw2q-nqhk |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.5.9 |
| purl |
pkg:pypi/django@1.5.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 8 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 9 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 10 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 11 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 12 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 13 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 14 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 15 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 16 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 17 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 18 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 19 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 20 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 21 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 22 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 23 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.9 |
|
| 1 |
| url |
pkg:pypi/django@1.6.6 |
| purl |
pkg:pypi/django@1.6.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 3 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 4 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 5 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 6 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 7 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 8 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 9 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 10 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 11 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 12 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 13 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 14 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 15 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 16 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 17 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 18 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 19 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 20 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 21 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 22 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 23 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 24 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.6 |
|
|
| aliases |
CVE-2014-0480, GHSA-f7cm-ccfp-3q4r, PYSEC-2014-4
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-b97e-fw2q-nqhk |
|
| 11 |
| url |
VCID-beas-dwx6-1ffp |
| vulnerability_id |
VCID-beas-dwx6-1ffp |
| summary |
An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.
The methods `QuerySet.filter()`, `QuerySet.exclude()`, and `QuerySet.get()`, and the class `Q()`, are subject to SQL injection when using a suitably crafted dictionary, with dictionary expansion, as the `_connector` argument.
Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.
Django would like to thank cyberstan for reporting this issue. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
| 41 |
|
| 42 |
|
| 43 |
|
| 44 |
|
| 45 |
|
| 46 |
|
| 47 |
|
| 48 |
|
| 49 |
|
| 50 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@4.2.26 |
| purl |
pkg:pypi/django@4.2.26 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-13q1-fzeg-bfd9 |
|
| 1 |
| vulnerability |
VCID-4xtu-yeh2-pbc8 |
|
| 2 |
| vulnerability |
VCID-72z9-v49q-vbcc |
|
| 3 |
| vulnerability |
VCID-81b9-uqyv-kkhm |
|
| 4 |
| vulnerability |
VCID-dh5p-grha-r7a2 |
|
| 5 |
| vulnerability |
VCID-dqpz-q718-pkas |
|
| 6 |
| vulnerability |
VCID-e331-cbgc-hubm |
|
| 7 |
| vulnerability |
VCID-hb8n-gwz6-9yd9 |
|
| 8 |
| vulnerability |
VCID-jdjc-ygtk-c7hv |
|
| 9 |
| vulnerability |
VCID-pn2d-2euz-pudt |
|
| 10 |
| vulnerability |
VCID-q3sw-jd7p-1yg1 |
|
| 11 |
| vulnerability |
VCID-r3dj-t213-jyhh |
|
| 12 |
| vulnerability |
VCID-sbwy-buwj-gkd2 |
|
| 13 |
| vulnerability |
VCID-zr7g-1xkm-fqdw |
|
| 14 |
| vulnerability |
VCID-zztc-4be5-fker |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@4.2.26 |
|
| 1 |
|
| 2 |
| url |
pkg:pypi/django@5.2.8 |
| purl |
pkg:pypi/django@5.2.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-13q1-fzeg-bfd9 |
|
| 1 |
| vulnerability |
VCID-1g9h-ryet-2ffs |
|
| 2 |
| vulnerability |
VCID-1mp4-kq35-1ba7 |
|
| 3 |
| vulnerability |
VCID-4xtu-yeh2-pbc8 |
|
| 4 |
| vulnerability |
VCID-72z9-v49q-vbcc |
|
| 5 |
| vulnerability |
VCID-81b9-uqyv-kkhm |
|
| 6 |
| vulnerability |
VCID-8tz7-vjwz-rycs |
|
| 7 |
| vulnerability |
VCID-dh5p-grha-r7a2 |
|
| 8 |
| vulnerability |
VCID-dqpz-q718-pkas |
|
| 9 |
| vulnerability |
VCID-e331-cbgc-hubm |
|
| 10 |
| vulnerability |
VCID-h5qf-zbcz-qygg |
|
| 11 |
| vulnerability |
VCID-hb8n-gwz6-9yd9 |
|
| 12 |
| vulnerability |
VCID-jdjc-ygtk-c7hv |
|
| 13 |
| vulnerability |
VCID-m4mg-yd86-dyfw |
|
| 14 |
| vulnerability |
VCID-n915-wj16-wka6 |
|
| 15 |
| vulnerability |
VCID-pn2d-2euz-pudt |
|
| 16 |
| vulnerability |
VCID-q3sw-jd7p-1yg1 |
|
| 17 |
| vulnerability |
VCID-r3dj-t213-jyhh |
|
| 18 |
| vulnerability |
VCID-sbwy-buwj-gkd2 |
|
| 19 |
| vulnerability |
VCID-tvk1-4am9-f3cf |
|
| 20 |
| vulnerability |
VCID-z7sj-r61n-qbcd |
|
| 21 |
| vulnerability |
VCID-zr7g-1xkm-fqdw |
|
| 22 |
| vulnerability |
VCID-zztc-4be5-fker |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.2.8 |
|
| 3 |
|
|
| aliases |
BIT-django-2025-64459, CVE-2025-64459, GHSA-frmv-pr5f-9mcr, PYSEC-2025-108
|
| risk_score |
10.0 |
| exploitability |
2.0 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-beas-dwx6-1ffp |
|
| 12 |
| url |
VCID-db6w-yj8t-sfg4 |
| vulnerability_id |
VCID-db6w-yj8t-sfg4 |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
| reference_url |
https://groups.google.com/g/django-announce |
| reference_id |
django-announce |
| reference_type |
|
| scores |
| 0 |
| value |
7.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N |
|
| 1 |
| value |
8.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 3 |
| value |
Track* |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-09-08T17:33:03Z/ |
|
|
| url |
https://groups.google.com/g/django-announce |
|
| 40 |
|
| 41 |
|
| 42 |
|
| 43 |
|
| 44 |
|
| 45 |
|
| 46 |
|
| 47 |
|
| 48 |
|
| 49 |
|
| 50 |
|
| 51 |
|
| 52 |
|
| 53 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@4.2.24 |
| purl |
pkg:pypi/django@4.2.24 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-13q1-fzeg-bfd9 |
|
| 1 |
| vulnerability |
VCID-4xtu-yeh2-pbc8 |
|
| 2 |
| vulnerability |
VCID-72z9-v49q-vbcc |
|
| 3 |
| vulnerability |
VCID-81b9-uqyv-kkhm |
|
| 4 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 5 |
| vulnerability |
VCID-dh5p-grha-r7a2 |
|
| 6 |
| vulnerability |
VCID-dqpz-q718-pkas |
|
| 7 |
| vulnerability |
VCID-e331-cbgc-hubm |
|
| 8 |
| vulnerability |
VCID-fwwm-7y13-y3dx |
|
| 9 |
| vulnerability |
VCID-hb8n-gwz6-9yd9 |
|
| 10 |
| vulnerability |
VCID-jdjc-ygtk-c7hv |
|
| 11 |
| vulnerability |
VCID-pmhc-yu6r-uudy |
|
| 12 |
| vulnerability |
VCID-pn2d-2euz-pudt |
|
| 13 |
| vulnerability |
VCID-q3sw-jd7p-1yg1 |
|
| 14 |
| vulnerability |
VCID-r3dj-t213-jyhh |
|
| 15 |
| vulnerability |
VCID-sbwy-buwj-gkd2 |
|
| 16 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 17 |
| vulnerability |
VCID-zr7g-1xkm-fqdw |
|
| 18 |
| vulnerability |
VCID-zztc-4be5-fker |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@4.2.24 |
|
| 1 |
|
| 2 |
| url |
pkg:pypi/django@5.2.6 |
| purl |
pkg:pypi/django@5.2.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-13q1-fzeg-bfd9 |
|
| 1 |
| vulnerability |
VCID-1g9h-ryet-2ffs |
|
| 2 |
| vulnerability |
VCID-1mp4-kq35-1ba7 |
|
| 3 |
| vulnerability |
VCID-4xtu-yeh2-pbc8 |
|
| 4 |
| vulnerability |
VCID-72z9-v49q-vbcc |
|
| 5 |
| vulnerability |
VCID-81b9-uqyv-kkhm |
|
| 6 |
| vulnerability |
VCID-8tz7-vjwz-rycs |
|
| 7 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 8 |
| vulnerability |
VCID-dh5p-grha-r7a2 |
|
| 9 |
| vulnerability |
VCID-dqpz-q718-pkas |
|
| 10 |
| vulnerability |
VCID-e331-cbgc-hubm |
|
| 11 |
| vulnerability |
VCID-fwwm-7y13-y3dx |
|
| 12 |
| vulnerability |
VCID-h5qf-zbcz-qygg |
|
| 13 |
| vulnerability |
VCID-hb8n-gwz6-9yd9 |
|
| 14 |
| vulnerability |
VCID-jdjc-ygtk-c7hv |
|
| 15 |
| vulnerability |
VCID-m4mg-yd86-dyfw |
|
| 16 |
| vulnerability |
VCID-n915-wj16-wka6 |
|
| 17 |
| vulnerability |
VCID-pmhc-yu6r-uudy |
|
| 18 |
| vulnerability |
VCID-pn2d-2euz-pudt |
|
| 19 |
| vulnerability |
VCID-q3sw-jd7p-1yg1 |
|
| 20 |
| vulnerability |
VCID-r3dj-t213-jyhh |
|
| 21 |
| vulnerability |
VCID-sbwy-buwj-gkd2 |
|
| 22 |
| vulnerability |
VCID-tvk1-4am9-f3cf |
|
| 23 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 24 |
| vulnerability |
VCID-z7sj-r61n-qbcd |
|
| 25 |
| vulnerability |
VCID-zr7g-1xkm-fqdw |
|
| 26 |
| vulnerability |
VCID-zztc-4be5-fker |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.2.6 |
|
|
| aliases |
BIT-django-2025-57833, CVE-2025-57833, GHSA-6w2r-r2m5-xq5w, PYSEC-2025-105
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-db6w-yj8t-sfg4 |
|
| 13 |
| url |
VCID-dr33-d1ck-wycg |
| vulnerability_id |
VCID-dr33-d1ck-wycg |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
|
| 1 |
| value |
9.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
| reference_url |
http://ubuntu.com/usn/usn-2212-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
|
| 1 |
| value |
9.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://ubuntu.com/usn/usn-2212-1 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.5.8 |
| purl |
pkg:pypi/django@1.5.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 8 |
| vulnerability |
VCID-b97e-fw2q-nqhk |
|
| 9 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 10 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 11 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 12 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 13 |
| vulnerability |
VCID-h328-c9gp-9ybg |
|
| 14 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 15 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 16 |
| vulnerability |
VCID-ted5-qgyr-7ucf |
|
| 17 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 18 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 19 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 20 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 21 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 22 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 23 |
| vulnerability |
VCID-wvh5-z294-ffev |
|
| 24 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 25 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 26 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 27 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.8 |
|
| 1 |
| url |
pkg:pypi/django@1.6.5 |
| purl |
