Skip to content
OpenAdvisories

Archive

6 November 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.3
    CVE-2023-45827 Public exploit

    Prototype Pollution vulnerability in @clickbar/dot-diver

    Dot diver is a lightweight, powerful, and dependency-free TypeScript utility library that provides types and functions to work with object paths in dot notation. In versions prior to 1.0.2 there is a Prototype Pollution vulnerability in the `setByPath` functi…

  • High 8.5
    CVE-2023-45657 Public exploit

    WordPress Nexter Theme <= 2.0.3 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSIMYTH Nexter allows SQL Injection.This issue affects Nexter: from n/a through 2.0.3.