Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

66 records

Vendor: LG Clear all filters
TI-2024-05728 CVE-2024-6179 · GHSA-9wjg-c56j-xw9f

XSS vulnerability in LG SuperSign CMS

Priority LOW 22

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00253 Published 2024-06-20 Fixed in < 4.3.1 CWE-79
TI-2024-05727 CVE-2024-6178 · GHSA-85x5-7hjw-hj56

XSS vulnerability in LG SuperSign CMS

Priority LOW 22

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00253 Published 2024-06-20 Fixed in < 4.3.1 CWE-79
TI-2024-05726 CVE-2024-6177 · GHSA-v29v-mr8q-2gqr

XSS vulnerability in LG SuperSign CMS

Priority LOW 22

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00253 Published 2024-06-20 Fixed in < 4.3.1 CWE-79
TI-2023-21790 CVE-2023-41181 · GHSA-hqw7-x8rp-q6j4

Path traversal in LG SuperSign Media Editor

Priority LOW 34

LG SuperSign Media Editor getSubFolderList Directory Traversal Information Disclosure Vulnerability.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02133 Published 2024-05-03 No fix listed CWE-22
TI-2023-21333 CVE-2023-40517 · GHSA-7xhc-r4m8-7gh7

Path traversal in LG SuperSign Media Editor

Priority MEDIUM 46

LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02527 Published 2024-05-03 No fix listed CWE-22
TI-2023-21332 CVE-2023-40516 · GHSA-x5pc-m2mr-3554

Incorrect permission assignment in LG Simple Editor

Priority LOW 36

LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00253 Published 2024-05-03 No fix listed CWE-732
TI-2023-21331 CVE-2023-40515 · GHSA-pmh3-7354-8ph4

Improper input validation in LG Simple Editor

Priority MEDIUM 42

LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.014 Published 2024-05-03 No fix listed CWE-20
TI-2023-21330 CVE-2023-40514 · GHSA-655w-j8x9-h8c8

Path traversal in LG Simple Editor

Priority LOW 34

LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02873 Published 2024-05-03 No fix listed CWE-22
TI-2023-21329 CVE-2023-40513 · GHSA-484m-45g3-cxp6

Path traversal in LG Simple Editor

Priority LOW 34

LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02873 Published 2024-05-03 No fix listed CWE-22
TI-2023-21328 CVE-2023-40512 · GHSA-8rrp-366j-cc4g

Path traversal in LG Simple Editor

Priority LOW 34

LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02873 Published 2024-05-03 No fix listed CWE-22
TI-2023-21327 CVE-2023-40511 · GHSA-q35j-wcr7-44qr

Information disclosure in LG Simple Editor

Priority MEDIUM 44

LG Simple Editor checkServer Authentication Bypass Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01381 Published 2024-05-03 No fix listed CWE-200
TI-2023-21326 CVE-2023-40510 · GHSA-4q63-jfmh-r5cw

Information disclosure in LG Simple Editor

Priority MEDIUM 42

LG Simple Editor getServerSetting Authentication Bypass Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01381 Published 2024-05-03 No fix listed CWE-200
TI-2023-21325 CVE-2023-40509 · GHSA-g73h-mh6m-fwrg

Path traversal in LG Simple Editor

Priority MEDIUM 49

LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02049 Published 2024-05-03 No fix listed CWE-22
TI-2023-21324 CVE-2023-40508 · GHSA-6pww-8qmg-pgwp

Path traversal in LG Simple Editor

Priority MEDIUM 49

LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02049 Published 2024-05-03 No fix listed CWE-22
TI-2023-21323 CVE-2023-40507 · GHSA-9v77-4qpm-w3gc

XML external entity injection in LG Simple Editor

Priority MEDIUM 42

LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01386 Published 2024-05-03 No fix listed CWE-611
TI-2023-21322 CVE-2023-40506 · GHSA-5j2h-5mq2-6hqm

XML external entity injection in LG Simple Editor

Priority MEDIUM 42

LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01386 Published 2024-05-03 No fix listed CWE-611
TI-2023-21321 CVE-2023-40505 · GHSA-38hf-j8cf-rw67

OS command injection in LG Simple Editor

Priority MEDIUM 53

LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02402 Published 2024-05-03 No fix listed CWE-78
TI-2023-21320 CVE-2023-40504 · GHSA-qw6m-c2fr-wrgr

OS command injection in LG Simple Editor

Priority CRITICAL 91

LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.88728 Published 2024-05-03 No fix listed CWE-78
TI-2023-21319 CVE-2023-40503 · GHSA-fmx6-75w7-fmgw

XML external entity injection in LG Simple Editor

Priority MEDIUM 42

LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01386 Published 2024-05-03 No fix listed CWE-611
TI-2023-21318 CVE-2023-40502 · GHSA-j6wg-hmpm-wvcf

Path traversal in LG Simple Editor

Priority CRITICAL 86

LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.81952 Published 2024-05-03 No fix listed CWE-22
TI-2023-21315 CVE-2023-40499 · GHSA-2qcp-f55j-r9qj

Path traversal in LG Simple Editor

Priority MEDIUM 49

LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02049 Published 2024-05-03 No fix listed CWE-22
TI-2023-21314 CVE-2023-40498 · GHSA-2qqh-h8cp-4jfx

Path traversal in LG Simple Editor

Priority CRITICAL 90

LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.8509 Published 2024-05-03 No fix listed CWE-22
TI-2023-21313 CVE-2023-40497 · GHSA-wfcp-54g6-3v3c

Path traversal in LG Simple Editor

Priority HIGH 79

LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.6725 Published 2024-05-03 No fix listed CWE-22
Load more