CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 03/05/2024 |
| CVE-2023-40498 | KRITISCH9.8 | LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the cp command implement | 03/05/2024 |
| CVE-2023-40497 | KRITISCH9.8 | LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the saveXml command impleme | 03/05/2024 |
| CVE-2023-40496 | HOCH7.5 | LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the imp | 03/05/2024 |
| CVE-2023-40495 | HOCH7.5 | LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the copyTe | 03/05/2024 |
| CVE-2023-40494 | KRITISCH9.1 | LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the deleteFolder met | 03/05/2024 |
| CVE-2023-40493 | KRITISCH9.8 | LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the implementatio | 03/05/2024 |
| CVE-2023-40492 | KRITISCH9.1 | LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the deleteChec | 03/05/2024 |
| CVE-2024-2863 | KRITISCH9.8 | This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant. | 25/03/2024 |
| CVE-2024-2862 | KRITISCH9.8 |
This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant.
| 25/03/2024 |
| CVE-2024-1886 | HOCH8.8 |
This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage.
| 26/02/2024 |
| CVE-2024-1885 | KRITISCH9.8 | This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage.
| 26/02/2024 |
| CVE-2023-4616 | HOCH7.5 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/thumbnail endpoint. The issue results from the lack of proper validation of a user-supplied p | 04/09/2023 |
| CVE-2023-4615 | HOCH7.5 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/download/updateFile endpoint. The issue results from the lack of proper validation of a user- | 04/09/2023 |
| CVE-2023-4614 | KRITISCH9.8 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/installation/setThumbnailRc endpoint. The issue results from the lack of proper validation of a user- | 04/09/2023 |
| CVE-2023-4613 | KRITISCH9.8 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/settings/upload endpoint. The issue results from the lack of proper validation of a user-supplied pat | 04/09/2023 |
| CVE-2020-7807 | MITTEL5.5 | A vulnerability that can hijack a DLL file that is loaded during products(LGPCSuite_Setup, IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup) installation into a DLL file that the hacker wants. Missing Support for Integrity Check vulnerability in ____COMPONENT____ of LG Electronics (LGPCSuite_Setup), (IPSFULLHD, LG_ULTRAW | 14/09/2020 |
| CVE-2019-20781 | HOCH7.8 | An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur. | 29/04/2020 |