LG vulnerabilities
We track 28 vulnerabilities in LG products across 4 products. 28 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on May 3, 2024.
Latest LG vulnerabilities
- 7.5 High severity
SuperSign Media Editor: Improper Limitation of a Pathname to a Restricted Directory
LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authenticat
- 7.8 High severity
Simple Editor: Incorrect Permission Assignment for Critical Resource
LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of LG Simple Editor. An attacker must first obtain the ability to execute low-
- 7.5 High severity
LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability.
LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of LG Simple Editor. Authentication is not required to exploit
- 7.5 High severity
Simple Editor: Insufficiently Protected Credentials
LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw
- 7.5 High severity
Simple Editor: Insufficiently Protected Credentials
LG Simple Editor getServerSetting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific
- 9.1 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerab
- 9.1 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerabi
- 7.5 High severity
Simple Editor: Improper Restriction of XML External Entity Reference
LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to expl
- 7.5 High severity
Simple Editor: Improper Restriction of XML External Entity Reference
LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to expl
- 9.8 Critical severity
Simple Editor: Improper Neutralization of Special Elements used in an OS Command
LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vu
- 9.8 Critical severity
Simple Editor: Improper Neutralization of Special Elements used in an OS Command
LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerabili
- 7.5 High severity
Simple Editor: Improper Restriction of XML External Entity Reference
LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to expl
- 9.1 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerabili
- 9.8 Critical severity
Simple Editor: Exposed Dangerous Method or Function
LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vuln
- 9.8 Critical severity
Simple Editor: Exposed Dangerous Method or Function
LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vuln
- 9.1 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
- 9.8 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerabilit
- 9.8 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
- 7.5 High severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit
- 7.5 High severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit thi
- 9.1 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerab
- 9.8 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulne
- 9.1 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vu
- 7.2 High severity
webOS: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on webOS versions 5 and 6. A series of specially crafted requests can lead to command execution as the dbus user. An attacker can make authenti
- 7.2 High severity
webOS: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker c
- 7.2 High severity
webOS: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloudupload service on webOS version 5 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can ma
- 9.8 Critical severity
WebOS: Authorization Bypass Through User-Controlled Key
A prompt bypass exists in the secondscreen.gateway service running on webOS version 4 through 7. An attacker can create a privileged account without asking the user for the security PIN. Full versions and TV models affected: webOS 4.9.7 - 5.30.40 running on LG
- 9.8 Critical severity
LG N1A1 NAS Remote Command Execution Exploited
LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.