LG
LG Simple Editor: vulnerabilidades y CVE
LG Simple Editor tiene 25 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 13 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE25
Últimos 12 meses0
Críticas13
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-40516 | Alta (7.8) | 0.25% | — | 3 may 2024 | LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of LG Simple Editor. An attacker must… |
| CVE-2023-40515 | Alta (7.5) | 1.4% | — | 3 may 2024 | LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of LG Simple Editor.… |
| CVE-2023-40514 | Media (6.5) | 2.9% | — | 3 may 2024 | LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations… |
| CVE-2023-40513 | Media (6.5) | 2.9% | — | 3 may 2024 | LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations… |
| CVE-2023-40512 | Media (6.5) | 2.9% | — | 3 may 2024 | LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG… |
| CVE-2023-40511 | Alta (7.5) | 1.4% | — | 3 may 2024 | LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to… |
| CVE-2023-40510 | Alta (7.5) | 1.4% | — | 3 may 2024 | LG Simple Editor getServerSetting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to… |
| CVE-2023-40509 | Crítica (9.1) | 2.0% | — | 3 may 2024 | LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication… |
| CVE-2023-40508 | Crítica (9.1) | 2.0% | — | 3 may 2024 | LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication… |
| CVE-2023-40507 | Alta (7.5) | 1.4% | — | 3 may 2024 | LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple… |
| CVE-2023-40506 | Alta (7.5) | 1.4% | — | 3 may 2024 | LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple… |
| CVE-2023-40505 | Crítica (9.8) | 2.4% | — | 3 may 2024 | LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor.… |
| CVE-2023-40504 | Crítica (9.8) | 89% | — | 3 may 2024 | LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is… |
| CVE-2023-40503 | Alta (7.5) | 1.4% | — | 3 may 2024 | LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple… |
| CVE-2023-40502 | Crítica (9.1) | 83% | — | 3 may 2024 | LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is… |
| CVE-2023-40501 | Crítica (9.8) | 1.9% | — | 3 may 2024 | LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor.… |
| CVE-2023-40500 | Crítica (9.8) | 1.9% | — | 3 may 2024 | LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor.… |
| CVE-2023-40499 | Crítica (9.1) | 2.0% | — | 3 may 2024 | LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not… |
| CVE-2023-40498 | Crítica (9.8) | 85% | — | 3 may 2024 | LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is… |
| CVE-2023-40497 | Crítica (9.8) | 69% | — | 3 may 2024 | LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not… |
| CVE-2023-40496 | Alta (7.5) | 76% | — | 3 may 2024 | LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor.… |
| CVE-2023-40495 | Alta (7.5) | 76% | — | 3 may 2024 | LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor.… |
| CVE-2023-40494 | Crítica (9.1) | 83% | — | 3 may 2024 | LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication… |
| CVE-2023-40493 | Crítica (9.8) | 2.9% | — | 3 may 2024 | LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor.… |
| CVE-2023-40492 | Crítica (9.1) | 83% | — | 3 may 2024 | LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor.… |