pkg:pypi/django@1.6.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 3 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 4 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 5 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 6 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 7 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 8 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 9 |
| vulnerability |
VCID-b97e-fw2q-nqhk |
|
| 10 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 11 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 12 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 13 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 14 |
| vulnerability |
VCID-h328-c9gp-9ybg |
|
| 15 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 16 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 17 |
| vulnerability |
VCID-ted5-qgyr-7ucf |
|
| 18 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 19 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 20 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 21 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 22 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 23 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 24 |
| vulnerability |
VCID-wvh5-z294-ffev |
|
| 25 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 26 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 27 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 28 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.5 |
|
| 2 |
|
|
| aliases |
CVE-2014-1418, GHSA-q7q2-qf2q-rw3w, PYSEC-2014-19
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dr33-d1ck-wycg |
|
| 14 |
| url |
VCID-eay8-gdua-p3b5 |
| vulnerability_id |
VCID-eay8-gdua-p3b5 |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
| reference_url |
http://www.ubuntu.com/usn/USN-3089-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.ubuntu.com/usn/USN-3089-1 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.8.15 |
| purl |
pkg:pypi/django@1.8.15 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3arc-t7n7-53ew |
|
| 1 |
| vulnerability |
VCID-577n-ucjg-9udw |
|
| 2 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 3 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 4 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 5 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 6 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 7 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 8 |
| vulnerability |
VCID-q9zk-pp6y-m7hu |
|
| 9 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 10 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 11 |
| vulnerability |
VCID-ud47-2t6q-pycj |
|
| 12 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 13 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 14 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 15 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.15 |
|
| 1 |
| url |
pkg:pypi/django@1.9.10 |
| purl |
pkg:pypi/django@1.9.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3arc-t7n7-53ew |
|
| 1 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 2 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 3 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 4 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 5 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 6 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 7 |
| vulnerability |
VCID-q9zk-pp6y-m7hu |
|
| 8 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 9 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 10 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 11 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 12 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 13 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.10 |
|
|
| aliases |
CVE-2016-7401, GHSA-crhm-qpjc-cm64, PYSEC-2016-3
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-eay8-gdua-p3b5 |
|
| 15 |
| url |
VCID-f885-cubh-qyc5 |
| vulnerability_id |
VCID-f885-cubh-qyc5 |
| summary |
XSS in admin interface
The Django administrative application, django.contrib.admin, consider value of a URLField to be safe. Thus, when displaying it, Django does not escape it allowing an attacker to perform XSS in the administrative interface. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.5.2 |
| purl |
pkg:pypi/django@1.5.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 4 |
| vulnerability |
VCID-7kbt-73z6-wfar |
|
| 5 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 6 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 7 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 8 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 9 |
| vulnerability |
VCID-b97e-fw2q-nqhk |
|
| 10 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 11 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 12 |
| vulnerability |
VCID-dr33-d1ck-wycg |
|
| 13 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 14 |
| vulnerability |
VCID-fsgd-8jz7-zkdn |
|
| 15 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 16 |
| vulnerability |
VCID-h328-c9gp-9ybg |
|
| 17 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 18 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 19 |
| vulnerability |
VCID-ss1p-jz2s-wyh7 |
|
| 20 |
| vulnerability |
VCID-ted5-qgyr-7ucf |
|
| 21 |
| vulnerability |
VCID-tr9m-84nc-x3cw |
|
| 22 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 23 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 24 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 25 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 26 |
| vulnerability |
VCID-v7kk-jbkz-77hf |
|
| 27 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 28 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 29 |
| vulnerability |
VCID-wvh5-z294-ffev |
|
| 30 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 31 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 32 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 33 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
| 34 |
| vulnerability |
VCID-yefp-r2s6-e7fe |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.2 |
|
|
| aliases |
GMS-2013-17
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-f885-cubh-qyc5 |
|
| 16 |
| url |
VCID-fsgd-8jz7-zkdn |
| vulnerability_id |
VCID-fsgd-8jz7-zkdn |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
| reference_url |
http://www.ubuntu.com/usn/USN-2169-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.ubuntu.com/usn/USN-2169-1 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.5.6 |
| purl |
pkg:pypi/django@1.5.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 8 |
| vulnerability |
VCID-b97e-fw2q-nqhk |
|
| 9 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 10 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 11 |
| vulnerability |
VCID-dr33-d1ck-wycg |
|
| 12 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 13 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 14 |
| vulnerability |
VCID-h328-c9gp-9ybg |
|
| 15 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 16 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 17 |
| vulnerability |
VCID-ted5-qgyr-7ucf |
|
| 18 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 19 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 20 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 21 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 22 |
| vulnerability |
VCID-v7kk-jbkz-77hf |
|
| 23 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 24 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 25 |
| vulnerability |
VCID-wvh5-z294-ffev |
|
| 26 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 27 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 28 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 29 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.6 |
|
| 1 |
| url |
pkg:pypi/django@1.6.3 |
| purl |
pkg:pypi/django@1.6.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 3 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 4 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 5 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 6 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 7 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 8 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 9 |
| vulnerability |
VCID-b97e-fw2q-nqhk |
|
| 10 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 11 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 12 |
| vulnerability |
VCID-dr33-d1ck-wycg |
|
| 13 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 14 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 15 |
| vulnerability |
VCID-h328-c9gp-9ybg |
|
| 16 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 17 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 18 |
| vulnerability |
VCID-ted5-qgyr-7ucf |
|
| 19 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 20 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 21 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 22 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 23 |
| vulnerability |
VCID-v7kk-jbkz-77hf |
|
| 24 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 25 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 26 |
| vulnerability |
VCID-wvh5-z294-ffev |
|
| 27 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 28 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 29 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 30 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.3 |
|
|
| aliases |
CVE-2014-0473, GHSA-89hj-xfx5-7q66, PYSEC-2014-2
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fsgd-8jz7-zkdn |
|
| 17 |
| url |
VCID-gfad-ffzw-g3hv |
| vulnerability_id |
VCID-gfad-ffzw-g3hv |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
| reference_url |
https://www.exploit-db.com/exploits/40129 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://www.exploit-db.com/exploits/40129 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
| reference_url |
http://www.ubuntu.com/usn/USN-3039-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.ubuntu.com/usn/USN-3039-1 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.8.14 |
| purl |
pkg:pypi/django@1.8.14 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3arc-t7n7-53ew |
|
| 1 |
| vulnerability |
VCID-577n-ucjg-9udw |
|
| 2 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 3 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 4 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 5 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 6 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 7 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 8 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 9 |
| vulnerability |
VCID-q9zk-pp6y-m7hu |
|
| 10 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 11 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 12 |
| vulnerability |
VCID-ud47-2t6q-pycj |
|
| 13 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 14 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 15 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 16 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.14 |
|
| 1 |
| url |
pkg:pypi/django@1.9.8 |
| purl |
pkg:pypi/django@1.9.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3arc-t7n7-53ew |
|
| 1 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 2 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 3 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 4 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 5 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 6 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 7 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 8 |
| vulnerability |
VCID-q9zk-pp6y-m7hu |
|
| 9 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 10 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 11 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 12 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 13 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 14 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.8 |
|
| 2 |
| url |
pkg:pypi/django@1.10rc1 |
| purl |
pkg:pypi/django@1.10rc1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3arc-t7n7-53ew |
|
| 1 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 2 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 3 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 4 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 5 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 6 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 7 |
| vulnerability |
VCID-pp8x-52ke-qbhj |
|
| 8 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 9 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 10 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 11 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 12 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 13 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10rc1 |
|
|
| aliases |
CVE-2016-6186, GHSA-c8c8-9472-w52h, PYSEC-2016-2
|
| risk_score |
10.0 |
| exploitability |
2.0 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-gfad-ffzw-g3hv |
|
| 18 |
| url |
VCID-gze2-htrx-vqdb |
| vulnerability_id |
VCID-gze2-htrx-vqdb |
| summary |
Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x before 1.5.2 and 1.6.x before 1.6 beta 2 allows remote attackers to inject arbitrary web script or HTML via a URLField. |
| references |
| 0 |
|
| 1 |
|
| 2 |
| reference_url |
http://seclists.org/oss-sec/2013/q3/369 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://seclists.org/oss-sec/2013/q3/369 |
|
| 3 |
| reference_url |
http://seclists.org/oss-sec/2013/q3/411 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://seclists.org/oss-sec/2013/q3/411 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.5.2 |
| purl |
pkg:pypi/django@1.5.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 4 |
| vulnerability |
VCID-7kbt-73z6-wfar |
|
| 5 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 6 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 7 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 8 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 9 |
| vulnerability |
VCID-b97e-fw2q-nqhk |
|
| 10 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 11 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 12 |
| vulnerability |
VCID-dr33-d1ck-wycg |
|
| 13 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 14 |
| vulnerability |
VCID-fsgd-8jz7-zkdn |
|
| 15 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 16 |
| vulnerability |
VCID-h328-c9gp-9ybg |
|
| 17 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 18 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 19 |
| vulnerability |
VCID-ss1p-jz2s-wyh7 |
|
| 20 |
| vulnerability |
VCID-ted5-qgyr-7ucf |
|
| 21 |
| vulnerability |
VCID-tr9m-84nc-x3cw |
|
| 22 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 23 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 24 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 25 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 26 |
| vulnerability |
VCID-v7kk-jbkz-77hf |
|
| 27 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 28 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 29 |
| vulnerability |
VCID-wvh5-z294-ffev |
|
| 30 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 31 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 32 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 33 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
| 34 |
| vulnerability |
VCID-yefp-r2s6-e7fe |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.2 |
|
|
| aliases |
CVE-2013-4249, GHSA-4894-5vqc-6r2r, PYSEC-2013-19
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-gze2-htrx-vqdb |
|
| 19 |
| url |
VCID-h328-c9gp-9ybg |
| vulnerability_id |
VCID-h328-c9gp-9ybg |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.5.9 |
| purl |
pkg:pypi/django@1.5.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 8 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 9 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 10 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 11 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 12 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 13 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 14 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 15 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 16 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 17 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 18 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 19 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 20 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 21 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 22 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 23 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.9 |
|
| 1 |
| url |
pkg:pypi/django@1.6.6 |
| purl |
pkg:pypi/django@1.6.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 3 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 4 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 5 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 6 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 7 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 8 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 9 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 10 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 11 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 12 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 13 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 14 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 15 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 16 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 17 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 18 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 19 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 20 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 21 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 22 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 23 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 24 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.6 |
|
| 2 |
|
|
| aliases |
CVE-2014-0483, GHSA-rw75-m7gp-92m3, PYSEC-2014-7
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-h328-c9gp-9ybg |
|
| 20 |
| url |
VCID-kgw9-ng5a-jucv |
| vulnerability_id |
VCID-kgw9-ng5a-jucv |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.2 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
| reference_url |
http://www.ubuntu.com/usn/USN-3115-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.2 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.ubuntu.com/usn/USN-3115-1 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.8.16 |
| purl |
pkg:pypi/django@1.8.16 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-577n-ucjg-9udw |
|
| 1 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 2 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 3 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 4 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 5 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 6 |
| vulnerability |
VCID-q9zk-pp6y-m7hu |
|
| 7 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 8 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 9 |
| vulnerability |
VCID-ud47-2t6q-pycj |
|
| 10 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 11 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 12 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 13 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.16 |
|
| 1 |
| url |
pkg:pypi/django@1.9.11 |
| purl |
pkg:pypi/django@1.9.11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 1 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 2 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 3 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 4 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 5 |
| vulnerability |
VCID-q9zk-pp6y-m7hu |
|
| 6 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 7 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 8 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 9 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 10 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 11 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.11 |
|
| 2 |
| url |
pkg:pypi/django@1.10.3 |
| purl |
pkg:pypi/django@1.10.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 1 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 2 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 3 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 4 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 5 |
| vulnerability |
VCID-pp8x-52ke-qbhj |
|
| 6 |
| vulnerability |
VCID-q9zk-pp6y-m7hu |
|
| 7 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 8 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 9 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 10 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 11 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 12 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10.3 |
|
|
| aliases |
CVE-2016-9014, GHSA-3f2c-jm6v-cr35, PYSEC-2016-18
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-kgw9-ng5a-jucv |
|
| 21 |
| url |
VCID-mb3h-bnss-5bcj |
| vulnerability_id |
VCID-mb3h-bnss-5bcj |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
| reference_url |
http://www.ubuntu.com/usn/USN-2469-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.ubuntu.com/usn/USN-2469-1 |
|
| 32 |
|
| 33 |
|
| 34 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.6.10 |
