VYPR
← All vendors
Vendor

LG

Products
94
CVEs
139
Across products
135
Status
Private

Products

94
View all 94 products →

Recent CVEs

139
View all 139 CVEs →
  • CVE-2018-14839CriKEVMay 14, 2019
    LG
    N1A1 NAS
    risk 0.83cvss 9.8epss 0.89

    LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.

  • CVE-2023-40504CriMay 3, 2024
    LG
    Simple Editor
    risk 0.74cvss 9.8epss 0.88

    LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific…

  • CVE-2023-40498CriMay 3, 2024
    LG
    Simple Editor
    risk 0.73cvss 9.8epss 0.83

    LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific…

  • CVE-2018-17173CriSep 21, 2018
    LG
    Supersign CMS
    risk 0.71cvss 9.8epss 0.56

    LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.

  • CVE-2023-40497CriMay 3, 2024
    LG
    Simple Editor
    risk 0.69cvss 9.8epss 0.67

    LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw…

  • CVE-2023-40502CriMay 3, 2024
    LG
    Simple Editor
    risk 0.66cvss 9.1epss 0.84

    LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific…

  • CVE-2023-40494CriMay 3, 2024
    LG
    Simple Editor
    risk 0.66cvss 9.1epss 0.84

    LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40492CriMay 3, 2024
    LG
    Simple Editor
    risk 0.66cvss 9.1epss 0.84

    LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2018-16287CriSep 14, 2018
    LG
    Supersign CMS
    risk 0.65cvss 9.8epss 0.20

    LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.

  • CVE-2018-16286CriSep 14, 2018
    LG
    Supersign CMS
    risk 0.65cvss 9.8epss 0.22

    LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits.

  • CVE-2023-40505CriMay 3, 2024
    LG
    Simple Editor
    risk 0.64cvss 9.8epss 0.02

    LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40501CriMay 3, 2024
    LG
    Simple Editor
    risk 0.64cvss 9.8epss 0.01

    LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40500CriMay 3, 2024
    LG
    Simple Editor
    risk 0.64cvss 9.8epss 0.01

    LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40493CriMay 3, 2024
    LG
    Simple Editor
    risk 0.64cvss 9.8epss 0.02

    LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-4614CriSep 4, 2023
    LG
    Lg Led Assistant
    risk 0.64cvss 9.8epss 0.02

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/installation/setThumbnailRc endpoint. The issue results from…

  • CVE-2023-4613CriSep 4, 2023
    LG
    Lg Led Assistant
    risk 0.64cvss 9.8epss 0.02

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/settings/upload endpoint. The issue results from the lack of…

  • CVE-2022-23730CriMar 11, 2022
    LG
    webOS
    risk 0.64cvss 9.8epss 0.01

    The public API error causes for the attacker to be able to bypass API access control.

  • CVE-2021-38306CriAug 24, 2021
    LG
    N1T1
    risk 0.64cvss 9.8epss 0.09

    Network Attached Storage on LG N1T1*** 10124 devices allows an unauthenticated attacker to gain root access via OS command injection in the en/ajp/plugins/access.ssh/checkInstall.php destServer parameter.

  • CVE-2021-26689CriFeb 4, 2021
    LG
    mobile devices
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. The USB laf gadget has a use-after-free. The LG ID is LVE-SMP-200031 (February 2021).

  • CVE-2021-26688CriFeb 4, 2021
    LG
    Wing
    risk 0.64cvss 9.8epss 0.00

    An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 (February 2021).

View all 139 CVEs →