Lucene search
+L

127 matches found

Patchstack
Patchstack
added 2026/03/23 12:42 p.m.7 views

WordPress Stål theme < 1.7 - Arbitrary Object Instantiation vulnerability

Arbitrary Object Instantiation vulnerability discovered by Denver Jackson in WordPress Theme Stål versions 1.7...

5.4CVSS5.8AI score0.00167EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/03/23 12:42 p.m.6 views

WordPress Kamperen theme < 1.3 - Arbitrary Object Instantiation vulnerability

Arbitrary Object Instantiation vulnerability discovered by Denver Jackson in WordPress Theme Kamperen versions 1.3...

5.4CVSS5.8AI score0.00167EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/03/20 8:53 p.m.7 views

WordPress Pelicula theme < 1.10 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Pelicula versions 1.10...

9.8CVSS5.8AI score0.00375EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/02/18 8:56 a.m.9 views

WordPress Mail Mint plugin <= 1.19.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Denver Jackson in WordPress Plugin Mail Mint versions = 1.19.4...

5.4AI score0.00293EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/02/11 9:55 a.m.11 views

WordPress New User Approve plugin <= 3.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Denver Jackson in WordPress Plugin New User Approve versions = 3.2.0...

8.6CVSS5.4AI score0.00261EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/02/09 7:49 a.m.11 views

WordPress YayCurrency plugin <= 3.3 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Denver Jackson in WordPress Plugin YayCurrency versions = 3.3...

7.5CVSS5.5AI score0.00323EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/16 11:31 p.m.6 views

CVE-2021-47796

Denver SHC-150 Smart Wifi Camera contains a hardcoded telnet credential vulnerability that allows unauthenticated attackers to access a Linux shell. Attackers can connect to port 23 using the default credential to execute arbitrary commands on the camera's operating system...

9.8CVSS7.8AI score0.00505EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/16 12:0 a.m.8 views

Denver SHC-150 Trust Management Vulnerability

The Denver SHC-150 is an indoor surveillance camera produced by the Danish company Denver. The Denver SHC-150 has a trust management vulnerability, which stems from hard-coded telnet credentials. This vulnerability could allow unauthenticated attackers to access the Linux shell...

9.8CVSS5.8AI score0.00505EPSS
Exploits0References3
CVE
CVE
added 2026/01/15 11:25 p.m.13 views

CVE-2021-47796

CVE-2021-47796 affects the Denver SHC-150 Smart Wifi Camera. It exposes a hardcoded telnet credential allowing unauthenticated access to a Linux shell over port 23, enabling arbitrary command execution on the device. The CVSS metrics in the provided records indicate CRITICAL impact (high confiden...

9.8CVSS7.4AI score0.00505EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/15 11:25 p.m.27 views

CVE-2021-47796 Denver Smart Wifi Camera SHC-150 - 'Telnet' Remote Code Execution (RCE)

Denver SHC-150 Smart Wifi Camera contains a hardcoded telnet credential vulnerability that allows unauthenticated attackers to access a Linux shell. Attackers can connect to port 23 using the default credential to execute arbitrary commands on the camera's operating system...

9.8CVSS0.00505EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/15 11:25 p.m.3 views

CVE-2021-47796 Denver Smart Wifi Camera SHC-150 - 'Telnet' Remote Code Execution (RCE)

Denver SHC-150 Smart Wifi Camera contains a hardcoded telnet credential vulnerability that allows unauthenticated attackers to access a Linux shell. Attackers can connect to port 23 using the default credential to execute arbitrary commands on the camera's operating system...

9.8CVSS7.4AI score0.00505EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/01/15 10:49 a.m.12 views

WordPress g-FFL Checkout plugin <= 2.1.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Denver Jackson in WordPress Plugin g-FFL Checkout versions = 2.1.0...

9.8CVSS7AI score0.00564EPSS
Exploits2Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.11 views

PT-2026-3168

Denver SHC-150 Smart Wifi Camera contains a hardcoded telnet credential vulnerability that allows unauthenticated attackers to access a Linux shell. Attackers can connect to port 23 using the default credential to execute arbitrary commands on the camera's operating system...

9.8CVSS7.8AI score0.00505EPSS
Exploits0References4
Patchstack
Patchstack
added 2026/01/13 8:21 a.m.8 views

WordPress Blogzee theme <= 1.0.5 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Denver Jackson in WordPress Theme Blogzee versions = 1.0.5...

9.9CVSS7AI score0.00465EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/01/13 8:21 a.m.8 views

WordPress Blogistic theme <= 1.0.5 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Denver Jackson in WordPress Theme Blogistic versions = 1.0.5...

9.9CVSS7AI score0.00465EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/01/02 8:15 a.m.9 views

WordPress VidMov theme <= 2.3.8 - Path Traversal vulnerability

Path Traversal vulnerability discovered by Denver Jackson in WordPress Theme VidMov versions = 2.3.8...

7.5CVSS7AI score0.00289EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/12/31 11:53 a.m.10 views

WordPress Follow My Blog Post plugin <= 2.4.0 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Denver Jackson in WordPress Plugin Follow My Blog Post versions = 2.4.0...

7.5CVSS7AI score0.00242EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/11/14 11:15 p.m.7 views

CVE-2021-4469

Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a '/snapshot' endpoint without authentication. While the primary web interface on port 80 enforces authentication, the backdoor service allows any remote attacker to retrieve image snapshots by...

8.7CVSS0.00636EPSS
Exploits0References3
CVE
CVE
added 2025/11/14 10:53 p.m.21 views

CVE-2021-4469

CVE-2021-4469 : Denver SHO-110 IP cameras expose a secondary HTTP service on port 8001 with an unauthenticated /snapshot endpoint. While port 80 requires authentication, the backdoor service allows remote attackers to fetch snapshots directly, enabling repeated collection and potential reconstruc...

8.7CVSS6.6AI score0.00636EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/11/14 10:53 p.m.12 views

CVE-2021-4469 Denver SHO-110 IP Camera Unauthenticated Snapshot Access

Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a '/snapshot' endpoint without authentication. While the primary web interface on port 80 enforces authentication, the backdoor service allows any remote attacker to retrieve image snapshots by...

8.7CVSS0.00636EPSS
Exploits0References3
Rows per page
Query Builder