PatchTheCVE: lg

CVE-2024-6179: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Elect

Wed, 17 Jun 2026 08:17:26 +0000

MEDIUM 6.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before < 4.3.1.

CVE-2024-6178: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Elect

Wed, 17 Jun 2026 08:17:26 +0000

CVE-2024-6177: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in L

Wed, 17 Jun 2026 08:17:26 +0000

MEDIUM 6.1: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before < 4.3.1.

CVE-2023-41181: LG SuperSign Media Editor getSubFolderList Directory Traversal Information Disclosure Vulnerability

Wed, 17 Jun 2026 06:20:56 +0000

MEDIUM 5.3: LG SuperSign Media Editor getSubFolderList Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authentication is not required to exploit this vulnerability. The

CVE-2023-40517: LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerabi

Wed, 17 Jun 2026 06:18:17 +0000

HIGH 7.5: LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authentication is not required to exploit this vuln

CVE-2023-40516: LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Wed, 17 Jun 2026 06:18:17 +0000

HIGH 7.8: LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of LG Simple Editor. An attacker must first obtain the ability to execute low-privileged code on the target system in

CVE-2023-40515: LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability

Wed, 17 Jun 2026 06:18:16 +0000

HIGH 7.5: LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw e

CVE-2023-40514: LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerabi

Wed, 17 Jun 2026 06:18:16 +0000

MEDIUM 6.5: LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this vulnerab

CVE-2023-40513: LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerabil

Wed, 17 Jun 2026 06:18:15 +0000

MEDIUM 6.5: LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this vulnerabi

CVE-2023-40512: LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability

Wed, 17 Jun 2026 06:18:15 +0000

MEDIUM 6.5: LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this vulnerability

CVE-2023-40511: LG Simple Editor checkServer Authentication Bypass Vulnerability

Wed, 17 Jun 2026 06:18:15 +0000

HIGH 7.5: LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the checkServer method.

CVE-2023-40510: LG Simple Editor getServerSetting Authentication Bypass Vulnerability

Wed, 17 Jun 2026 06:18:14 +0000

HIGH 7.5: LG Simple Editor getServerSetting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getServerSettin

CVE-2023-40509: LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability

Wed, 17 Jun 2026 06:18:14 +0000

CRITICAL 9.1: LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within

CVE-2023-40508: LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability

Wed, 17 Jun 2026 06:18:14 +0000

CRITICAL 9.1: LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within t

CVE-2023-40507: LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability

Wed, 17 Jun 2026 06:18:13 +0000

HIGH 7.5: LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific fl

CVE-2023-40506: LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability

Wed, 17 Jun 2026 06:18:13 +0000

CVE-2023-40505: LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability

Wed, 17 Jun 2026 06:18:13 +0000

CRITICAL 9.8: LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists w

CVE-2023-40504: LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability

Wed, 17 Jun 2026 06:18:12 +0000

CRITICAL 9.8: LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the

CVE-2023-40503: LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability

Wed, 17 Jun 2026 06:18:12 +0000

HIGH 7.5: LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific fl

CVE-2023-40502: LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability

Wed, 17 Jun 2026 06:18:11 +0000

CRITICAL 9.1: LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the

CVE-2023-40501: LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability

Wed, 17 Jun 2026 06:18:11 +0000

CRITICAL 9.8: LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists wit

CVE-2023-40500: LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability

Wed, 17 Jun 2026 06:18:11 +0000

CVE-2023-40499: LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability

Wed, 17 Jun 2026 06:18:10 +0000

CRITICAL 9.1: LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mkd

CVE-2023-40498: LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability

Wed, 17 Jun 2026 06:18:10 +0000

CRITICAL 9.8: LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the

CVE-2023-40497: LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability

Wed, 17 Jun 2026 06:18:10 +0000

CRITICAL 9.8: LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the sav

CVE-2023-40496: LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability

Wed, 17 Jun 2026 06:18:09 +0000

HIGH 7.5: LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw e

CVE-2023-40495: LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability

Wed, 17 Jun 2026 06:18:09 +0000

HIGH 7.5: LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exis

CVE-2023-40494: LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability

Wed, 17 Jun 2026 06:18:08 +0000

CRITICAL 9.1: LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within

CVE-2023-40493: LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability

Wed, 17 Jun 2026 06:18:08 +0000

CRITICAL 9.8: LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists with

CVE-2023-40492: LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability

Wed, 17 Jun 2026 06:18:08 +0000

CRITICAL 9.1: LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists w

CVE-2023-6320: A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress en

Wed, 17 Jun 2026 06:50:32 +0000

CRITICAL 9.1: A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on webOS versions 5 and 6. A series of specially crafted requests can lead to command execution as the dbus user. An attacker can make authenticated requests to trigger this vulnerabi

CVE-2023-6319: A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedsto

Wed, 17 Jun 2026 06:50:31 +0000

CRITICAL 9.1: A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can make authenticated requests to trigge

CVE-2023-6318: A command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloud

Wed, 17 Jun 2026 06:50:31 +0000

CRITICAL 9.1: A command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloudupload service on webOS version 5 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can make authenticated requests to trigger thi

CVE-2023-6317: A prompt bypass exists in the secondscreen.gateway service running on webOS version 4 through 7

Wed, 17 Jun 2026 06:50:31 +0000

HIGH 7.2: A prompt bypass exists in the secondscreen.gateway service running on webOS version 4 through 7. An attacker can create a privileged account without asking the user for the security PIN. Full versions and TV models affected: webOS 4.9.7 - 5.30.40 running on LG43UM7000PLA webOS 5.5.0 - 04.50.51 r

CVE-2024-2863: This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant.

Wed, 17 Jun 2026 07:25:42 +0000

MEDIUM 5.3: This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant.

CVE-2024-2862: This vulnerability allows remote attackers to reset the password of anonymous users without authorization on

Wed, 17 Jun 2026 07:25:42 +0000

CRITICAL 9.1: This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant.

CVE-2024-1886: This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage.

Wed, 17 Jun 2026 07:05:13 +0000

LOW 3.0: This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage.

CVE-2024-1885: This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage.

Wed, 17 Jun 2026 07:05:13 +0000

MEDIUM 6.3: This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage.

CVE-2023-4616: This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG L

Wed, 17 Jun 2026 06:38:13 +0000

HIGH 7.5: This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/thumbnail endpoint. The issue results from the lack of proper validation

CVE-2023-4615: This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG L

Wed, 17 Jun 2026 06:38:13 +0000

HIGH 7.5: This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/download/updateFile endpoint. The issue results from the lack of proper v

CVE-2023-4614: This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assis

Wed, 17 Jun 2026 06:38:13 +0000

CRITICAL 9.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/installation/setThumbnailRc endpoint. The issue results from the lack of proper v

CVE-2023-4613: This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assis

Wed, 17 Jun 2026 06:38:13 +0000

CRITICAL 9.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/settings/upload endpoint. The issue results from the lack of proper validation of