CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 03/05/2024 |
| CVE-2023-40498 | 严重9.8 | LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the cp command implement | 03/05/2024 |
| CVE-2023-40497 | 严重9.8 | LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the saveXml command impleme | 03/05/2024 |
| CVE-2023-40496 | 高危7.5 | LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the imp | 03/05/2024 |
| CVE-2023-40495 | 高危7.5 | LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the copyTe | 03/05/2024 |
| CVE-2023-40494 | 严重9.1 | LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the deleteFolder met | 03/05/2024 |
| CVE-2023-40493 | 严重9.8 | LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the implementatio | 03/05/2024 |
| CVE-2023-40492 | 严重9.1 | LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the deleteChec | 03/05/2024 |
| CVE-2024-2863 | 严重9.8 | This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant. | 25/03/2024 |
| CVE-2024-2862 | 严重9.8 |
This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant.
| 25/03/2024 |
| CVE-2024-1886 | 高危8.8 |
This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage.
| 26/02/2024 |
| CVE-2024-1885 | 严重9.8 | This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage.
| 26/02/2024 |
| CVE-2023-4616 | 高危7.5 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/thumbnail endpoint. The issue results from the lack of proper validation of a user-supplied p | 04/09/2023 |
| CVE-2023-4615 | 高危7.5 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/download/updateFile endpoint. The issue results from the lack of proper validation of a user- | 04/09/2023 |
| CVE-2023-4614 | 严重9.8 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/installation/setThumbnailRc endpoint. The issue results from the lack of proper validation of a user- | 04/09/2023 |
| CVE-2023-4613 | 严重9.8 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/settings/upload endpoint. The issue results from the lack of proper validation of a user-supplied pat | 04/09/2023 |
| CVE-2020-7807 | 中危5.5 | A vulnerability that can hijack a DLL file that is loaded during products(LGPCSuite_Setup, IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup) installation into a DLL file that the hacker wants. Missing Support for Integrity Check vulnerability in ____COMPONENT____ of LG Electronics (LGPCSuite_Setup), (IPSFULLHD, LG_ULTRAW | 14/09/2020 |
| CVE-2019-20781 | 高危7.8 | An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur. | 29/04/2020 |