RHEL 7 : python-django (RHSA-2016:1596)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:1596 advisory. Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as...

RHEL 7 : python-django (RHSA-2016:1595)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:1595 advisory. Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as...

admin-extra-urls (0.7.0), backstage-oauth2 (>=0.1.7, <=0.1.8) +73 more potentially affected by CVE-2016-6186 via django (>=1.5.12, <=1.8.13)

django PYPI version =1.5.12, =0.1.7, =3.1.0, =0.0.1, =0.1.17, =1.0.0, =0.3.2, =0.1.0, =0.3.0 - django-bower-cache 0.5.0 - django-canary-endpoint 0.1.2 and more Source cves: CVE-2016-6186 Source advisory: OSV:GHSA-C8C8-9472-W52H...

admin-extra-urls (0.7.0), backstage-oauth2 (>=0.1.7, <=0.1.8) +73 more potentially affected by CVE-2016-6186 via django (>=1.5.12, <=1.8.13)

django PYPI version =1.5.12, =0.1.7, =3.1.0, =0.0.1, =0.1.17, =1.0.0, =0.3.2, =0.1.0, =0.3.0 - django-bower-cache 0.5.0 - django-canary-endpoint 0.1.2 and more Source cves: CVE-2016-6186 Source advisory: GHSA-C8C8-9472-W52H...

django-buckets (>=0.1.1, <=0.1.5), django-informixdb (>=0.1.2, <=0.1.3) +7 more potentially affected by CVE-2016-6186 via django (>=1.9.0, <=1.9.6)

django PYPI version =1.9.0, =0.1.1, =0.1.2, =0.0.1, =0.1.0, =0.1.1, =0.1.22a1 - goshstore 0.3.0 - kwikapi-django 0.0.1 - planadversity 1.0.2 Source cves: CVE-2016-6186 Source advisory: OSV:GHSA-C8C8-9472-W52H...

django-buckets (>=0.1.1, <=0.1.5), django-informixdb (>=0.1.2, <=0.1.3) +7 more potentially affected by CVE-2016-6186 via django (>=1.9.0, <=1.9.6)

django PYPI version =1.9.0, =0.1.1, =0.1.2, =0.0.1, =0.1.0, =0.1.1, =0.1.22a1 - goshstore 0.3.0 - kwikapi-django 0.0.1 - planadversity 1.0.2 Source cves: CVE-2016-6186 Source advisory: GHSA-C8C8-9472-W52H...

Security fix for the ALT Linux 10 package python3-module-django version 1.8.15-alt1

Oct. 24, 2016 Alexey Shabalin 1.8.15-alt1 - 1.8.15 - fixed CVE-2016-2512,CVE-2016-2513,CVE-2016-6186,CVE-2016-7401...

Security fix for the ALT Linux 9 package python3-module-django version 1.8.15-alt1

Oct. 24, 2016 Alexey Shabalin 1.8.15-alt1 - 1.8.15 - fixed CVE-2016-2512,CVE-2016-2513,CVE-2016-6186,CVE-2016-7401...

Updated python-django packages fix security vulnerability

It was discovered that Django is prone to a cross-site scripting vulnerability in the admin's add/change related popup CVE-2016-6186...

CVE-2016-6186

Cross-site scripting XSS vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors...

django-amazon-price-monitor (>=0.3.0b2, <=0.4.0), django-autoconfig (>=0.3.4, <=0.3.6) potentially affected by CVE-2016-6186 via django (1.9.0rc2)

django PYPI version 1.9.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-amazon-price-monitor =0.3.0b2, =0.3.4, =0.3.6 Source cves: CVE-2016-6186 Source advisory: OSV:PYSEC-2016-2...

admin-extra-urls (0.7.0), backstage-oauth2 (>=0.1.7, <=0.1.8) +73 more potentially affected by CVE-2016-6186 via django (>=1.5.12, <=1.8.13)

django PYPI version =1.5.12, =0.1.7, =3.1.0, =0.0.1, =0.1.17, =1.0.0, =0.3.2, =0.1.0, =0.3.0 - django-bower-cache 0.5.0 - django-canary-endpoint 0.1.2 and more Source cves: CVE-2016-6186 Source advisory: OSV:PYSEC-2016-2...

django-buckets (>=0.1.1, <=0.1.5), django-informixdb (>=0.1.2, <=0.1.3) +7 more potentially affected by CVE-2016-6186 via django (>=1.9.0, <=1.9.6)

django PYPI version =1.9.0, =0.1.1, =0.1.2, =0.0.1, =0.1.0, =0.1.1, =0.1.22a1 - goshstore 0.3.0 - kwikapi-django 0.0.1 - planadversity 1.0.2 Source cves: CVE-2016-6186 Source advisory: OSV:PYSEC-2016-2...

django-buckets (>=0.1.1, <=0.1.5), django-informixdb (>=0.1.2, <=0.1.3) +7 more potentially affected by CVE-2016-6186 via django (>=1.9.0, <=1.9.6)

django PYPI version =1.9.0, =0.1.1, =0.1.2, =0.0.1, =0.1.0, =0.1.1, =0.1.22a1 - goshstore 0.3.0 - kwikapi-django 0.0.1 - planadversity 1.0.2 Source cves: CVE-2016-6186 Source advisory: MEND:CVE-2016-6186...

admin-extra-urls (0.7.0), backstage-oauth2 (>=0.1.7, <=0.1.8) +73 more potentially affected by CVE-2016-6186 via django (>=1.5.12, <=1.8.13)

django PYPI version =1.5.12, =0.1.7, =3.1.0, =0.0.1, =0.1.17, =1.0.0, =0.3.2, =0.1.0, =0.3.0 - django-bower-cache 0.5.0 - django-canary-endpoint 0.1.2 and more Source cves: CVE-2016-6186 Source advisory: MEND:CVE-2016-6186...

CVE-2016-6186

Cross-site scripting XSS vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors...

Fedora 23 : python-django (2016-97ca9d52a4)

fix CVE-2016-6186 rhbz1357701 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

Fedora 24 : python-django (2016-b7e31a0b9a)

fix CVE-2016-6186 rhbz1357701 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

CVE-2016-6186

creationtimestamp| type| source ---|---|--- 2016-07-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40129...

Django CMS 3.3.0 - Editor Snippet Persistent Cross-Site Scripting

Django CMS 3.3.0 - Editor Snippet Persistent Cross-Site Scripting Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1869 Security Release:...