https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:00:33.780484+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-10589 cnvd-2016-10589 2026-10-05T22:00:33.786634+00:00 cnvd-2016-10589 https://cve.radiocsirt.org/vuln/euvd-2026-87561 EUVD-2026-87561 2026-10-05T22:00:33.786670+00:00 EUVD-2026-87561 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9013 fkie_cve-2016-9013 2026-10-05T22:00:33.786684+00:00

Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary.

 https://cve.radiocsirt.org/vuln/ghsa-mv8g-fhh6-6267 GHSA-mv8g-fhh6-6267 — Django user with hardcoded password created when running tests on Oracle 2026-10-05T22:00:33.786713+00:00

Affected: PyPI: Django

Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary.

 https://cve.radiocsirt.org/vuln/gsd-2016-9013 gsd-2016-9013 2026-10-05T22:00:33.786738+00:00 gsd-2016-9013 https://cve.radiocsirt.org/vuln/pysec-2016-17 PYSEC-2016-17 2026-10-05T22:00:33.786749+00:00

Affected: PyPI: django

Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary.

 https://cve.radiocsirt.org/vuln/suse-su-2018:0973-1 SUSE-SU-2018:0973-1 — Security update for python-Django 2026-10-05T22:00:33.786766+00:00

Security update for python-Django

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-9013 UBUNTU-CVE-2016-9013 2026-10-05T22:00:33.786783+00:00

Affected: Ubuntu:14.04:LTS: python-django, Ubuntu:16.04:LTS: python-django

Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary.