Skip to content
OpenAdvisories

Archive

6 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /6 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.3
    CVE-2023-45827 Public exploit

    Prototype Pollution vulnerability in @clickbar/dot-diver

    Dot diver is a lightweight, powerful, and dependency-free TypeScript utility library that provides types and functions to work with object paths in dot notation. In versions prior to 1.0.2 there is a Prototype Pollution vulnerability in the `setByPath` functi…

    clickbar dot-diver @clickbar/dot-diver npm
  • Medium 4.9
    CVE-2023-5968 Public exploit

    Password hash in response body after username update

    Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body. 

    Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go
  • High 8.5
    CVE-2023-45657 Public exploit

    WordPress Nexter Theme <= 2.0.3 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSIMYTH Nexter allows SQL Injection.This issue affects Nexter: from n/a through 2.0.3.

    POSIMYTH Nexter
  • Critical 10.0
    CVE-2023-4699 Public exploit

    Arbitrary Command Execution Vulnerability in Mitsubishi Electric proprietary protocol communication of multiple FA products

    Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU modules, MELSEC iQ-F Series, MELSEC iQ-R series CPU modules, MELSEC iQ-R series, MELSEC iQ-L series, MELSEC Q series, MELSEC-L series, Mitsubishi…

    Mitsubishi Electric MELSEC-F Series FX3U-128MR/ES MELSEC-F Series FX3U-80MT/DS MELSEC-F Series FX3U-32MT/ES-A ICS / OT
  • Critical 9.8
    CVE-2023-47253 Public exploit Scanner template EPSS 16%

    Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/reque…