Skip to main content

Lg Project

4 CVEs vendor

Monthly

CVE-2014-3930 Apr 03, 15:59 HIGH This Week

lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls, which allows remote attackers to obtain IP addresses and other unspecified router. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Lg Lg Project
NVD
CVSS 3.0
7.5
EPSS
0.4%
CVE-2014-3929 Apr 03, 15:59 HIGH PATCH This Week

The default configuration for Cougar-LG stores sensitive information under the web root with insufficient access control, which might allow remote attackers to obtain private ssh keys. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Lg Lg Project
NVD GitHub
CVSS 3.0
7.5
EPSS
0.5%
CVE-2014-3928 Apr 03, 15:59 CRITICAL PATCH Act Now

Cougar-LG stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Lg Lg Project
NVD GitHub
CVSS 3.0
9.8
EPSS
0.7%
CVE-2014-3926 Mar 13, 16:59 MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Lg Lg Project
NVD GitHub
CVSS 3.0
6.1
EPSS
0.8%
EPSS 0% CVSS 7.5
HIGH This Week

lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls, which allows remote attackers to obtain IP addresses and other unspecified router. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Lg Lg Project
NVD
EPSS 1% CVSS 7.5
HIGH PATCH This Week

The default configuration for Cougar-LG stores sensitive information under the web root with insufficient access control, which might allow remote attackers to obtain private ssh keys. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Lg Lg Project
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Cougar-LG stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Lg Lg Project
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Lg Lg Project
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy