Lucene search

K
LgSimple Editor3.21.0

25 matches found

CVE
CVE
added 2024/05/03 3:15 a.m.60 views

CVE-2023-40504

LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.8CVSS9.9AI score0.89601EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.49 views

CVE-2023-40513

LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this vulnerab...

6.5CVSS6.2AI score0.00098EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.47 views

CVE-2023-40502

LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.1CVSS8.2AI score0.27344EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.45 views

CVE-2023-40507

LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific fl...

7.5CVSS7.2AI score0.00061EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.44 views

CVE-2023-40509

LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within ...

9.1CVSS8.2AI score0.01912EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.44 views

CVE-2023-40515

LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw e...

7.5CVSS7.5AI score0.00206EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.43 views

CVE-2023-40498

LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ...

9.8CVSS10AI score0.8783EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.42 views

CVE-2023-40511

LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the checkServer method. ...

7.5CVSS7.7AI score0.00109EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.42 views

CVE-2023-40512

LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this vulnerabilit...

6.5CVSS6.2AI score0.00098EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.41 views

CVE-2023-40500

LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists wit...

9.8CVSS9.9AI score0.00771EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.41 views

CVE-2023-40503

LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific fl...

7.5CVSS7.2AI score0.00054EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.41 views

CVE-2023-40510

LG Simple Editor getServerSetting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getServerSettin...

7.5CVSS7.7AI score0.00109EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.39 views

CVE-2023-40492

LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists w...

9.1CVSS8.2AI score0.39853EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.39 views

CVE-2023-40505

LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists w...

9.8CVSS10AI score0.01266EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.39 views

CVE-2023-40506

LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific fl...

7.5CVSS7.2AI score0.00071EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.38 views

CVE-2023-40501

LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists wit...

9.8CVSS9.9AI score0.00771EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.38 views

CVE-2023-40508

LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

9.1CVSS8.2AI score0.01912EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.37 views

CVE-2023-40516

LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of LG Simple Editor. An attacker must first obtain the ability to execute low-privileged code on the target system in...

7.8CVSS7.8AI score0.00018EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.36 views

CVE-2023-40493

LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists with...

9.8CVSS9.9AI score0.01472EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.36 views

CVE-2023-40514

LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this vulnera...

6.5CVSS6.2AI score0.00098EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.35 views

CVE-2023-40494

LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within ...

9.1CVSS8.2AI score0.39853EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.35 views

CVE-2023-40497

LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the sav...

9.8CVSS10AI score0.30417EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.35 views

CVE-2023-40499

LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mkd...

9.1CVSS8.3AI score0.0188EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.34 views

CVE-2023-40496

LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw e...

7.5CVSS7.2AI score0.15044EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.33 views

CVE-2023-40495

LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exis...

7.5CVSS7.2AI score0.15044EPSS