CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

64 matches found

Rapid7 Vulnerability Database (full)•added 2018/09/14 12:00 a.m.•6 views

CVE-2018-16288: Exposure of Sensitive Information to an Unauthorized Actor

LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs...

8.6CVSS7.9AI score0.35828EPSS

SaveExploits6References2

Rapid7 Vulnerability Database (full)•added 2018/09/14 12:00 a.m.•7 views

CVE-2018-16287: Unrestricted Upload of File with Dangerous Type

LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs...

9.8CVSS8.3AI score0.19587EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2018/09/14 12:00 a.m.•9 views

CVE-2018-16286: Improper Authentication

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits...

9.8CVSS8.2AI score0.21545EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2018/09/14 12:00 a.m.•7 views

CVE-2018-16706: Direct Request

LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsrserver/device/reboot on port 9080...

7.8CVSS7.3AI score0.22333EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by