PA
Product
parisneo/lollms-webui
53
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 20High 22Medium 8Low 3
Watch
Add parisneo/lollms-webui to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-10019 | 6.7 | Mar 20 | Path Traversal and OS Command Injection in parisneo/lollms-webui Affected: through latest |
| CVE-2024-8736 | 6.5 | Mar 20 | Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui Affected: through latest |
| CVE-2024-6673 | 6.5 | Oct 29 | CSRF Vulnerability in parisneo/lollms-webui Affected: before 9.9 |
| CVE-2024-2299 | 6.1 | May 12 | Stored Cross-Site Scripting (XSS) via Profile Picture Upload in parisneo/lollms-webui Affected: through latest |
| CVE-2024-1602 | 6.1 | Apr 10 | Stored XSS leading to RCE in parisneo/lollms-webui Affected: through latest |
| CVE-2024-6986 | 5.4 | Mar 20 | Cross-site Scripting (XSS) in parisneo/lollms-webui Affected: through latest |
| CVE-2024-5933 | 5.4 | Jun 27 | Cross-site Scripting (XSS) in parisneo/lollms-webui Affected: through latest |
| CVE-2024-10047 | 5.3 | Mar 20 | Directory Listing Vulnerability in parisneo/lollms-webui Affected: through latest |
Showing 8