VYPR
← LG

Vendor CVEs

LG

All CVEs

139 total · sorted by risk
  • CVE-2018-14839CriKEVMay 14, 2019
    LG
    N1A1 NAS
    risk 0.83cvss 9.8epss 0.89

    LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.

  • CVE-2023-40504CriMay 3, 2024
    LG
    Simple Editor
    risk 0.74cvss 9.8epss 0.88

    LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific…

  • CVE-2023-40498CriMay 3, 2024
    LG
    Simple Editor
    risk 0.73cvss 9.8epss 0.83

    LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific…

  • CVE-2018-17173CriSep 21, 2018
    LG
    Supersign CMS
    risk 0.71cvss 9.8epss 0.56

    LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.

  • CVE-2023-40497CriMay 3, 2024
    LG
    Simple Editor
    risk 0.69cvss 9.8epss 0.67

    LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw…

  • CVE-2023-40502CriMay 3, 2024
    LG
    Simple Editor
    risk 0.66cvss 9.1epss 0.84

    LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific…

  • CVE-2023-40494CriMay 3, 2024
    LG
    Simple Editor
    risk 0.66cvss 9.1epss 0.84

    LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40492CriMay 3, 2024
    LG
    Simple Editor
    risk 0.66cvss 9.1epss 0.84

    LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2018-16287CriSep 14, 2018
    LG
    Supersign CMS
    risk 0.65cvss 9.8epss 0.20

    LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.

  • CVE-2018-16286CriSep 14, 2018
    LG
    Supersign CMS
    risk 0.65cvss 9.8epss 0.22

    LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits.

  • CVE-2023-40505CriMay 3, 2024
    LG
    Simple Editor
    risk 0.64cvss 9.8epss 0.02

    LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40501CriMay 3, 2024
    LG
    Simple Editor
    risk 0.64cvss 9.8epss 0.01

    LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40500CriMay 3, 2024
    LG
    Simple Editor
    risk 0.64cvss 9.8epss 0.01

    LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40493CriMay 3, 2024
    LG
    Simple Editor
    risk 0.64cvss 9.8epss 0.02

    LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-4614CriSep 4, 2023
    LG
    Lg Led Assistant
    risk 0.64cvss 9.8epss 0.02

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/installation/setThumbnailRc endpoint. The issue results from…

  • CVE-2023-4613CriSep 4, 2023
    LG
    Lg Led Assistant
    risk 0.64cvss 9.8epss 0.02

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/settings/upload endpoint. The issue results from the lack of…

  • CVE-2022-23730CriMar 11, 2022
    LG
    webOS
    risk 0.64cvss 9.8epss 0.01

    The public API error causes for the attacker to be able to bypass API access control.

  • CVE-2021-38306CriAug 24, 2021
    LG
    N1T1
    risk 0.64cvss 9.8epss 0.09

    Network Attached Storage on LG N1T1*** 10124 devices allows an unauthenticated attacker to gain root access via OS command injection in the en/ajp/plugins/access.ssh/checkInstall.php destServer parameter.

  • CVE-2021-26689CriFeb 4, 2021
    LG
    mobile devices
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. The USB laf gadget has a use-after-free. The LG ID is LVE-SMP-200031 (February 2021).

  • CVE-2021-26688CriFeb 4, 2021
    LG
    Wing
    risk 0.64cvss 9.8epss 0.00

    An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 (February 2021).

  • CVE-2021-26687CriFeb 4, 2021
    LG
    mobile devices
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. In preloaded applications, the HostnameVerified default is mishandled. The LG ID is LVE-SMP-200029 (February 2021).

  • CVE-2020-25283CriSep 11, 2020
    LG
    mobile devices
    risk 0.64cvss 9.8epss 0.00

    An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. BT manager allows attackers to bypass intended access restrictions on a certain mode. The LG ID is LVE-SMP-200021 (September 2020).

  • CVE-2020-25282CriSep 11, 2020
    LG
    lguicc
    risk 0.64cvss 9.8epss 0.00

    An issue was discovered on LG mobile devices with Android OS 10 software. The lguicc software (for the LG Universal Integrated Circuit Card) allows attackers to bypass intended access restrictions on property values. The LG ID is LVE-SMP-200020 (September 2020).

  • CVE-2020-25062CriAug 31, 2020
    LG
    LGTelephonyProvider
    risk 0.64cvss 9.8epss 0.00

    An issue was discovered on LG mobile devices with Android OS 9 and 10 software. LGTelephonyProvider allows a bypass of intended privilege restrictions. The LG ID is LVE-SMP-200017 (July 2020).

  • CVE-2020-25061CriAug 31, 2020
    LG
    mobile devices
    risk 0.64cvss 9.8epss 0.00

    An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lge_property allows property overwrites. The LG ID is LVE-SMP-200016 (July 2020).

  • CVE-2020-25058CriAug 31, 2020
    LG
    mobile devices
    risk 0.64cvss 9.8epss 0.00

    An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. The network_management service does not properly restrict configuration changes. The LG ID is LVE-SMP-200012 (July 2020).

  • CVE-2020-25057CriAug 31, 2020
    LG
    mobile devices
    risk 0.64cvss 9.8epss 0.00

    An issue was discovered on LG mobile devices with Android OS 10 software. MDMService does not properly restrict APK installations. The LG ID is LVE-SMP-200011 (July 2020).

