https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 22:00:33 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-10589 cnvd-2016-10589 https://cve.radiocsirt.org/vuln/cnvd-2016-10589 https://cve.radiocsirt.org/vuln/euvd-2026-87561 EUVD-2026-87561 https://cve.radiocsirt.org/vuln/euvd-2026-87561 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9013 <p>Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary.</p> <p>Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-9013 https://cve.radiocsirt.org/vuln/ghsa-mv8g-fhh6-6267 <p><strong>Affected:</strong> PyPI: Django</p> <p>Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary.</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary.</p> https://cve.radiocsirt.org/vuln/ghsa-mv8g-fhh6-6267 https://cve.radiocsirt.org/vuln/gsd-2016-9013 gsd-2016-9013 https://cve.radiocsirt.org/vuln/gsd-2016-9013 https://cve.radiocsirt.org/vuln/pysec-2016-17 <p><strong>Affected:</strong> PyPI: django</p> <p>Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary.</p> <p><strong>Affected:</strong> PyPI: django</p> <p>Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary.</p> https://cve.radiocsirt.org/vuln/pysec-2016-17 https://cve.radiocsirt.org/vuln/suse-su-2018:0973-1 <p>Security update for python-Django</p> <p>Security update for python-Django</p> https://cve.radiocsirt.org/vuln/suse-su-2018:0973-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-9013 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: python-django, Ubuntu:16.04:LTS: python-django</p> <p>Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: python-django, Ubuntu:16.04:LTS: python-django</p> <p>Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-9013