https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:23:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-104587 EUVD-2026-104587 https://cve.radiocsirt.org/vuln/euvd-2026-104587 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0305 <p>The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information.</p> <p>The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-0305 https://cve.radiocsirt.org/vuln/ghsa-r7w6-p47g-vj53 <p><strong>Affected:</strong> PyPI: Django</p> <p>The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information.</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information.</p> https://cve.radiocsirt.org/vuln/ghsa-r7w6-p47g-vj53 https://cve.radiocsirt.org/vuln/gsd-2013-0305 gsd-2013-0305 https://cve.radiocsirt.org/vuln/gsd-2013-0305 https://cve.radiocsirt.org/vuln/pysec-2013-16 <p><strong>Affected:</strong> PyPI: django</p> <p>The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information.</p> <p><strong>Affected:</strong> PyPI: django</p> <p>The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information.</p> https://cve.radiocsirt.org/vuln/pysec-2013-16 https://cve.radiocsirt.org/vuln/rhsa-2013:0670 <p>Django: Data leakage via admin history log Django: Formset denial-of-service bindings: Internal entity expansion in Python XML libraries inflicts DoS vulnerabilities bindings: External entity expansion in Python XML libraries inflicts potential security flaws and DoS vulnerabilities</p> <p>Django: Data leakage via admin history log Django: Formset denial-of-service bindings: Internal entity expansion in Python XML libraries inflicts DoS vulnerabilities bindings: External entity expansion in Python XML libraries inflicts potential security flaws and DoS vulnerabilities</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0670