25 matches found
RHEL 7 : python-django (RHSA-2016:1595)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:1595 advisory. Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as...
RHEL 7 : python-django (RHSA-2016:1596)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:1596 advisory. Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as...
admin-extra-urls (0.7.0), backstage-oauth2 (>=0.1.7, <=0.1.8) +73 more potentially affected by CVE-2016-6186 via django (>=1.5.12, <=1.8.13)
django PYPI version =1.5.12, =0.1.7, =3.1.0, =0.0.1, =0.1.17, =1.0.0, =0.3.2, =0.1.0, =0.3.0 - django-bower-cache 0.5.0 - django-canary-endpoint 0.1.2 and more Source cves: CVE-2016-6186 Source advisory: OSV:GHSA-C8C8-9472-W52H...
admin-extra-urls (0.7.0), backstage-oauth2 (>=0.1.7, <=0.1.8) +73 more potentially affected by CVE-2016-6186 via django (>=1.5.12, <=1.8.13)
django PYPI version =1.5.12, =0.1.7, =3.1.0, =0.0.1, =0.1.17, =1.0.0, =0.3.2, =0.1.0, =0.3.0 - django-bower-cache 0.5.0 - django-canary-endpoint 0.1.2 and more Source cves: CVE-2016-6186 Source advisory: GHSA-C8C8-9472-W52H...
django-buckets (>=0.1.1, <=0.1.5), django-informixdb (>=0.1.2, <=0.1.3) +7 more potentially affected by CVE-2016-6186 via django (>=1.9.0, <=1.9.6)
django PYPI version =1.9.0, =0.1.1, =0.1.2, =0.0.1, =0.1.0, =0.1.1, =0.1.22a1 - goshstore 0.3.0 - kwikapi-django 0.0.1 - planadversity 1.0.2 Source cves: CVE-2016-6186 Source advisory: OSV:GHSA-C8C8-9472-W52H...
django-buckets (>=0.1.1, <=0.1.5), django-informixdb (>=0.1.2, <=0.1.3) +7 more potentially affected by CVE-2016-6186 via django (>=1.9.0, <=1.9.6)
django PYPI version =1.9.0, =0.1.1, =0.1.2, =0.0.1, =0.1.0, =0.1.1, =0.1.22a1 - goshstore 0.3.0 - kwikapi-django 0.0.1 - planadversity 1.0.2 Source cves: CVE-2016-6186 Source advisory: GHSA-C8C8-9472-W52H...
Security fix for the ALT Linux 10 package python3-module-django version 1.8.15-alt1
Oct. 24, 2016 Alexey Shabalin 1.8.15-alt1 - 1.8.15 - fixed CVE-2016-2512,CVE-2016-2513,CVE-2016-6186,CVE-2016-7401...
Security fix for the ALT Linux 9 package python3-module-django version 1.8.15-alt1
Oct. 24, 2016 Alexey Shabalin 1.8.15-alt1 - 1.8.15 - fixed CVE-2016-2512,CVE-2016-2513,CVE-2016-6186,CVE-2016-7401...
Updated python-django packages fix security vulnerability
It was discovered that Django is prone to a cross-site scripting vulnerability in the admin's add/change related popup CVE-2016-6186...
CVE-2016-6186
Cross-site scripting XSS vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors...
django-amazon-price-monitor (>=0.3.0b2, <=0.4.0), django-autoconfig (>=0.3.4, <=0.3.6) potentially affected by CVE-2016-6186 via django (1.9.0rc2)
django PYPI version 1.9.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-amazon-price-monitor =0.3.0b2, =0.3.4, =0.3.6 Source cves: CVE-2016-6186 Source advisory: OSV:PYSEC-2016-2...
admin-extra-urls (0.7.0), backstage-oauth2 (>=0.1.7, <=0.1.8) +73 more potentially affected by CVE-2016-6186 via django (>=1.5.12, <=1.8.13)
django PYPI version =1.5.12, =0.1.7, =3.1.0, =0.0.1, =0.1.17, =1.0.0, =0.3.2, =0.1.0, =0.3.0 - django-bower-cache 0.5.0 - django-canary-endpoint 0.1.2 and more Source cves: CVE-2016-6186 Source advisory: OSV:PYSEC-2016-2...
django-buckets (>=0.1.1, <=0.1.5), django-informixdb (>=0.1.2, <=0.1.3) +7 more potentially affected by CVE-2016-6186 via django (>=1.9.0, <=1.9.6)
django PYPI version =1.9.0, =0.1.1, =0.1.2, =0.0.1, =0.1.0, =0.1.1, =0.1.22a1 - goshstore 0.3.0 - kwikapi-django 0.0.1 - planadversity 1.0.2 Source cves: CVE-2016-6186 Source advisory: OSV:PYSEC-2016-2...
django-buckets (>=0.1.1, <=0.1.5), django-informixdb (>=0.1.2, <=0.1.3) +7 more potentially affected by CVE-2016-6186 via django (>=1.9.0, <=1.9.6)
django PYPI version =1.9.0, =0.1.1, =0.1.2, =0.0.1, =0.1.0, =0.1.1, =0.1.22a1 - goshstore 0.3.0 - kwikapi-django 0.0.1 - planadversity 1.0.2 Source cves: CVE-2016-6186 Source advisory: MEND:CVE-2016-6186...
admin-extra-urls (0.7.0), backstage-oauth2 (>=0.1.7, <=0.1.8) +73 more potentially affected by CVE-2016-6186 via django (>=1.5.12, <=1.8.13)
django PYPI version =1.5.12, =0.1.7, =3.1.0, =0.0.1, =0.1.17, =1.0.0, =0.3.2, =0.1.0, =0.3.0 - django-bower-cache 0.5.0 - django-canary-endpoint 0.1.2 and more Source cves: CVE-2016-6186 Source advisory: MEND:CVE-2016-6186...
CVE-2016-6186
Cross-site scripting XSS vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors...
CVE-2016-6186
CVE-2016-6186 is an XSS vulnerability in Django (dismissChangeRelatedObjectPopup in RelatedObjectLookups.js) exploitable via unsafe Element.innerHTML usage. Affected Django versions: before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1. Public advisories in ALT Linux, Fedora, Debian show ...
Fedora 24 : python-django (2016-b7e31a0b9a)
fix CVE-2016-6186 rhbz1357701 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...
Fedora 23 : python-django (2016-97ca9d52a4)
fix CVE-2016-6186 rhbz1357701 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...
