Login Request a demo
WE
Product
Webos
by LG · last CVE Apr 9, 2024
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 6Medium 0Low 0
Severity
All severities8Critical2High6Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Webos to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-6317
9.8
1%
Apr 9
A prompt bypass exists in the secondscreen.gateway service running on webOS version 4 through 7
Affected: 4.9.7; 5.5.0; 6.3.3-442; 7.3.1-43
CVE-2022-23730
9.8
1%
Mar 11
The public API error causes for the attacker to be able to bypass API access control
Affected: 4.0 and later
CVE-2022-23731
7.8
1%
Mar 11
V8 javascript engine (heap vulnerability) can cause privilege escalation ,which can impact on some webOS TV models
Affected: 4.0 and later
CVE-2022-23727
7.8
0%
Jan 28
There is a privilege escalation vulnerability in some webOS TVs
Affected: 3.0 through 5.0
CVE-2020-9759
7.8
0%
Mar 23
A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files
Affected: All versions, or not specified
CVE-2023-6320
7.2
4%
Apr 9
A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on webOS versions 5 and 6
Affected: 5.5.0; 6.3.3-442
CVE-2023-6319
7.2
6%
Apr 9
A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7
Affected: 4.9.7; 5.5.0; 6.3.3-442; 7.3.1-43
CVE-2023-6318
7.2
5%
Apr 9
A command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloudupload service on webOS version 5 through 7
Affected: 5.5.0; 6.3.3-442; 7.3.1-43
Showing 8