https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T06:01:40.377437+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-01467 cnvd-2016-01467 2026-10-05T06:01:40.444334+00:00 cnvd-2016-01467 https://cve.radiocsirt.org/vuln/euvd-2026-83078 EUVD-2026-83078 2026-10-05T06:01:40.444374+00:00 EUVD-2026-83078 https://cve.radiocsirt.org/vuln/fkie_cve-2016-2513 fkie_cve-2016-2513 2026-10-05T06:01:40.444388+00:00

The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.

 https://cve.radiocsirt.org/vuln/ghsa-fp6p-5xvw-m74f GHSA-fp6p-5xvw-m74f — Django User Enumeration Vulnerability 2026-10-05T06:01:40.444417+00:00

Affected: PyPI: Django

The password hasher in `contrib/auth/hashers.py` in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.

 https://cve.radiocsirt.org/vuln/gsd-2016-2513 gsd-2016-2513 2026-10-05T06:01:40.444441+00:00 gsd-2016-2513 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10361-1 openSUSE-SU-2024:10361-1 — python3-Django-1.10.4-1.1 on GA media 2026-10-05T06:01:40.444453+00:00

python3-Django-1.10.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2016-16 PYSEC-2016-16 2026-10-05T06:01:40.444472+00:00

Affected: PyPI: django

The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.

 https://cve.radiocsirt.org/vuln/rhsa-2016:0502 RHSA-2016:0502 — Red Hat Security Advisory: python-django security update 2026-10-05T06:01:40.444490+00:00

python-django: Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth python-django: User enumeration through timing difference on password hasher work factor upgrade

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2513 UBUNTU-CVE-2016-2513 2026-10-05T06:01:40.444508+00:00

Affected: Ubuntu:14.04:LTS: python-django

The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.