Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
LgWebos5.5.0

4 matches found

CVE
CVE•added 2024/04/09 2:15 p.m.•80 views

CVE-2023-6319

A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can make authenticated requests to trigg...

9.1CVSS9.3AI score0.06952EPSS
CVE
CVE•added 2024/04/09 2:15 p.m.•67 views

CVE-2023-6320

A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on webOS versions 5 and 6. A series of specially crafted requests can lead to command execution as the dbus user. An attacker can make authenticated requests to trigger this vulnerab...

9.1CVSS9.3AI score0.00334EPSS
CVE
CVE•added 2024/04/09 2:15 p.m.•60 views

CVE-2023-6317

A prompt bypass exists in the secondscreen.gateway service running on webOS version 4 through 7. An attacker can create a privileged account without asking the user for the security PIN. Full versions and TV models affected: webOS 4.9.7 - 5.30.40 running on LG43UM7000PLAwebOS 5.5.0 - 04.50.51 runni...

9.8CVSS7AI score0.00075EPSS
CVE
CVE•added 2024/04/09 2:15 p.m.•59 views

CVE-2023-6318

A command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloudupload service on webOS version 5 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can make authenticated requests to trigger th...

9.1CVSS9.4AI score0.00334EPSS