LG kayıtları
lg üreticisine ait 87 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %1,1
- Silahlaştırılmış
- 3 · %3,4
- Pre-auth RCE
- 13
- Düzeltme kaydı olan
- %4,6
- Yayından KEV’e ortanca
- 1046 gün
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')20
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')7
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor6
- CWE-732 Incorrect Permission Assignment for Critical Resource4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-427 Uncontrolled Search Path Element3
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
87 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
96Hemen | CVE-2018-14839Silahlaştırılmış | LG N1A1 NAS 3718.510 is affected by: Remote Command Execution.lg · n1a1 firmware · CWE-78 | Kritik9,8 | KEV | %89,3 | 14 May 2019 |
66Bu hafta | CVE-2023-40504Silahlaştırılmış | LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerabilitylg · simple editor · CWE-78 | Kritik9,8 | — | %88,7 | 2 May 2024 |
65Bu hafta | CVE-2023-40498Silahlaştırılmış | LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerabilitylg · simple editor · CWE-22 | Kritik9,8 | — | %85,0 | 2 May 2024 |
61Bu hafta | CVE-2023-40494İstismar yok | LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerabilitylg · simple editor · CWE-22 | Kritik9,1 | — | %83,1 | 2 May 2024 |
61Bu hafta | CVE-2023-40502İstismar yok | LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerabilitylg · simple editor · CWE-22 | Kritik9,1 | — | %83,1 | 2 May 2024 |
61Bu hafta | CVE-2023-40492İstismar yok | LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerabilitylg · simple editor · CWE-22 | Kritik9,1 | — | %83,1 | 2 May 2024 |
60Bu hafta | CVE-2023-40497İstismar yok | LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerabilitylg · simple editor · CWE-22 | Kritik9,8 | — | %69,3 | 2 May 2024 |
58Planlayın | CVE-2024-2863Kavram kanıtı | Path traversal via file upload on LG LED Assistantlg · lg led assistant · CWE-35 | Kritik9,8 | — | %63,9 | 25 Mar 2024 |
56Planlayın | CVE-2018-17173Kavram kanıtı | LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.lg · supersign cms · CWE-94 | Kritik9,8 | — | %56,2 | 21 Eyl 2018 |
54Planlayın | CVE-2024-2862Kavram kanıtı | Password reset vulnerability without authorization on LG LED Assistantlg · lg led assistant · CWE-287 | Kritik9,8 | — | %51,0 | 25 Mar 2024 |
53Planlayın | CVE-2023-40496İstismar yok | LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerabilitylg · simple editor · CWE-22 | Yüksek7,5 | — | %75,6 | 2 May 2024 |
53Planlayın | CVE-2023-40495İstismar yok | LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerabilitylg · simple editor · CWE-22 | Yüksek7,5 | — | %75,6 | 2 May 2024 |
45Planlayın | CVE-2018-16288Kavram kanıtı | LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.lg · supersign cms · CWE-200 | Yüksek8,6 | — | %35,8 | 14 Eyl 2018 |
45Planlayın | CVE-2018-16286İstismar yok | LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the Plg · supersign cms · CWE-287 | Kritik9,8 | — | %21,5 | 14 Eyl 2018 |
45Planlayın | CVE-2018-16287İstismar yok | LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.lg · supersign cms · CWE-434 | Kritik9,8 | — | %19,5 | 14 Eyl 2018 |
42Planlayın | CVE-2021-38306İstismar yok | Network Attached Storage on LG N1T1*** 10124 devices allows an unauthenticated attacker to gain root access via OS command injection in the lg · n1t1 firmware · CWE-78 | Kritik9,8 | — | %8,9 | 24 Ağu 2021 |
40Planlayın | CVE-2023-40493İstismar yok | LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerabilitylg · simple editor · CWE-22 | Kritik9,8 | — | %2,8 | 2 May 2024 |
40Planlayın | CVE-2023-4613İstismar yok | Upload Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerabilitylg · lg led assistant · CWE-22 | Kritik9,8 | — | %2,5 | 4 Eyl 2023 |
40Planlayın | CVE-2023-4614İstismar yok | setThumbnailRC Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerabilitylg · lg led assistant · CWE-22 | Kritik9,8 | — | %2,5 | 4 Eyl 2023 |
40Planlayın | CVE-2023-40505İstismar yok | LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerabilitylg · simple editor · CWE-78 | Kritik9,8 | — | %2,4 | 2 May 2024 |
40Planlayın | CVE-2023-40500İstismar yok | LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerabilitylg · simple editor · CWE-749 | Kritik9,8 | — | %1,8 | 2 May 2024 |
40Planlayın | CVE-2023-40501İstismar yok | LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerabilitylg · simple editor · CWE-749 | Kritik9,8 | — | %1,8 | 2 May 2024 |
39İzleyin | CVE-2023-6317İstismar yok | PIN/prompt bypass on the secondscreen.gateway service allows access to the SSAP API without user interactionlg · webos · CWE-639 | Kritik9,8 | — | %1,0 | 9 Nis 2024 |
39İzleyin | CVE-2022-23730İstismar yok | The public API error causes for the attacker to be able to bypass API access control.lg · webos · CWE-284 | Kritik9,8 | — | %1,0 | 11 Mar 2022 |
39İzleyin | CVE-2024-1885İstismar yok | Remote Code Execution attack on LG Signagelg · webos signage · CWE-94 | Kritik9,8 | — | %0,9 | 26 Şub 2024 |
- CVE-2018-1483996Hemen
LG N1A1 NAS 3718.510 is affected by: Remote Command Execution.
