Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

25 records

Priority LOW 36

LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00253 Published 2024-05-03 No fix listed CWE-732
Priority MEDIUM 42

LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.014 Published 2024-05-03 No fix listed CWE-20
TI-2023-21330 CVE-2023-40514 · GHSA-655w-j8x9-h8c8

Path traversal in LG Simple Editor

Priority LOW 34

LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02873 Published 2024-05-03 No fix listed CWE-22
TI-2023-21329 CVE-2023-40513 · GHSA-484m-45g3-cxp6

Path traversal in LG Simple Editor

Priority LOW 34

LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02873 Published 2024-05-03 No fix listed CWE-22
TI-2023-21328 CVE-2023-40512 · GHSA-8rrp-366j-cc4g

Path traversal in LG Simple Editor

Priority LOW 34

LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02873 Published 2024-05-03 No fix listed CWE-22
TI-2023-21327 CVE-2023-40511 · GHSA-q35j-wcr7-44qr

Information disclosure in LG Simple Editor

Priority MEDIUM 44

LG Simple Editor checkServer Authentication Bypass Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01381 Published 2024-05-03 No fix listed CWE-200
TI-2023-21326 CVE-2023-40510 · GHSA-4q63-jfmh-r5cw

Information disclosure in LG Simple Editor

Priority MEDIUM 42

LG Simple Editor getServerSetting Authentication Bypass Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01381 Published 2024-05-03 No fix listed CWE-200
TI-2023-21325 CVE-2023-40509 · GHSA-g73h-mh6m-fwrg

Path traversal in LG Simple Editor

Priority MEDIUM 49

LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02049 Published 2024-05-03 No fix listed CWE-22
TI-2023-21324 CVE-2023-40508 · GHSA-6pww-8qmg-pgwp

Path traversal in LG Simple Editor

Priority MEDIUM 49

LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02049 Published 2024-05-03 No fix listed CWE-22
Priority MEDIUM 42

LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01386 Published 2024-05-03 No fix listed CWE-611
Priority MEDIUM 42

LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01386 Published 2024-05-03 No fix listed CWE-611
TI-2023-21321 CVE-2023-40505 · GHSA-38hf-j8cf-rw67

OS command injection in LG Simple Editor

Priority MEDIUM 53

LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02402 Published 2024-05-03 No fix listed CWE-78
TI-2023-21320 CVE-2023-40504 · GHSA-qw6m-c2fr-wrgr

OS command injection in LG Simple Editor

Priority CRITICAL 91

LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.88728 Published 2024-05-03 No fix listed CWE-78
Priority MEDIUM 42

LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01386 Published 2024-05-03 No fix listed CWE-611
TI-2023-21318 CVE-2023-40502 · GHSA-j6wg-hmpm-wvcf

Path traversal in LG Simple Editor

Priority CRITICAL 86

LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.81952 Published 2024-05-03 No fix listed CWE-22
TI-2023-21315 CVE-2023-40499 · GHSA-2qcp-f55j-r9qj

Path traversal in LG Simple Editor

Priority MEDIUM 49

LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02049 Published 2024-05-03 No fix listed CWE-22
TI-2023-21314 CVE-2023-40498 · GHSA-2qqh-h8cp-4jfx

Path traversal in LG Simple Editor

Priority CRITICAL 90

LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.8509 Published 2024-05-03 No fix listed CWE-22
TI-2023-21313 CVE-2023-40497 · GHSA-wfcp-54g6-3v3c

Path traversal in LG Simple Editor

Priority HIGH 79

LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.6725 Published 2024-05-03 No fix listed CWE-22
TI-2023-21312 CVE-2023-40496 · GHSA-8mf4-9xj6-7hp7

Path traversal in LG Simple Editor

Priority HIGH 71

LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.74024 Published 2024-05-03 No fix listed CWE-22
TI-2023-21311 CVE-2023-40495 · GHSA-3f29-xc6q-j293

Path traversal in LG Simple Editor

Priority HIGH 78

LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.75653 Published 2024-05-03 No fix listed CWE-22
TI-2023-21310 CVE-2023-40494 · GHSA-pc82-cm8v-cj54

Path traversal in LG Simple Editor

Priority CRITICAL 86

LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.81952 Published 2024-05-03 No fix listed CWE-22
TI-2023-21309 CVE-2023-40493 · GHSA-gvj7-jfxq-jx56

Path traversal in LG Simple Editor

Priority MEDIUM 54

LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02853 Published 2024-05-03 No fix listed CWE-22
TI-2023-21308 CVE-2023-40492 · GHSA-2m46-rjm4-w49x

Path traversal in LG Simple Editor

Priority CRITICAL 86

LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.81952 Published 2024-05-03 No fix listed CWE-22