LW
Product
Lollms Web UI
46
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 18Medium 9Low 1
Watch
Add Lollms Web UI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8898 | 9.8 | Mar 20 | Path Traversal in parisneo/lollms-webui Affected: 12 |
| CVE-2024-2359 | 9.8 | Jun 6 | Improper Neutralization of Special Elements used in an OS Command in parisneo/lollms-webui Affected: 9.3 |
| CVE-2024-2360 | 9.8 | Jun 6 | Path Traversal leading to Remote Code Execution in parisneo/lollms-webui Affected: All versions, or not specified |
| CVE-2024-3322 | 9.8 | Jun 6 | Path Traversal in parisneo/lollms-webui Affected: before 9.5 |
| CVE-2024-4320 | 9.8 | Jun 6 | Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui Affected: All versions, or not specified |
| CVE-2024-2624 | 9.8 | Jun 6 | Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui Affected: before 9.4 |
| CVE-2024-5482 | 9.8 | Jun 6 | SSRF in add_webpage endpoint in parisneo/lollms-webui Affected: All versions, or not specified |
| CVE-2024-4326 | 9.8 | May 16 | Remote Code Execution via `/apply_settings` and `/execute_code` in parisneo/lollms-webui Affected: before 9.5 |
| CVE-2024-2358 | 9.8 | May 16 | Path Traversal leading to Remote Code Execution in parisneo/lollms-webui Affected: before 9.5 |
| CVE-2024-1520 | 9.8 | Apr 10 | OS Command Injection in parisneo/lollms-webui Affected: 9.0 before 9.2 |
| CVE-2024-1511 | 9.8 | Apr 10 | Path Traversal Vulnerability in parisneo/lollms-webui Affected: 9.0 |
| CVE-2024-2361 | 9.6 | May 16 | Arbitrary Upload & Read via Path Traversal in parisneo/lollms-webui Affected: before 9.5 |
| CVE-2024-1600 | 9.3 | Apr 10 | Local File Inclusion in parisneo/lollms-webui Affected: 9.0 before 9.6 |
| CVE-2026-33340 | 9.1 | Mar 24 | LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint Affected: All versions, or not specified |
| CVE-2024-8581 | 9.1 | Mar 20 | Path Traversal in parisneo/lollms-webui Affected: 12 |
| CVE-2024-1873 | 9.1 | Jun 6 | Path Traversal and Denial of Service in parisneo/lollms-webui Affected: All versions, or not specified |
| CVE-2024-2362 | 9.1 | Jun 6 | Path Traversal in parisneo/lollms-webui Affected: 9.3 |
| CVE-2024-2366 | 9.0 | May 16 | Remote Code Execution in parisneo/lollms-webui Affected: before 9.5 |
Showing 18