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %89lg · n1a1 firmware14 May 2019
- CVE-2023-4050466Bu hafta
LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability
KritikCVSS 9,8SilahlaştırılmışEPSS %88lg · simple editor2 May 2024
- CVE-2023-4049865Bu hafta
LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability
KritikCVSS 9,8SilahlaştırılmışEPSS %85lg · simple editor2 May 2024
- CVE-2023-4049461Bu hafta
LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability
KritikCVSS 9,1İstismar yokEPSS %83lg · simple editor2 May 2024
- CVE-2023-4050261Bu hafta
LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability
KritikCVSS 9,1İstismar yokEPSS %83lg · simple editor2 May 2024
- CVE-2023-4049261Bu hafta
LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability
KritikCVSS 9,1İstismar yokEPSS %83lg · simple editor2 May 2024
- CVE-2023-4049760Bu hafta
LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %69lg · simple editor2 May 2024
- CVE-2024-286358Planlayın
Path traversal via file upload on LG LED Assistant
KritikCVSS 9,8Kavram kanıtıEPSS %63lg · lg led assistant25 Mar 2024
- CVE-2018-1717356Planlayın
LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.
KritikCVSS 9,8Kavram kanıtıEPSS %56lg · supersign cms21 Eyl 2018
- CVE-2024-286254Planlayın
Password reset vulnerability without authorization on LG LED Assistant
KritikCVSS 9,8Kavram kanıtıEPSS %51lg · lg led assistant25 Mar 2024
- CVE-2023-4049653Planlayın
LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %75lg · simple editor2 May 2024
- CVE-2023-4049553Planlayın
LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %75lg · simple editor2 May 2024
- CVE-2018-1628845Planlayın
LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.
YüksekCVSS 8,6Kavram kanıtıEPSS %35lg · supersign cms14 Eyl 2018
- CVE-2018-1628645Planlayın
LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the P
KritikCVSS 9,8İstismar yokEPSS %21lg · supersign cms14 Eyl 2018
- CVE-2018-1628745Planlayın
LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.
KritikCVSS 9,8İstismar yokEPSS %19lg · supersign cms14 Eyl 2018
- CVE-2021-3830642Planlayın
Network Attached Storage on LG N1T1*** 10124 devices allows an unauthenticated attacker to gain root access via OS command injection in the
KritikCVSS 9,8İstismar yokEPSS %8lg · n1t1 firmware24 Ağu 2021
- CVE-2023-4049340Planlayın
LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %2lg · simple editor2 May 2024
- CVE-2023-461340Planlayın
Upload Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability
KritikCVSS 9,8İstismar yokEPSS %2lg · lg led assistant4 Eyl 2023
- CVE-2023-461440Planlayın
setThumbnailRC Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability
KritikCVSS 9,8İstismar yokEPSS %2lg · lg led assistant4 Eyl 2023
- CVE-2023-4050540Planlayın
LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %2lg · simple editor2 May 2024
- CVE-2023-4050040Planlayın
LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1lg · simple editor2 May 2024
- CVE-2023-4050140Planlayın
LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1lg · simple editor2 May 2024
- CVE-2023-631739İzleyin
PIN/prompt bypass on the secondscreen.gateway service allows access to the SSAP API without user interaction
KritikCVSS 9,8İstismar yokEPSS %1lg · webos9 Nis 2024
- CVE-2022-2373039İzleyin
The public API error causes for the attacker to be able to bypass API access control.
KritikCVSS 9,8İstismar yokEPSS %1lg · webos11 Mar 2022
- CVE-2024-188539İzleyin
Remote Code Execution attack on LG Signage
KritikCVSS 9,8İstismar yokEPSS %0lg · webos signage26 Şub 2024