  • CVE-2020-13841CriJun 5, 2020
    LG
    mobile devices
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered on LG mobile devices with Android OS 9 and 10 (MTK chipsets). An AT command handler allows attackers to bypass intended access restrictions. The LG ID is LVE-SMP-200009 (June 2020).

  • CVE-2020-13840CriJun 5, 2020
    LG
    mobile devices
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can occur via an MTK AT command handler buffer overflow. The LG ID is LVE-SMP-200008 (June 2020).

  • CVE-2020-13839CriJun 5, 2020
    LG
    mobile devices
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can occur via a custom AT command handler buffer overflow. The LG ID is LVE-SMP-200007 (June 2020).

  • CVE-2020-12753CriMay 11, 2020
    LG
    mobile devices
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Arbitrary code execution can occur via the bootloader because of an EL1/EL3 coldboot vulnerability involving raw_resources. The LG ID is LVE-SMP-200006 (May 2020).

  • CVE-2020-11873CriApr 17, 2020
    LG
    mobile devices
    risk 0.64cvss 9.8epss 0.00

    An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A stack-based buffer overflow in the logging tool could allow an attacker to gain privileges. The LG ID is LVE-SMP-200005 (April 2020).

  • CVE-2019-20782CriApr 17, 2020
    LG
    LG Advanced Flash
    risk 0.64cvss 9.8epss 0.00

    An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. LG Advanced Flash (LAF) has a buffer overflow. The LG ID is LVE-SMP-190001 (March 2019).

  • CVE-2019-20780CriApr 17, 2020
    LG
    mobile devices
    risk 0.64cvss 9.8epss 0.00

    An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Certain security settings, related to whether packages are verified and accepted only from known sources, are mishandled. The LG ID is LVE-SMP-190002 (April 2019).

  • CVE-2019-20778CriApr 17, 2020
    LG
    mobile devices
    risk 0.64cvss 9.8epss 0.00

    An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. The Backup subsystem does not properly restrict operations or validate their input. The LG ID is LVE-SMP-190004 (June 2019).

  • CVE-2019-20777CriApr 17, 2020
    LG
    mobile devices
    risk 0.64cvss 9.8epss 0.00

    An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. WapService mishandles OTA Provisioning on V40 and G7 devices. The LG ID is LVE-SMP-190006 (July 2019).

  • CVE-2019-20772CriApr 17, 2020
    LG
    mobile devices
    risk 0.64cvss 9.8epss 0.00

    An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. The Account subsystem allows authorization bypass. The LG ID is LVE-SMP-190007 (August 2019).

  • CVE-2018-15482CriAug 17, 2018
    LG
    MLT
    risk 0.64cvss 9.8epss 0.01

    Certain LG devices based on Android 6.0 through 8.1 have incorrect access control for MLT application intents. The LG ID is LVE-SMP-180006.

  • CVE-2018-14982CriAug 17, 2018
    LG
    GNSS application
    risk 0.64cvss 9.8epss 0.01

    Certain LG devices based on Android 6.0 through 8.1 have incorrect access control in the GNSS application. The LG ID is LVE-SMP-180004.

  • CVE-2024-2862CriMar 25, 2024
    LG
    Lg Led Assistant
    risk 0.63cvss 9.1epss 0.51

    This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant.

  • CVE-2018-16288HigSep 14, 2018
    LG
    Supersign CMS
    risk 0.62cvss 8.6epss 0.36

    LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.

  • CVE-2023-6319CriApr 9, 2024
    LG
    webOS
    risk 0.60cvss 9.1epss 0.06

    A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can make…

  • CVE-2023-6318CriApr 9, 2024
    LG
    webOS
    risk 0.60cvss 9.1epss 0.05

    A command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloudupload service on webOS version 5 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can make authenticated…

  • CVE-2023-40509CriMay 3, 2024
    LG
    Simple Editor
    risk 0.59cvss 9.1epss 0.02

    LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40508CriMay 3, 2024
    LG
    Simple Editor
    risk 0.59cvss 9.1epss 0.02

    LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific…

  • CVE-2023-40499CriMay 3, 2024
    LG
    Simple Editor
    risk 0.59cvss 9.1epss 0.02

    LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw…

  • CVE-2023-6320CriApr 9, 2024
    LG
    webOS
    risk 0.59cvss 9.1epss 0.04

    A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on webOS versions 5 and 6. A series of specially crafted requests can lead to command execution as the dbus user. An attacker can make authenticated requests to…

  • CVE-2019-20783CriApr 17, 2020
    LG
    mobile devices
    risk 0.59cvss 9.1epss 0.00

    An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 (North America CDMA) software. The LTE protocol implementation allows a bypass of AKA (Authentication and Key Agreement). The LG ID is LVE-SMP-180014 (February 2019).

  • CVE-2023-40496HigMay 3, 2024
    LG
    Simple Editor
    risk 0.55cvss 7.5epss 0.77

    LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.…

  • CVE-2023-40495HigMay 3, 2024
    LG
    Simple Editor
    risk 0.55cvss 7.5epss 0.77

    LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. …

Page 1 of 3