# cve.now: LG

The newest entries naming LG as an affected vendor (up to 200), of 31 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2023-41181](https://cve.now/CVE-2023-41181.md): LG SuperSign Media Editor getSubFolderList Directory Traversal Information Disclosure Vulnerability (CVSS 5.3)
- [CVE-2023-40517](https://cve.now/CVE-2023-40517.md): LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability (CVSS 7.5)
- [CVE-2023-40516](https://cve.now/CVE-2023-40516.md): LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2023-40515](https://cve.now/CVE-2023-40515.md): LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability (CVSS 7.5)
- [CVE-2023-40514](https://cve.now/CVE-2023-40514.md): LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerability (CVSS 6.5)
- [CVE-2023-40513](https://cve.now/CVE-2023-40513.md): LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability (CVSS 6.5)
- [CVE-2023-40512](https://cve.now/CVE-2023-40512.md): LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability (CVSS 6.5)
- [CVE-2023-40511](https://cve.now/CVE-2023-40511.md): LG Simple Editor checkServer Authentication Bypass Vulnerability (CVSS 7.5)
- [CVE-2023-40510](https://cve.now/CVE-2023-40510.md): LG Simple Editor getServerSetting Authentication Bypass Vulnerability (CVSS 7.5)
- [CVE-2023-40509](https://cve.now/CVE-2023-40509.md): LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability (CVSS 8.2)
- [CVE-2023-40508](https://cve.now/CVE-2023-40508.md): LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability (CVSS 8.2)
- [CVE-2023-40507](https://cve.now/CVE-2023-40507.md): LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability (CVSS 7.5)
- [CVE-2023-40506](https://cve.now/CVE-2023-40506.md): LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability (CVSS 7.5)
- [CVE-2023-40505](https://cve.now/CVE-2023-40505.md): LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability (CVSS 9.8)
- [CVE-2023-40504](https://cve.now/CVE-2023-40504.md): LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability (CVSS 9.8)
- [CVE-2023-40503](https://cve.now/CVE-2023-40503.md): LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability (CVSS 7.5)
- [CVE-2023-40502](https://cve.now/CVE-2023-40502.md): LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability (CVSS 8.2)
- [CVE-2023-40501](https://cve.now/CVE-2023-40501.md): LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability (CVSS 9.8)
- [CVE-2023-40500](https://cve.now/CVE-2023-40500.md): LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability (CVSS 9.8)
- [CVE-2023-40499](https://cve.now/CVE-2023-40499.md): LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability (CVSS 8.2)
- [CVE-2023-40498](https://cve.now/CVE-2023-40498.md): LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability (CVSS 9.8)
- [CVE-2023-40497](https://cve.now/CVE-2023-40497.md): LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability (CVSS 9.8)
- [CVE-2023-40496](https://cve.now/CVE-2023-40496.md): LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability (CVSS 7.5)
- [CVE-2023-40495](https://cve.now/CVE-2023-40495.md): LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability (CVSS 7.5)
- [CVE-2023-40494](https://cve.now/CVE-2023-40494.md): LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability (CVSS 8.2)
- [CVE-2023-40493](https://cve.now/CVE-2023-40493.md): LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability (CVSS 9.8)
- [CVE-2023-40492](https://cve.now/CVE-2023-40492.md): LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability (CVSS 8.2)
- [CVE-2023-6320](https://cve.now/CVE-2023-6320.md): Command injection in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint (CVSS 9.1)
- [CVE-2023-6319](https://cve.now/CVE-2023-6319.md): Command injection in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service (CVSS 9.1)
- [CVE-2023-6318](https://cve.now/CVE-2023-6318.md): Command injection in the processAnalyticsReport method from the com.webos.service.cloudupload service (CVSS 9.1)
- [CVE-2023-6317](https://cve.now/CVE-2023-6317.md): PIN/prompt bypass on the secondscreen.gateway service allows access to the SSAP API without user interaction (CVSS 7.2)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/lg
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.