Skip to content
Noroxi

LG records

87 published records for vendor lg.

Researcher profile

Entered KEV
1 · 1.1%
Weaponized
3 · 3.4%
Pre-auth RCE
13
With a fix record
4.6%
Median publish → KEV
1046 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

87 records
  • CVE-2018-14839
    96Now

    LG N1A1 NAS 3718.510 is affected by: Remote Command Execution.

    CriticalCVSS 9.8KEVWeaponizedEPSS 89%

    lg · n1a1 firmwareMay 14, 2019

  • CVE-2023-40504
    66This week

    LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability

    CriticalCVSS 9.8WeaponizedEPSS 88%

    lg · simple editorMay 2, 2024

  • CVE-2023-40498
    65This week

    LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability

    CriticalCVSS 9.8WeaponizedEPSS 85%

    lg · simple editorMay 2, 2024

  • CVE-2023-40494
    61This week

    LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability

    CriticalCVSS 9.1No exploitEPSS 81%

    lg · simple editorMay 2, 2024

  • CVE-2023-40502
    61This week

    LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability

    CriticalCVSS 9.1No exploitEPSS 81%

    lg · simple editorMay 2, 2024

  • CVE-2023-40492
    61This week

    LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability

    CriticalCVSS 9.1No exploitEPSS 81%

    lg · simple editorMay 2, 2024

  • CVE-2023-40497
    59Plan

    LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 67%

    lg · simple editorMay 2, 2024

  • CVE-2024-2863
    58Plan

    Path traversal via file upload on LG LED Assistant

    CriticalCVSS 9.8Proof of conceptEPSS 63%

    lg · lg led assistantMar 25, 2024

  • CVE-2018-17173
    56Plan

    LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.

    CriticalCVSS 9.8Proof of conceptEPSS 56%

    lg · supersign cmsSep 21, 2018

  • CVE-2024-2862
    54Plan

    Password reset vulnerability without authorization on LG LED Assistant

    CriticalCVSS 9.8Proof of conceptEPSS 51%

    lg · lg led assistantMar 25, 2024

  • CVE-2023-40495
    53Plan

    LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability

    HighCVSS 7.5No exploitEPSS 75%

    lg · simple editorMay 2, 2024

  • CVE-2023-40496
    52Plan

    LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability

    HighCVSS 7.5No exploitEPSS 74%

    lg · simple editorMay 2, 2024

  • CVE-2018-16288
    45Plan

    LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.

    HighCVSS 8.6Proof of conceptEPSS 35%

    lg · supersign cmsSep 14, 2018

  • CVE-2018-16286
    45Plan

    LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the P

    CriticalCVSS 9.8No exploitEPSS 21%

    lg · supersign cmsSep 14, 2018

  • CVE-2018-16287
    45Plan

    LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.

    CriticalCVSS 9.8No exploitEPSS 19%

    lg · supersign cmsSep 14, 2018

  • CVE-2021-38306
    42Plan

    Network Attached Storage on LG N1T1*** 10124 devices allows an unauthenticated attacker to gain root access via OS command injection in the

    CriticalCVSS 9.8No exploitEPSS 8%

    lg · n1t1 firmwareAug 24, 2021

  • CVE-2023-40493
    40Plan

    LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 2%

    lg · simple editorMay 2, 2024

  • CVE-2023-4613
    40Plan

    Upload Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability

    CriticalCVSS 9.8No exploitEPSS 2%

    lg · lg led assistantSep 4, 2023

  • CVE-2023-4614
    40Plan

    setThumbnailRC Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability

    CriticalCVSS 9.8No exploitEPSS 2%

    lg · lg led assistantSep 4, 2023

  • CVE-2023-40505
    40Plan

    LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 2%

    lg · simple editorMay 2, 2024

  • CVE-2023-40500
    40Plan

    LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    lg · simple editorMay 2, 2024

  • CVE-2023-40501
    40Plan

    LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    lg · simple editorMay 2, 2024

  • CVE-2023-6317
    39Monitor

    PIN/prompt bypass on the secondscreen.gateway service allows access to the SSAP API without user interaction

    CriticalCVSS 9.8No exploitEPSS 1%

    lg · webosApr 9, 2024

  • CVE-2022-23730
    39Monitor

    The public API error causes for the attacker to be able to bypass API access control.

    CriticalCVSS 9.8No exploitEPSS 1%

    lg · webosMar 11, 2022

  • CVE-2024-1885
    39Monitor

    Remote Code Execution attack on LG Signage

    CriticalCVSS 9.8No exploitEPSS 0%

    lg · webos signageFeb 26, 2024