| purl |
pkg:pypi/django@1.6.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 4 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 5 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 6 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 7 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 8 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 9 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 10 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 11 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 12 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 13 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 14 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 15 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 16 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 17 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 18 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 19 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 20 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.10 |
|
| 1 |
| url |
pkg:pypi/django@1.7.3 |
| purl |
pkg:pypi/django@1.7.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 2 |
| vulnerability |
VCID-4v6q-ktnr-gue3 |
|
| 3 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 8 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 9 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 10 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 11 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 12 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 13 |
| vulnerability |
VCID-p94q-m8sa-s7by |
|
| 14 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 15 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 16 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 17 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 18 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 19 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 20 |
| vulnerability |
VCID-xg1w-8bd8-fbhu |
|
| 21 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 22 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 23 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.3 |
|
|
| aliases |
CVE-2015-0219, GHSA-7qfw-j7hp-v45g, PYSEC-2015-4
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mb3h-bnss-5bcj |
|
| 22 |
| url |
VCID-p1ft-8wjr-k7fh |
| vulnerability_id |
VCID-p1ft-8wjr-k7fh |
| summary |
cross-site scripting vulnerability |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
| reference_url |
http://seclists.org/oss-sec/2013/q3/369 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://seclists.org/oss-sec/2013/q3/369 |
|
| 6 |
| reference_url |
http://seclists.org/oss-sec/2013/q3/411 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://seclists.org/oss-sec/2013/q3/411 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.5.2 |
| purl |
pkg:pypi/django@1.5.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 4 |
| vulnerability |
VCID-7kbt-73z6-wfar |
|
| 5 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 6 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 7 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 8 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 9 |
| vulnerability |
VCID-b97e-fw2q-nqhk |
|
| 10 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 11 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 12 |
| vulnerability |
VCID-dr33-d1ck-wycg |
|
| 13 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 14 |
| vulnerability |
VCID-fsgd-8jz7-zkdn |
|
| 15 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 16 |
| vulnerability |
VCID-h328-c9gp-9ybg |
|
| 17 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 18 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 19 |
| vulnerability |
VCID-ss1p-jz2s-wyh7 |
|
| 20 |
| vulnerability |
VCID-ted5-qgyr-7ucf |
|
| 21 |
| vulnerability |
VCID-tr9m-84nc-x3cw |
|
| 22 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 23 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 24 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 25 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 26 |
| vulnerability |
VCID-v7kk-jbkz-77hf |
|
| 27 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 28 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 29 |
| vulnerability |
VCID-wvh5-z294-ffev |
|
| 30 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 31 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 32 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 33 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
| 34 |
| vulnerability |
VCID-yefp-r2s6-e7fe |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.2 |
|
|
| aliases |
CVE-2013-6044, GHSA-9cwg-mhxf-hh59, PYSEC-2013-21
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-p1ft-8wjr-k7fh |
|
| 23 |
| url |
VCID-ss1p-jz2s-wyh7 |
| vulnerability_id |
VCID-ss1p-jz2s-wyh7 |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
8.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
| reference_url |
http://www.ubuntu.com/usn/USN-2169-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
8.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.ubuntu.com/usn/USN-2169-1 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.5.6 |
| purl |
pkg:pypi/django@1.5.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 8 |
| vulnerability |
VCID-b97e-fw2q-nqhk |
|
| 9 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 10 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 11 |
| vulnerability |
VCID-dr33-d1ck-wycg |
|
| 12 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 13 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 14 |
| vulnerability |
VCID-h328-c9gp-9ybg |
|
| 15 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 16 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 17 |
| vulnerability |
VCID-ted5-qgyr-7ucf |
|
| 18 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 19 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 20 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 21 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 22 |
| vulnerability |
VCID-v7kk-jbkz-77hf |
|
| 23 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 24 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 25 |
| vulnerability |
VCID-wvh5-z294-ffev |
|
| 26 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 27 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 28 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 29 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.6 |
|
| 1 |
| url |
pkg:pypi/django@1.6.3 |
| purl |
pkg:pypi/django@1.6.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 3 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 4 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 5 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 6 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 7 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 8 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 9 |
| vulnerability |
VCID-b97e-fw2q-nqhk |
|
| 10 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 11 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 12 |
| vulnerability |
VCID-dr33-d1ck-wycg |
|
| 13 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 14 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 15 |
| vulnerability |
VCID-h328-c9gp-9ybg |
|
| 16 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 17 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 18 |
| vulnerability |
VCID-ted5-qgyr-7ucf |
|
| 19 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 20 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 21 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 22 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 23 |
| vulnerability |
VCID-v7kk-jbkz-77hf |
|
| 24 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 25 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 26 |
| vulnerability |
VCID-wvh5-z294-ffev |
|
| 27 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 28 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 29 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 30 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.3 |
|
|
| aliases |
CVE-2014-0474, GHSA-wqjj-hx84-v449, PYSEC-2014-3
|
| risk_score |
4.4 |
| exploitability |
0.5 |
| weighted_severity |
8.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ss1p-jz2s-wyh7 |
|
| 24 |
| url |
VCID-ted5-qgyr-7ucf |
| vulnerability_id |
VCID-ted5-qgyr-7ucf |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.5.9 |
| purl |
pkg:pypi/django@1.5.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 8 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 9 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 10 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 11 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 12 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 13 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 14 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 15 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 16 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 17 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 18 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 19 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 20 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 21 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 22 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 23 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.9 |
|
| 1 |
| url |
pkg:pypi/django@1.6.6 |
| purl |
pkg:pypi/django@1.6.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 3 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 4 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 5 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 6 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 7 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 8 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 9 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 10 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 11 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 12 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 13 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 14 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 15 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 16 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 17 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 18 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 19 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 20 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 21 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 22 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 23 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 24 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.6 |
