LG

Products

ProductCVEsExploitedLatest
Simple Editor25–May 3, 2024
WebOS4–Apr 9, 2024
SuperSign Media Editor2–May 3, 2024

Exploited and recent CVEs

  • CVE-2023-41181 Medium 5.3 LG SuperSign Media Editor getSubFolderList Directory Traversal Information Disclosure Vulnerability 2.1%
  • CVE-2023-40517 High 7.5 LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability 2.5%
  • CVE-2023-40516 High 7.8 LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability 0.3%
  • CVE-2023-40515 High 7.5 LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability 1.4%
  • CVE-2023-40514 Medium 6.5 LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerability 2.9%
  • CVE-2023-40513 Medium 6.5 LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability 2.9%
  • CVE-2023-40512 Medium 6.5 LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability 2.9%
  • CVE-2023-40511 High 7.5 LG Simple Editor checkServer Authentication Bypass Vulnerability 1.4%
  • CVE-2023-40510 High 7.5 LG Simple Editor getServerSetting Authentication Bypass Vulnerability 1.4%
  • CVE-2023-40509 High 8.2 LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability 2.0%
  • CVE-2023-40508 High 8.2 LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability 2.0%
  • CVE-2023-40507 High 7.5 LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability 1.4%
  • CVE-2023-40506 High 7.5 LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability 1.4%
  • CVE-2023-40505 Critical 9.8 LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability 2.4%
  • CVE-2023-40504 Critical 9.8 LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability 88.7%
  • CVE-2023-40503 High 7.5 LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability 1.4%
  • CVE-2023-40502 High 8.2 LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability 82.0%
  • CVE-2023-40501 Critical 9.8 LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability 1.9%
  • CVE-2023-40500 Critical 9.8 LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability 1.9%
  • CVE-2023-40499 High 8.2 LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability 2.0%
  • CVE-2023-40498 Critical 9.8 LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability 85.1%
  • CVE-2023-40497 Critical 9.8 LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability 67.2%
  • CVE-2023-40496 High 7.5 LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability 74.0%
  • CVE-2023-40495 High 7.5 LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability 75.7%
  • CVE-2023-40494 High 8.2 LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability 82.0%
  • CVE-2023-40493 Critical 9.8 LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability 2.9%
  • CVE-2023-40492 High 8.2 LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability 82.0%
  • CVE-2023-6320 Critical 9.1 Command injection in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint 4.0%
  • CVE-2023-6319 Critical 9.1 Command injection in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service 6.4%
  • CVE-2023-6318 Critical 9.1 Command injection in the processAnalyticsReport method from the com.webos.service.cloudupload service 4.7%