LO
Product
lollms-webui
42
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 17Medium 4Low 3
Watch
Add lollms-webui to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-2359 | 9.8 | Jun 6 | Improper Neutralization of Special Elements used in an OS Command in parisneo/lollms-webui Affected: 0 |
| CVE-2024-2360 | 9.8 | Jun 6 | Path Traversal leading to Remote Code Execution in parisneo/lollms-webui Affected: 0 |
| CVE-2024-3429 | 9.8 | Jun 6 | Path Traversal in parisneo/lollms Affected: before 9.6 |
| CVE-2024-3322 | 9.8 | Jun 6 | Path Traversal in parisneo/lollms-webui Affected: before 9.5 |
| CVE-2024-2624 | 9.8 | Jun 6 | Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui Affected: before 9.4 |
| CVE-2024-5482 | 9.8 | Jun 6 | SSRF in add_webpage endpoint in parisneo/lollms-webui Affected: 0 |
| CVE-2024-4267 | 9.8 | May 22 | Remote Code Execution in parisneo/lollms-webui Affected: 9.5 |
| CVE-2024-4078 | 9.8 | May 16 | Arbitrary Code Execution in parisneo/lollms Affected: 1.4.6 |
| CVE-2024-4326 | 9.8 | May 16 | Remote Code Execution via `/apply_settings` and `/execute_code` in parisneo/lollms-webui Affected: before 9.5 |
| CVE-2024-2358 | 9.8 | May 16 | Path Traversal leading to Remote Code Execution in parisneo/lollms-webui Affected: All versions, or not specified |
| CVE-2024-1601 | 9.8 | Apr 16 | SQL Injection in parisneo/lollms-webui Affected: 9.0 before 9.2 |
| CVE-2024-1520 | 9.8 | Apr 10 | OS Command Injection in parisneo/lollms-webui Affected: 9.0 |
| CVE-2024-1511 | 9.8 | Apr 10 | Path Traversal Vulnerability in parisneo/lollms-webui Affected: 9.0 before 9.5 |
| CVE-2024-2361 | 9.6 | May 16 | Arbitrary Upload & Read via Path Traversal in parisneo/lollms-webui Affected: All versions, or not specified |
| CVE-2024-1600 | 9.3 | Apr 10 | Local File Inclusion in parisneo/lollms-webui Affected: before 9.5 |
| CVE-2026-33340 | 9.1 | Mar 24 | LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint Affected: <= 8c5dcef63d847bb3d027ec74915d8fe4afd3014e |
| CVE-2024-2362 | 9.1 | Jun 6 | Path Traversal in parisneo/lollms-webui Affected: 9.3 |
| CVE-2024-2366 | 9.0 | May 16 | Remote Code Execution in parisneo/lollms-webui Affected: All versions, or not specified |
Showing 18