Read the docs

LG

Records66All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical28CVSS 9.0–10.0
CVSS high26CVSS 7.0–8.9

Exploited now

LG records in CISA KEV
TI-2018-10666 LG N1A1 NAS Remote Command Execution Vulnerability Priority CRITICAL 100KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records
Simple Editor 25 records CRITICAL Supersign Cms 8 records HIGH Webos 8 records MEDIUM Lg Led Assistant 6 records HIGH Supersign Media Editor 2 records MEDIUM Webos Signage 2 records MEDIUM Bridge 1 record LOW Gamp-7100 Firmware 1 record LOW

Records

25 records in Simple Editor · all components

TI-2023-21320 CVE-2023-40504 · GHSA-qw6m-c2fr-wrgr

OS command injection in LG Simple Editor

Priority CRITICAL 91

LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.88728 Published 2024-05-03 No fix listed CWE-78
TI-2023-21314 CVE-2023-40498 · GHSA-2qqh-h8cp-4jfx

Path traversal in LG Simple Editor

Priority CRITICAL 90

LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.8509 Published 2024-05-03 No fix listed CWE-22
TI-2023-21318 CVE-2023-40502 · GHSA-j6wg-hmpm-wvcf

Path traversal in LG Simple Editor

Priority CRITICAL 86

LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.81952 Published 2024-05-03 No fix listed CWE-22
TI-2023-21310 CVE-2023-40494 · GHSA-pc82-cm8v-cj54

Path traversal in LG Simple Editor

Priority CRITICAL 86

LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.81952 Published 2024-05-03 No fix listed CWE-22
TI-2023-21308 CVE-2023-40492 · GHSA-2m46-rjm4-w49x

Path traversal in LG Simple Editor

Priority CRITICAL 86

LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.81952 Published 2024-05-03 No fix listed CWE-22
TI-2023-21313 CVE-2023-40497 · GHSA-wfcp-54g6-3v3c

Path traversal in LG Simple Editor

Priority HIGH 79

LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.6725 Published 2024-05-03 No fix listed CWE-22
TI-2023-21311 CVE-2023-40495 · GHSA-3f29-xc6q-j293

Path traversal in LG Simple Editor

Priority HIGH 78

LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.75653 Published 2024-05-03 No fix listed CWE-22
TI-2023-21312 CVE-2023-40496 · GHSA-8mf4-9xj6-7hp7

Path traversal in LG Simple Editor

Priority HIGH 71

LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.74024 Published 2024-05-03 No fix listed CWE-22
TI-2023-21309 CVE-2023-40493 · GHSA-gvj7-jfxq-jx56

Path traversal in LG Simple Editor

Priority MEDIUM 54

LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02853 Published 2024-05-03 No fix listed CWE-22
TI-2023-21321 CVE-2023-40505 · GHSA-38hf-j8cf-rw67

OS command injection in LG Simple Editor

Priority MEDIUM 53

LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02402 Published 2024-05-03 No fix listed CWE-78
TI-2023-21325 CVE-2023-40509 · GHSA-g73h-mh6m-fwrg

Path traversal in LG Simple Editor

Priority MEDIUM 49

LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02049 Published 2024-05-03 No fix listed CWE-22
TI-2023-21324 CVE-2023-40508 · GHSA-6pww-8qmg-pgwp

Path traversal in LG Simple Editor

Priority MEDIUM 49

LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02049 Published 2024-05-03 No fix listed CWE-22
TI-2023-21315 CVE-2023-40499 · GHSA-2qcp-f55j-r9qj

Path traversal in LG Simple Editor

Priority MEDIUM 49

LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02049 Published 2024-05-03 No fix listed CWE-22
TI-2023-21327 CVE-2023-40511 · GHSA-q35j-wcr7-44qr

Information disclosure in LG Simple Editor

Priority MEDIUM 44

LG Simple Editor checkServer Authentication Bypass Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01381 Published 2024-05-03 No fix listed CWE-200
TI-2023-21331 CVE-2023-40515 · GHSA-pmh3-7354-8ph4

Improper input validation in LG Simple Editor

Priority MEDIUM 42

LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.014 Published 2024-05-03 No fix listed CWE-20
TI-2023-21326 CVE-2023-40510 · GHSA-4q63-jfmh-r5cw

Information disclosure in LG Simple Editor

Priority MEDIUM 42

LG Simple Editor getServerSetting Authentication Bypass Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01381 Published 2024-05-03 No fix listed CWE-200
TI-2023-21323 CVE-2023-40507 · GHSA-9v77-4qpm-w3gc

XML external entity injection in LG Simple Editor

Priority MEDIUM 42

LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01386 Published 2024-05-03 No fix listed CWE-611
TI-2023-21322 CVE-2023-40506 · GHSA-5j2h-5mq2-6hqm

XML external entity injection in LG Simple Editor

Priority MEDIUM 42

LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01386 Published 2024-05-03 No fix listed CWE-611
TI-2023-21319 CVE-2023-40503 · GHSA-fmx6-75w7-fmgw

XML external entity injection in LG Simple Editor

Priority MEDIUM 42

LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01386 Published 2024-05-03 No fix listed CWE-611
TI-2023-21332 CVE-2023-40516 · GHSA-x5pc-m2mr-3554

Incorrect permission assignment in LG Simple Editor

Priority LOW 36

LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00253 Published 2024-05-03 No fix listed CWE-732
TI-2023-21330 CVE-2023-40514 · GHSA-655w-j8x9-h8c8

Path traversal in LG Simple Editor

Priority LOW 34

LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02873 Published 2024-05-03 No fix listed CWE-22
TI-2023-21329 CVE-2023-40513 · GHSA-484m-45g3-cxp6

Path traversal in LG Simple Editor

Priority LOW 34

LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02873 Published 2024-05-03 No fix listed CWE-22
TI-2023-21328 CVE-2023-40512 · GHSA-8rrp-366j-cc4g

Path traversal in LG Simple Editor

Priority LOW 34

LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02873 Published 2024-05-03 No fix listed CWE-22
Open these records in search →