CVE Browser

Page 1

An issue in the verifyPassword function of hexo-theme-matery v2.0.0 allows attackers to bypass authentication and access password protected pages.

Hexo up to v7.0.0 (RC2) was discovered to contain an arbitrary file read vulnerability.

Hexo - Stored XSS

CVE ID	Description	Severity	CVSS	EPSS	Ecosystems	Published
CVE-2023-47435	An issue in the verifyPassword function of hexo-theme-matery v2.0.0 allows attackers to bypass authentication and access password protected pages.	CRITICAL	9.8	0.63%		Apr 19, 2024
CVE-2023-39584	Hexo up to v7.0.0 (RC2) was discovered to contain an arbitrary file read vulnerability.	HIGH	7.5	34.54%	npm	Sep 8, 2023
CVE-2021-25987	Hexo - Stored XSS	MEDIUM	5.0	0.34%	npm	Nov 30, 2021

Rows per page

Showing 1 to 3 CVEs · page 1