|
| 2 |
|
|
| aliases |
CVE-2014-0482, GHSA-625g-gx8c-xcmg, PYSEC-2014-6
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ted5-qgyr-7ucf |
|
| 25 |
| url |
VCID-tr9m-84nc-x3cw |
| vulnerability_id |
VCID-tr9m-84nc-x3cw |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
| reference_url |
http://www.ubuntu.com/usn/USN-2169-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.ubuntu.com/usn/USN-2169-1 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.5.6 |
| purl |
pkg:pypi/django@1.5.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 8 |
| vulnerability |
VCID-b97e-fw2q-nqhk |
|
| 9 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 10 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 11 |
| vulnerability |
VCID-dr33-d1ck-wycg |
|
| 12 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 13 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 14 |
| vulnerability |
VCID-h328-c9gp-9ybg |
|
| 15 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 16 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 17 |
| vulnerability |
VCID-ted5-qgyr-7ucf |
|
| 18 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 19 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 20 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 21 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 22 |
| vulnerability |
VCID-v7kk-jbkz-77hf |
|
| 23 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 24 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 25 |
| vulnerability |
VCID-wvh5-z294-ffev |
|
| 26 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 27 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 28 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 29 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.6 |
|
| 1 |
| url |
pkg:pypi/django@1.6.3 |
| purl |
pkg:pypi/django@1.6.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 3 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 4 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 5 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 6 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 7 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 8 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 9 |
| vulnerability |
VCID-b97e-fw2q-nqhk |
|
| 10 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 11 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 12 |
| vulnerability |
VCID-dr33-d1ck-wycg |
|
| 13 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 14 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 15 |
| vulnerability |
VCID-h328-c9gp-9ybg |
|
| 16 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 17 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 18 |
| vulnerability |
VCID-ted5-qgyr-7ucf |
|
| 19 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 20 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 21 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 22 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 23 |
| vulnerability |
VCID-v7kk-jbkz-77hf |
|
| 24 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 25 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 26 |
| vulnerability |
VCID-wvh5-z294-ffev |
|
| 27 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 28 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 29 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 30 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.3 |
|
|
| aliases |
CVE-2014-0472, GHSA-rvq6-mrpv-m6rm, PYSEC-2014-1
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tr9m-84nc-x3cw |
|
| 26 |
| url |
VCID-tudc-7sgh-nkda |
| vulnerability_id |
VCID-tudc-7sgh-nkda |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
3.7 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N |
|
| 1 |
| value |
6.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
| reference_url |
https://groups.google.com/forum/#%21forum/django-announce |
| reference_id |
django-announce |
| reference_type |
|
| scores |
| 0 |
| value |
3.7 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
|
| 2 |
| value |
6.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-30T16:35:34Z/ |
|
|
| url |
https://groups.google.com/forum/#%21forum/django-announce |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@4.2.16 |
| purl |
pkg:pypi/django@4.2.16 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-13q1-fzeg-bfd9 |
|
| 1 |
| vulnerability |
VCID-4xtu-yeh2-pbc8 |
|
| 2 |
| vulnerability |
VCID-72z9-v49q-vbcc |
|
| 3 |
| vulnerability |
VCID-81b9-uqyv-kkhm |
|
| 4 |
| vulnerability |
VCID-a4fn-xf8s-tye5 |
|
| 5 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 6 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 7 |
| vulnerability |
VCID-dh5p-grha-r7a2 |
|
| 8 |
| vulnerability |
VCID-dqpz-q718-pkas |
|
| 9 |
| vulnerability |
VCID-e331-cbgc-hubm |
|
| 10 |
| vulnerability |
VCID-fwwm-7y13-y3dx |
|
| 11 |
| vulnerability |
VCID-hb8n-gwz6-9yd9 |
|
| 12 |
| vulnerability |
VCID-jdjc-ygtk-c7hv |
|
| 13 |
| vulnerability |
VCID-mja4-jz67-kbh6 |
|
| 14 |
| vulnerability |
VCID-pmhc-yu6r-uudy |
|
| 15 |
| vulnerability |
VCID-pn2d-2euz-pudt |
|
| 16 |
| vulnerability |
VCID-q3sw-jd7p-1yg1 |
|
| 17 |
| vulnerability |
VCID-r3dj-t213-jyhh |
|
| 18 |
| vulnerability |
VCID-s9u4-39qe-pkh2 |
|
| 19 |
| vulnerability |
VCID-sbwy-buwj-gkd2 |
|
| 20 |
| vulnerability |
VCID-wwzx-eujh-sye1 |
|
| 21 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 22 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
| 23 |
| vulnerability |
VCID-z3vg-rtt7-vuem |
|
| 24 |
| vulnerability |
VCID-zr7g-1xkm-fqdw |
|
| 25 |
| vulnerability |
VCID-zztc-4be5-fker |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@4.2.16 |
|
| 1 |
|
| 2 |
| url |
pkg:pypi/django@5.1.1 |
| purl |
pkg:pypi/django@5.1.1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-6wvp-47qa-m7bc |
|
| 1 |
| vulnerability |
VCID-72z9-v49q-vbcc |
|
| 2 |
| vulnerability |
VCID-81b9-uqyv-kkhm |
|
| 3 |
| vulnerability |
VCID-a4fn-xf8s-tye5 |
|
| 4 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 5 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 6 |
| vulnerability |
VCID-fwwm-7y13-y3dx |
|
| 7 |
| vulnerability |
VCID-mja4-jz67-kbh6 |
|
| 8 |
| vulnerability |
VCID-pmhc-yu6r-uudy |
|
| 9 |
| vulnerability |
VCID-s9u4-39qe-pkh2 |
|
| 10 |
| vulnerability |
VCID-wwzx-eujh-sye1 |
|
| 11 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 12 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
| 13 |
| vulnerability |
VCID-z3vg-rtt7-vuem |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.1 |
|
|
| aliases |
CVE-2024-45231, GHSA-rrqc-c2jx-6jgv
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tudc-7sgh-nkda |
|
| 27 |
| url |
VCID-u3v4-y55z-xkbq |
| vulnerability_id |
VCID-u3v4-y55z-xkbq |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
3.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N |
|
| 1 |
| value |
2.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
LOW |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
| reference_url |
http://www.ubuntu.com/usn/USN-2915-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
3.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N |
|
| 1 |
| value |
2.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
LOW |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.ubuntu.com/usn/USN-2915-1 |
|
| 23 |
| reference_url |
http://www.ubuntu.com/usn/USN-2915-2 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
3.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N |
|
| 1 |
| value |
2.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
LOW |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.ubuntu.com/usn/USN-2915-2 |
|
| 24 |
| reference_url |
http://www.ubuntu.com/usn/USN-2915-3 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
3.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N |
|
| 1 |
| value |
2.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
LOW |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.ubuntu.com/usn/USN-2915-3 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.8.10 |
| purl |
pkg:pypi/django@1.8.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3arc-t7n7-53ew |
|
| 1 |
| vulnerability |
VCID-577n-ucjg-9udw |
|
| 2 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 3 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 4 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 5 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 6 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 7 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 8 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 9 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 10 |
| vulnerability |
VCID-q9zk-pp6y-m7hu |
|
| 11 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 12 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 13 |
| vulnerability |
VCID-ud47-2t6q-pycj |
|
| 14 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 15 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 16 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 17 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.10 |
|
| 1 |
| url |
pkg:pypi/django@1.9.3 |
| purl |
pkg:pypi/django@1.9.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3arc-t7n7-53ew |
|
| 1 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 2 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 3 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 4 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 5 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 6 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 7 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 8 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 9 |
| vulnerability |
VCID-q9zk-pp6y-m7hu |
|
| 10 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 11 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 12 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 13 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 14 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 15 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.3 |
|
|
| aliases |
CVE-2016-2513, GHSA-fp6p-5xvw-m74f, PYSEC-2016-16
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-u3v4-y55z-xkbq |
|
| 28 |
| url |
VCID-u7zv-f4c1-xya2 |
| vulnerability_id |
VCID-u7zv-f4c1-xya2 |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
| reference_url |
http://ubuntu.com/usn/usn-2469-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://ubuntu.com/usn/usn-2469-1 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.6.10 |
| purl |
