Simple Editor vulnerabilities
22 known vulnerabilities in Simple Editor from LG. 22 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
Simple Editor: Incorrect Permission Assignment for Critical Resource
LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of LG Simple Editor. An attacker must first obtain the ability to execute low-
- 7.5 High severity
LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability.
LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of LG Simple Editor. Authentication is not required to exploit
- 7.5 High severity
Simple Editor: Insufficiently Protected Credentials
LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw
- 7.5 High severity
Simple Editor: Insufficiently Protected Credentials
LG Simple Editor getServerSetting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific
- 9.1 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerab
- 9.1 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerabi
- 7.5 High severity
Simple Editor: Improper Restriction of XML External Entity Reference
LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to expl
- 7.5 High severity
Simple Editor: Improper Restriction of XML External Entity Reference
LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to expl
- 9.8 Critical severity
Simple Editor: Improper Neutralization of Special Elements used in an OS Command
LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vu
- 9.8 Critical severity
Simple Editor: Improper Neutralization of Special Elements used in an OS Command
LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerabili
- 7.5 High severity
Simple Editor: Improper Restriction of XML External Entity Reference
LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to expl
- 9.1 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerabili
- 9.8 Critical severity
Simple Editor: Exposed Dangerous Method or Function
LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vuln
- 9.8 Critical severity
Simple Editor: Exposed Dangerous Method or Function
LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vuln
- 9.1 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
- 9.8 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerabilit
- 9.8 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
- 7.5 High severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit
- 7.5 High severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit thi
- 9.1 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerab
- 9.8 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulne
- 9.1 Critical severity
Simple Editor: Improper Limitation of a Pathname to a Restricted Directory
LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vu