Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 89

Export CSV
CVE-2018-16706

LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/device/reboot on port 9080.

CVSS 3.0 · 7.5 High EPSS 22.3% KEV · Not listed
Vendors
Lg
Products
Supersign Cms
CVE-2018-16288

LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.

CVSS 3.0 · 8.6 High EPSS 35.8% KEV · Not listed
Vendors
Lg
Products
Supersign Cms
CVE-2018-16287

LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.

CVSS 3.0 · 9.8 Critical EPSS 19.6% KEV · Not listed
Vendors
Lg
Products
Supersign Cms
CVE-2018-16286

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits.

CVSS 3.0 · 9.8 Critical EPSS 21.5% KEV · Not listed
Vendors
Lg
Products
Supersign Cms
CVE-2018-15482

Certain LG devices based on Android 6.0 through 8.1 have incorrect access control for MLT application intents. The LG ID is LVE-SMP-180006.

CVSS 3.0 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Google Lg
Products
Android G5 G6 and 12 more
CVE-2018-14982

Certain LG devices based on Android 6.0 through 8.1 have incorrect access control in the GNSS application. The LG ID is LVE-SMP-180004.

CVSS 3.0 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Google Lg
Products
Android G5 G6 and 12 more
CVE-2018-14981

Certain LG devices based on Android 6.0 through 8.1 have incorrect access control for SystemUI application intents. The LG ID is LVE-SMP-180005.

CVSS 3.0 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Google Lg
Products
Android G5 G6 and 12 more
CVE-2018-10229

A hardware vulnerability in GPU memory modules allows attackers to accelerate micro-architectural attacks through the use of the JavaScript WebGL API.

CVSS 3.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Google Lg Mozilla
Products
Chrome Nexus 5 Firefox
CVE-2013-3685

A Privilege Escalation Vulnerability exists in Sprite Software Spritebud 1.3.24 and 1.3.28 and Backup 2.5.4105 and 2.5.4108 on LG Android smartphones due to a race condition in the spritebud daemon, which could let a local malicious user obtain root privileges.

CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed
Vendors
Lg Spritesoftware
Products
E971 E973 E975 and 42 more