pkg:pypi/django@1.6.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 4 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 5 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 6 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 7 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 8 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 9 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 10 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 11 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 12 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 13 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 14 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 15 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 16 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 17 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 18 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 19 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 20 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.10 |
|
| 1 |
| url |
pkg:pypi/django@1.7.3 |
| purl |
pkg:pypi/django@1.7.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 2 |
| vulnerability |
VCID-4v6q-ktnr-gue3 |
|
| 3 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 8 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 9 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 10 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 11 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 12 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 13 |
| vulnerability |
VCID-p94q-m8sa-s7by |
|
| 14 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 15 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 16 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 17 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 18 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 19 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 20 |
| vulnerability |
VCID-xg1w-8bd8-fbhu |
|
| 21 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 22 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 23 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.3 |
|
|
| aliases |
CVE-2015-0221, GHSA-jhjg-w2cp-5j44, PYSEC-2015-6
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-u7zv-f4c1-xya2 |
|
| 29 |
| url |
VCID-u9dr-ca2g-e3hk |
| vulnerability_id |
VCID-u9dr-ca2g-e3hk |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
| reference_url |
https://github.com/advisories/GHSA-68w8-qjq3-2gfm |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.9 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
|
| 1 |
| value |
MODERATE |
| scoring_system |
cvssv3.1_qr |
| scoring_elements |
|
|
| 2 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/advisories/GHSA-68w8-qjq3-2gfm |
|
| 7 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.9 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@2.2.24 |
| purl |
pkg:pypi/django@2.2.24 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-2sve-8b9b-hud7 |
|
| 1 |
| vulnerability |
VCID-38w8-jbku-eugu |
|
| 2 |
| vulnerability |
VCID-6uja-brvn-rufw |
|
| 3 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 4 |
| vulnerability |
VCID-cece-1mun-ckgh |
|
| 5 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 6 |
| vulnerability |
VCID-gtkn-prux-vbdb |
|
| 7 |
| vulnerability |
VCID-j3bz-6jqe-ffgm |
|
| 8 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 9 |
| vulnerability |
VCID-w3dy-chny-5fbc |
|
| 10 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 11 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 12 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
| 13 |
| vulnerability |
VCID-ymm2-ns18-wkcw |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@2.2.24 |
|
| 1 |
|
| 2 |
| url |
pkg:pypi/django@3.2.4 |
| purl |
pkg:pypi/django@3.2.4 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-19se-3ng9-c7bw |
|
| 1 |
| vulnerability |
VCID-28ff-ng96-5ugk |
|
| 2 |
| vulnerability |
VCID-2sve-8b9b-hud7 |
|
| 3 |
| vulnerability |
VCID-38w8-jbku-eugu |
|
| 4 |
| vulnerability |
VCID-6tdg-t4nv-sbha |
|
| 5 |
| vulnerability |
VCID-6uja-brvn-rufw |
|
| 6 |
| vulnerability |
VCID-7spe-cayc-4qb4 |
|
| 7 |
| vulnerability |
VCID-9ge1-u71f-rbaw |
|
| 8 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 9 |
| vulnerability |
VCID-cece-1mun-ckgh |
|
| 10 |
| vulnerability |
VCID-d2cw-526n-mbem |
|
| 11 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 12 |
| vulnerability |
VCID-fmpr-bhrf-17gm |
|
| 13 |
| vulnerability |
VCID-gtkn-prux-vbdb |
|
| 14 |
| vulnerability |
VCID-j3bz-6jqe-ffgm |
|
| 15 |
| vulnerability |
VCID-j4rs-235r-dkfj |
|
| 16 |
| vulnerability |
VCID-jspj-r34n-jubz |
|
| 17 |
| vulnerability |
VCID-nhzy-7qdm-wbg8 |
|
| 18 |
| vulnerability |
VCID-qsme-8a2n-23fs |
|
| 19 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 20 |
| vulnerability |
VCID-ufv7-y5a7-fugg |
|
| 21 |
| vulnerability |
VCID-w3dy-chny-5fbc |
|
| 22 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 23 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 24 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
| 25 |
| vulnerability |
VCID-ymm2-ns18-wkcw |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.2.4 |
|
|
| aliases |
BIT-django-2021-33203, CVE-2021-33203, GHSA-68w8-qjq3-2gfm, PYSEC-2021-98
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-u9dr-ca2g-e3hk |
|
| 30 |
| url |
VCID-v7kk-jbkz-77hf |
| vulnerability_id |
VCID-v7kk-jbkz-77hf |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
| reference_url |
http://secunia.com/advisories/61281 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
|
| 1 |
| value |
7.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://secunia.com/advisories/61281 |
|
| 9 |
|
| 10 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
|
| 1 |
| value |
7.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
| reference_url |
http://ubuntu.com/usn/usn-2212-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
|
| 1 |
| value |
7.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://ubuntu.com/usn/usn-2212-1 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.5.8 |
| purl |
pkg:pypi/django@1.5.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 8 |
| vulnerability |
VCID-b97e-fw2q-nqhk |
|
| 9 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 10 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 11 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 12 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 13 |
| vulnerability |
VCID-h328-c9gp-9ybg |
|
| 14 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 15 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 16 |
| vulnerability |
VCID-ted5-qgyr-7ucf |
|
| 17 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 18 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 19 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 20 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 21 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 22 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 23 |
| vulnerability |
VCID-wvh5-z294-ffev |
|
| 24 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 25 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 26 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 27 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.8 |
|
| 1 |
| url |
pkg:pypi/django@1.6.5 |
| purl |
pkg:pypi/django@1.6.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 3 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 4 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 5 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 6 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 7 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 8 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 9 |
| vulnerability |
VCID-b97e-fw2q-nqhk |
|
| 10 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 11 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 12 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 13 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 14 |
| vulnerability |
VCID-h328-c9gp-9ybg |
|
| 15 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 16 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 17 |
| vulnerability |
VCID-ted5-qgyr-7ucf |
|
| 18 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 19 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 20 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 21 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 22 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 23 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 24 |
| vulnerability |
VCID-wvh5-z294-ffev |
|
| 25 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 26 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 27 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 28 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.5 |
|
| 2 |
|
|
| aliases |
CVE-2014-3730, GHSA-vq3h-3q7v-9prw, PYSEC-2014-20
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-v7kk-jbkz-77hf |
|
| 31 |
| url |
VCID-v9gk-3pqk-a7cr |
| vulnerability_id |
VCID-v9gk-3pqk-a7cr |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
| reference_url |
https://seclists.org/bugtraq/2020/Feb/30 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://seclists.org/bugtraq/2020/Feb/30 |
|
| 16 |
|
| 17 |
|
| 18 |
| reference_url |
https://usn.ubuntu.com/4264-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://usn.ubuntu.com/4264-1 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
| reference_url |
https://github.com/advisories/GHSA-hmr4-m2h5-33qx |
| reference_id |
GHSA-hmr4-m2h5-33qx |
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
CRITICAL |
| scoring_system |
cvssv3.1_qr |
| scoring_elements |
|
|
| 2 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/advisories/GHSA-hmr4-m2h5-33qx |
|
|
| fixed_packages |
| 0 |
|
| 1 |
| url |
pkg:pypi/django@2.2.10 |
| purl |
pkg:pypi/django@2.2.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-27gm-2u1q-skh1 |
|
| 1 |
| vulnerability |
VCID-2qu4-qayw-a7ec |
|
| 2 |
| vulnerability |
VCID-2sve-8b9b-hud7 |
|
| 3 |
| vulnerability |
VCID-38w8-jbku-eugu |
|
| 4 |
| vulnerability |
VCID-5zzj-9ez5-6ub1 |
|
| 5 |
| vulnerability |
VCID-6uja-brvn-rufw |
|
| 6 |
| vulnerability |
VCID-9qxj-9mb9-7bcv |
|
| 7 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 8 |
| vulnerability |
VCID-cece-1mun-ckgh |
|
| 9 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 10 |
| vulnerability |
VCID-djh3-m1t4-2qe1 |
|
| 11 |
| vulnerability |
VCID-dttw-t3a9-gbbn |
|
| 12 |
| vulnerability |
VCID-gtkn-prux-vbdb |
|
| 13 |
| vulnerability |
VCID-j3bz-6jqe-ffgm |
|
| 14 |
| vulnerability |
VCID-nwtr-br34-qkbv |
|
| 15 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 16 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 17 |
| vulnerability |
VCID-vc8c-7qn1-9uaz |
|
| 18 |
| vulnerability |
VCID-vcqt-n2pk-kyeb |
|
| 19 |
| vulnerability |
