Login Request a demo
LW
Product
Lollms Web UI
by Lollms · last CVE Mar 24, 2026
46
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities46In the news0Timeline
Severity mix
Critical 18High 18Medium 9Low 1
Severity
All severities46Critical18High18Medium9Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Lollms Web UI to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-9920
8.8
1%
Mar 20
Unrestricted File Upload and Execution in parisneo/lollms-webui
Affected: 12
CVE-2024-6040
8.8
0%
Aug 1
Missing client_id in parisneo/lollms-webui
Affected: 9.8
CVE-2024-1522
8.8
0%
Mar 30
Cross-Site Request Forgery (CSRF) Leading to Remote Code Execution in parisneo/lollms-webui
Affected: 9.0 through 9.2
CVE-2024-9919
8.4
0%
Mar 20
Missing Authentication Check in parisneo/lollms-webui
Affected: 13
CVE-2024-4897
8.4
0%
Jul 2
Remote Code Execution in parisneo/lollms-webui
Affected: before 9.8
CVE-2024-3435
8.4
1%
May 16
Path Traversal in parisneo/lollms-webui
Affected: before 9.5
CVE-2024-3126
8.4
1%
May 16
Command Injection in parisneo/lollms-webui
Affected: before 9.5
CVE-2024-2288
8.3
0%
Jun 6
CSRF File Upload Vulnerability in parisneo/lollms-webui
Affected: before 9.3
CVE-2024-4498
7.7
0%
Jun 25
Path Traversal and RFI Vulnerability in parisneo/lollms-webui
Affected: 9.7
CVE-2024-12766
7.5
1%
Mar 20
SSRF in parisneo/lollms-webui
Affected: 13
CVE-2025-1451
7.5
1%
Mar 20
Insufficient Patch Leading to DoS in parisneo/lollms-webui
Affected: 13
CVE-2024-6394
7.5
1%
Sep 30
Local File Inclusion in parisneo/lollms-webui
Affected: 9.8
CVE-2024-6250
7.5
2%
Jun 27
Absolute Path Traversal in parisneo/lollms-webui
Affected: 9.6
CVE-2024-2548
7.5
1%
Jun 6
Path Traversal in parisneo/lollms-webui
Affected: before 9.5
CVE-2024-2178
7.5
1%
Jun 2
Path Traversal Vulnerability in parisneo/lollms-webui
Affected: before 9.4
CVE-2024-4322
7.5
31%
May 16
Path Traversal in parisneo/lollms-webui
Affected: before 9.8
CVE-2024-6674
7.1
0%
Oct 29
Data Leak through CORS Misconfiguration in parisneo/lollms-webui
Affected: before 10
CVE-2024-6959
7.1
0%
Oct 13
Denial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webui
Affected: 9.8
Showing 18