VCID-w3dy-chny-5fbc |
|
| 20 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 21 |
| vulnerability |
VCID-x1qk-bs7j-63ch |
|
| 22 |
| vulnerability |
VCID-x91x-cxp9-4fgp |
|
| 23 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 24 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
| 25 |
| vulnerability |
VCID-ymm2-ns18-wkcw |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@2.2.10 |
|
| 2 |
| url |
pkg:pypi/django@3.0.3 |
| purl |
pkg:pypi/django@3.0.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-27gm-2u1q-skh1 |
|
| 1 |
| vulnerability |
VCID-28ff-ng96-5ugk |
|
| 2 |
| vulnerability |
VCID-2qu4-qayw-a7ec |
|
| 3 |
| vulnerability |
VCID-9qxj-9mb9-7bcv |
|
| 4 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 5 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 6 |
| vulnerability |
VCID-djh3-m1t4-2qe1 |
|
| 7 |
| vulnerability |
VCID-dttw-t3a9-gbbn |
|
| 8 |
| vulnerability |
VCID-j3bz-6jqe-ffgm |
|
| 9 |
| vulnerability |
VCID-nwtr-br34-qkbv |
|
| 10 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 11 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 12 |
| vulnerability |
VCID-vc8c-7qn1-9uaz |
|
| 13 |
| vulnerability |
VCID-vcqt-n2pk-kyeb |
|
| 14 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 15 |
| vulnerability |
VCID-x1qk-bs7j-63ch |
|
| 16 |
| vulnerability |
VCID-x91x-cxp9-4fgp |
|
| 17 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 18 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.0.3 |
|
|
| aliases |
BIT-django-2020-7471, CVE-2020-7471, GHSA-hmr4-m2h5-33qx, PYSEC-2020-35
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-v9gk-3pqk-a7cr |
|
| 32 |
| url |
VCID-wpt2-535q-3yfe |
| vulnerability_id |
VCID-wpt2-535q-3yfe |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@3.2.15 |
| purl |
pkg:pypi/django@3.2.15 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-19se-3ng9-c7bw |
|
| 1 |
| vulnerability |
VCID-6tdg-t4nv-sbha |
|
| 2 |
| vulnerability |
VCID-7spe-cayc-4qb4 |
|
| 3 |
| vulnerability |
VCID-9ge1-u71f-rbaw |
|
| 4 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 5 |
| vulnerability |
VCID-d2cw-526n-mbem |
|
| 6 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 7 |
| vulnerability |
VCID-j4rs-235r-dkfj |
|
| 8 |
| vulnerability |
VCID-jspj-r34n-jubz |
|
| 9 |
| vulnerability |
VCID-nhzy-7qdm-wbg8 |
|
| 10 |
| vulnerability |
VCID-qsme-8a2n-23fs |
|
| 11 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 12 |
| vulnerability |
VCID-ufv7-y5a7-fugg |
|
| 13 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 14 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.2.15 |
|
| 1 |
| url |
pkg:pypi/django@4.0.7 |
| purl |
pkg:pypi/django@4.0.7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-19se-3ng9-c7bw |
|
| 1 |
| vulnerability |
VCID-6tdg-t4nv-sbha |
|
| 2 |
| vulnerability |
VCID-7spe-cayc-4qb4 |
|
| 3 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 4 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 5 |
| vulnerability |
VCID-jspj-r34n-jubz |
|
| 6 |
| vulnerability |
VCID-nhzy-7qdm-wbg8 |
|
| 7 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 8 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 9 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@4.0.7 |
|
|
| aliases |
BIT-django-2022-36359, CVE-2022-36359, GHSA-8x94-hmjh-97hq, PYSEC-2022-245
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-wpt2-535q-3yfe |
|
| 33 |
| url |
VCID-wvh5-z294-ffev |
| vulnerability_id |
VCID-wvh5-z294-ffev |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.5.9 |
| purl |
pkg:pypi/django@1.5.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 8 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 9 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 10 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 11 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 12 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 13 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 14 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 15 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 16 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 17 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 18 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 19 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 20 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 21 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 22 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 23 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.9 |
|
| 1 |
| url |
pkg:pypi/django@1.6.6 |
| purl |
pkg:pypi/django@1.6.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-1zk7-jhxe-2kc4 |
|
| 3 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 4 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 5 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 6 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 7 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 8 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 9 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 10 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 11 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 12 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 13 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 14 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 15 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 16 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 17 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 18 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 19 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 20 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 21 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 22 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 23 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 24 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.6 |
|
|
| aliases |
CVE-2014-0481, GHSA-296w-6qhq-gf92, PYSEC-2014-5
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-wvh5-z294-ffev |
|
| 34 |
| url |
VCID-xczb-x1dc-1fhc |
| vulnerability_id |
VCID-xczb-x1dc-1fhc |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
| reference_url |
http://ubuntu.com/usn/usn-2539-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://ubuntu.com/usn/usn-2539-1 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.6.11 |
| purl |
pkg:pypi/django@1.6.11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 2 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 3 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 4 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 5 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 6 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 7 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 8 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 9 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 10 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 11 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 12 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 13 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 14 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 15 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 16 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 17 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 18 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.6.11 |
|
| 1 |
| url |
pkg:pypi/django@1.7.7 |
| purl |
pkg:pypi/django@1.7.7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-4v6q-ktnr-gue3 |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 4 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 5 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 6 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 7 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 8 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 9 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 10 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 11 |
| vulnerability |
VCID-p94q-m8sa-s7by |
|
| 12 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 13 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 14 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 15 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 16 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 17 |
| vulnerability |
VCID-xg1w-8bd8-fbhu |
|
| 18 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 19 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 20 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.7 |
|
| 2 |
|
| 3 |
| url |
pkg:pypi/django@1.8c1 |
| purl |
pkg:pypi/django@1.8c1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-3arc-t7n7-53ew |
|
| 2 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 3 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 4 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 5 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 6 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 7 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 8 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 9 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 10 |
| vulnerability |
VCID-p94q-m8sa-s7by |
|
| 11 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 12 |
| vulnerability |
VCID-u2c7-nvng-eya1 |
|
| 13 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 14 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 15 |
| vulnerability |
VCID-ud47-2t6q-pycj |
|
| 16 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 17 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 18 |
| vulnerability |
VCID-x3rb-wf8q-auer |
|
| 19 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 20 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 21 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8c1 |
|
|
| aliases |
CVE-2015-2317, GHSA-7fq8-4pv5-5w5c, PYSEC-2015-9
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xczb-x1dc-1fhc |
|
| 35 |
| url |
VCID-xkrz-p214-hqhp |
| vulnerability_id |
VCID-xkrz-p214-hqhp |
| summary |
An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.
NFKC normalization in Python is slow on Windows. As a consequence, `django.http.HttpResponseRedirect`, `django.http.HttpResponsePermanentRedirect`, and the shortcut `django.shortcuts.redirect` were subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters.
Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.
Django would like to thank Seokchan Yoon for reporting this issue. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@4.2.26 |
| purl |
pkg:pypi/django@4.2.26 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-13q1-fzeg-bfd9 |
|
| 1 |
| vulnerability |
VCID-4xtu-yeh2-pbc8 |
|
| 2 |
| vulnerability |
VCID-72z9-v49q-vbcc |
|
| 3 |
| vulnerability |
VCID-81b9-uqyv-kkhm |
|
| 4 |
| vulnerability |
VCID-dh5p-grha-r7a2 |
|
| 5 |
| vulnerability |
VCID-dqpz-q718-pkas |
|
| 6 |
| vulnerability |
VCID-e331-cbgc-hubm |
|
| 7 |
| vulnerability |
VCID-hb8n-gwz6-9yd9 |
|
| 8 |
| vulnerability |
VCID-jdjc-ygtk-c7hv |
|
| 9 |
| vulnerability |
VCID-pn2d-2euz-pudt |
|
| 10 |
| vulnerability |
VCID-q3sw-jd7p-1yg1 |
|
| 11 |
| vulnerability |
VCID-r3dj-t213-jyhh |
|
| 12 |
| vulnerability |
VCID-sbwy-buwj-gkd2 |
|
| 13 |
| vulnerability |
VCID-zr7g-1xkm-fqdw |
|
| 14 |
| vulnerability |
VCID-zztc-4be5-fker |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@4.2.26 |
|
| 1 |
|
| 2 |
| url |
pkg:pypi/django@5.2.8 |
| purl |
pkg:pypi/django@5.2.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-13q1-fzeg-bfd9 |
|
| 1 |
| vulnerability |
VCID-1g9h-ryet-2ffs |
|
| 2 |
| vulnerability |
VCID-1mp4-kq35-1ba7 |
|
| 3 |
| vulnerability |
VCID-4xtu-yeh2-pbc8 |
|
| 4 |
| vulnerability |
VCID-72z9-v49q-vbcc |
|
| 5 |
| vulnerability |
VCID-81b9-uqyv-kkhm |
|
| 6 |
| vulnerability |
VCID-8tz7-vjwz-rycs |
|
| 7 |
| vulnerability |
VCID-dh5p-grha-r7a2 |
|
| 8 |
| vulnerability |
VCID-dqpz-q718-pkas |
|
| 9 |
| vulnerability |
VCID-e331-cbgc-hubm |
|
| 10 |
| vulnerability |
VCID-h5qf-zbcz-qygg |
|
| 11 |
| vulnerability |
VCID-hb8n-gwz6-9yd9 |
|
| 12 |
| vulnerability |
VCID-jdjc-ygtk-c7hv |
|
| 13 |
| vulnerability |
VCID-m4mg-yd86-dyfw |
|
| 14 |
| vulnerability |
VCID-n915-wj16-wka6 |
|
| 15 |
| vulnerability |
VCID-pn2d-2euz-pudt |
|
| 16 |
| vulnerability |
VCID-q3sw-jd7p-1yg1 |
|
| 17 |
| vulnerability |
VCID-r3dj-t213-jyhh |
|
| 18 |
| vulnerability |
VCID-sbwy-buwj-gkd2 |
|
| 19 |
| vulnerability |
VCID-tvk1-4am9-f3cf |
|
| 20 |
| vulnerability |
VCID-z7sj-r61n-qbcd |
|
| 21 |
| vulnerability |
VCID-zr7g-1xkm-fqdw |
|
| 22 |
| vulnerability |
VCID-zztc-4be5-fker |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.2.8 |
|
| 3 |
|
|
| aliases |
BIT-django-2025-64458, CVE-2025-64458, GHSA-qw25-v68c-qjf3, PYSEC-2025-107
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xkrz-p214-hqhp |
|
| 36 |
| url |
VCID-xqv3-emqb-g3eu |
| vulnerability_id |
VCID-xqv3-emqb-g3eu |
| summary |
security update |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
| reference_url |
http://www.ubuntu.com/usn/USN-2671-1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
http://www.ubuntu.com/usn/USN-2671-1 |
|
| 24 |
|
| 25 |
| reference_url |
https://security.gentoo.org/glsa/201510-06 |
| reference_id |
GLSA-201510-06 |
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://security.gentoo.org/glsa/201510-06 |
|
| 26 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.7.9 |
| purl |
pkg:pypi/django@1.7.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-4v6q-ktnr-gue3 |
|
| 2 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 3 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 4 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 5 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 6 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 7 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 8 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 9 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 10 |
| vulnerability |
VCID-p94q-m8sa-s7by |
|
| 11 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 12 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 13 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 14 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 15 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 16 |
| vulnerability |
VCID-xg1w-8bd8-fbhu |
|
| 17 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 18 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.9 |
|
| 1 |
| url |
pkg:pypi/django@1.8.3 |
| purl |
pkg:pypi/django@1.8.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 1 |
| vulnerability |
VCID-3arc-t7n7-53ew |
|
| 2 |
| vulnerability |
VCID-4v6q-ktnr-gue3 |
|
| 3 |
| vulnerability |
VCID-577n-ucjg-9udw |
|
| 4 |
| vulnerability |
VCID-7kj8-kfda-wfhj |
|
| 5 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 6 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 7 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 8 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 9 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 10 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 11 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 12 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 13 |
| vulnerability |
VCID-p94q-m8sa-s7by |
|
| 14 |
| vulnerability |
VCID-q9zk-pp6y-m7hu |
|
| 15 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 16 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 17 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 18 |
| vulnerability |
VCID-ud47-2t6q-pycj |
|
| 19 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 20 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 21 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 22 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.3 |
|
|
| aliases |
CVE-2015-5144, GHSA-q5qw-4364-5hhm, PYSEC-2015-10
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xqv3-emqb-g3eu |
|
| 37 |
| url |
VCID-ycc8-7k6j-4kbf |
| vulnerability_id |
VCID-ycc8-7k6j-4kbf |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
| 41 |
|
| 42 |
| reference_url |
https://groups.google.com/g/django-announce |
| reference_id |
django-announce |
| reference_type |
|
| scores |
| 0 |
| value |
4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N |
|
| 1 |
| value |
4.0 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 3 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-05T13:20:12Z/ |
|
|
| url |
https://groups.google.com/g/django-announce |
|
| 43 |
|
| 44 |
|
| 45 |
|
| 46 |
|
| 47 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@4.2.22 |
| purl |
pkg:pypi/django@4.2.22 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-13q1-fzeg-bfd9 |
|
| 1 |
| vulnerability |
VCID-4xtu-yeh2-pbc8 |
|
| 2 |
| vulnerability |
VCID-72z9-v49q-vbcc |
|
| 3 |
| vulnerability |
VCID-81b9-uqyv-kkhm |
|
| 4 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 5 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 6 |
| vulnerability |
VCID-dh5p-grha-r7a2 |
|
| 7 |
| vulnerability |
VCID-dqpz-q718-pkas |
|
| 8 |
| vulnerability |
VCID-e331-cbgc-hubm |
|
| 9 |
| vulnerability |
VCID-fwwm-7y13-y3dx |
|
| 10 |
| vulnerability |
VCID-hb8n-gwz6-9yd9 |
|
| 11 |
| vulnerability |
VCID-jdjc-ygtk-c7hv |
|
| 12 |
| vulnerability |
VCID-pmhc-yu6r-uudy |
|
| 13 |
| vulnerability |
VCID-pn2d-2euz-pudt |
|
| 14 |
| vulnerability |
VCID-q3sw-jd7p-1yg1 |
|
| 15 |
| vulnerability |
VCID-r3dj-t213-jyhh |
|
| 16 |
| vulnerability |
VCID-sbwy-buwj-gkd2 |
|
| 17 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 18 |
| vulnerability |
VCID-zr7g-1xkm-fqdw |
|
| 19 |
| vulnerability |
VCID-zztc-4be5-fker |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@4.2.22 |
|
| 1 |
|
| 2 |
| url |
pkg:pypi/django@5.2.2 |
| purl |
pkg:pypi/django@5.2.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-13q1-fzeg-bfd9 |
|
| 1 |
| vulnerability |
VCID-1g9h-ryet-2ffs |
|
| 2 |
| vulnerability |
VCID-1mp4-kq35-1ba7 |
|
| 3 |
| vulnerability |
VCID-4xtu-yeh2-pbc8 |
|
| 4 |
| vulnerability |
VCID-72z9-v49q-vbcc |
|
| 5 |
| vulnerability |
VCID-81b9-uqyv-kkhm |
|
| 6 |
| vulnerability |
VCID-8tz7-vjwz-rycs |
|
| 7 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 8 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 9 |
| vulnerability |
VCID-dh5p-grha-r7a2 |
|
| 10 |
| vulnerability |
VCID-dqpz-q718-pkas |
|
| 11 |
| vulnerability |
VCID-e331-cbgc-hubm |
|
| 12 |
| vulnerability |
VCID-fwwm-7y13-y3dx |
|
| 13 |
| vulnerability |
VCID-h5qf-zbcz-qygg |
|
| 14 |
| vulnerability |
VCID-hb8n-gwz6-9yd9 |
|
| 15 |
| vulnerability |
VCID-jdjc-ygtk-c7hv |
|
| 16 |
| vulnerability |
VCID-m4mg-yd86-dyfw |
|
| 17 |
| vulnerability |
VCID-n915-wj16-wka6 |
|
| 18 |
| vulnerability |
VCID-pmhc-yu6r-uudy |
|
| 19 |
| vulnerability |
VCID-pn2d-2euz-pudt |
|
| 20 |
| vulnerability |
VCID-q3sw-jd7p-1yg1 |
|
| 21 |
| vulnerability |
VCID-r3dj-t213-jyhh |
|
| 22 |
| vulnerability |
VCID-sbwy-buwj-gkd2 |
|
| 23 |
| vulnerability |
VCID-tvk1-4am9-f3cf |
|
| 24 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 25 |
| vulnerability |
VCID-z7sj-r61n-qbcd |
|
| 26 |
| vulnerability |
VCID-zr7g-1xkm-fqdw |
|
| 27 |
| vulnerability |
VCID-zztc-4be5-fker |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.2.2 |
|
|
| aliases |
BIT-django-2025-48432, CVE-2025-48432, GHSA-7xr5-9hcq-chf9, PYSEC-2025-47
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ycc8-7k6j-4kbf |
|
| 38 |
| url |
VCID-yefp-r2s6-e7fe |
| vulnerability_id |
VCID-yefp-r2s6-e7fe |
| summary |
denial of service |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
| reference_url |
https://github.com/django/django |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/django/django |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/django@1.5.4 |
| purl |
pkg:pypi/django@1.5.4 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-14vg-wbxe-6ffj |
|
| 1 |
| vulnerability |
VCID-1d73-dpsg-wkhk |
|
| 2 |
| vulnerability |
VCID-55n8-mzj7-z7hh |
|
| 3 |
| vulnerability |
VCID-5bnx-5d1x-k3by |
|
| 4 |
| vulnerability |
VCID-7xx2-z2tg-7khd |
|
| 5 |
| vulnerability |
VCID-8uyx-7dub-hka9 |
|
| 6 |
| vulnerability |
VCID-9mmy-6rvf-1qbp |
|
| 7 |
| vulnerability |
VCID-a36b-7nxc-5ffg |
|
| 8 |
| vulnerability |
VCID-b97e-fw2q-nqhk |
|
| 9 |
| vulnerability |
VCID-beas-dwx6-1ffp |
|
| 10 |
| vulnerability |
VCID-db6w-yj8t-sfg4 |
|
| 11 |
| vulnerability |
VCID-dr33-d1ck-wycg |
|
| 12 |
| vulnerability |
VCID-eay8-gdua-p3b5 |
|
| 13 |
| vulnerability |
VCID-fsgd-8jz7-zkdn |
|
| 14 |
| vulnerability |
VCID-gfad-ffzw-g3hv |
|
| 15 |
| vulnerability |
VCID-h328-c9gp-9ybg |
|
| 16 |
| vulnerability |
VCID-kgw9-ng5a-jucv |
|
| 17 |
| vulnerability |
VCID-mb3h-bnss-5bcj |
|
| 18 |
| vulnerability |
VCID-ss1p-jz2s-wyh7 |
|
| 19 |
| vulnerability |
VCID-ted5-qgyr-7ucf |
|
| 20 |
| vulnerability |
VCID-tr9m-84nc-x3cw |
|
| 21 |
| vulnerability |
VCID-tudc-7sgh-nkda |
|
| 22 |
| vulnerability |
VCID-u3v4-y55z-xkbq |
|
| 23 |
| vulnerability |
VCID-u7zv-f4c1-xya2 |
|
| 24 |
| vulnerability |
VCID-u9dr-ca2g-e3hk |
|
| 25 |
| vulnerability |
VCID-v7kk-jbkz-77hf |
|
| 26 |
| vulnerability |
VCID-v9gk-3pqk-a7cr |
|
| 27 |
| vulnerability |
VCID-wpt2-535q-3yfe |
|
| 28 |
| vulnerability |
VCID-wvh5-z294-ffev |
|
| 29 |
| vulnerability |
VCID-xczb-x1dc-1fhc |
|
| 30 |
| vulnerability |
VCID-xkrz-p214-hqhp |
|
| 31 |
| vulnerability |
VCID-xqv3-emqb-g3eu |
|
| 32 |
| vulnerability |
VCID-ycc8-7k6j-4kbf |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5.4 |
|
|
| aliases |
CVE-2013-1443, GHSA-4c42-4rxm-x6qf, PYSEC-2013-18
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-yefp-r2s6-e7fe |
|