Login Request a demo
LO
Vendor
Lollms
4 products with CVEs on record
68
CVEs
0
On KEV
0
New 30D
Products
LW
Lollms Web UI
Lollms
9.8
46 CVEs0 on KEV0 new
LO
Lollms
Lollms
9.8
12 CVEs0 on KEV0 new
LO
Lollms-webui
Lollms
9.8
9 CVEs0 on KEV0 new
LO
Lord OF Large Language Models
Lollms
9.0
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-12228
LO
Lollms
Lollms
5.4
0%
Jul 18Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms
CVE-2026-1116
LO
Lollms
Lollms
6.1
0%
Apr 12Cross-site Scripting (XSS) in parisneo/lollms
CVE-2026-1115
LO
Lollms
Lollms
9.6
1%
Apr 10Stored XSS in parisneo/lollms
CVE-2026-1114
LO
Lollms
Lollms
9.8
1%
Apr 7Improper Access Control via Weak JWT Token in parisneo/lollms
CVE-2026-0558
LO
Lollms
Lollms
9.8
2%
Mar 29Unauthenticated File Upload in parisneo/lollms
CVE-2026-0560
LO
Lollms
Lollms
7.5
2%
Mar 29Server-Side Request Forgery (SSRF) in parisneo/lollms
CVE-2026-0562
LO
Lollms
Lollms
8.3
0%
Mar 29Insecure Direct Object Reference (IDOR) in parisneo/lollms
CVE-2026-33340
LW
Lollms Web UI
Lollms
9.1
22%
Mar 24LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint
CVE-2024-12766
LW
Lollms Web UI
Lollms
7.5
1%
Mar 20SSRF in parisneo/lollms-webui
CVE-2024-8736
LW
Lollms Web UI
Lollms
6.5
0%
Mar 20Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui
CVE-2024-8898
LW
Lollms Web UI
Lollms
9.8
1%
Mar 20Path Traversal in parisneo/lollms-webui
CVE-2025-1451
LW
Lollms Web UI
Lollms
7.5
1%
Mar 20Insufficient Patch Leading to DoS in parisneo/lollms-webui
CVE-2024-6986
LW
Lollms Web UI
Lollms
5.4
0%
Mar 20Cross-site Scripting (XSS) in parisneo/lollms-webui
CVE-2024-10019
LW
Lollms Web UI
Lollms
6.7
1%
Mar 20Path Traversal and OS Command Injection in parisneo/lollms-webui
CVE-2024-9920
LW
Lollms Web UI
Lollms
8.8
1%
Mar 20Unrestricted File Upload and Execution in parisneo/lollms-webui
CVE-2024-9919
LW
Lollms Web UI
Lollms
8.4
0%
Mar 20Missing Authentication Check in parisneo/lollms-webui
CVE-2024-7058
LW
Lollms Web UI
Lollms
4.4
0%
Mar 20Relative Path Traversal in parisneo/lollms-webui
CVE-2024-10047
LW
Lollms Web UI
Lollms
5.3
1%
Mar 20Directory Listing Vulnerability in parisneo/lollms-webui
CVE-2024-8581
LW
Lollms Web UI
Lollms
9.1
1%
Mar 20Path Traversal in parisneo/lollms-webui
CVE-2024-5125
LO
Lollms-webui
Lollms
7.3
0%
Nov 14XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui
CVE-2024-6673
LW
Lollms Web UI
Lollms
6.5
0%
Oct 29CSRF Vulnerability in parisneo/lollms-webui
CVE-2024-6581
LO
Lord OF Large Language Models
Lollms
9.0
1%
Oct 29Remote Code Execution due to Stored XSS in parisneo/lollms
CVE-2024-6674
LW
Lollms Web UI
Lollms
7.1
0%
Oct 29Data Leak through CORS Misconfiguration in parisneo/lollms-webui
CVE-2024-6959
LW
Lollms Web UI
Lollms
7.1
0%
Oct 13Denial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webui
CVE-2024-6985
LO
Lollms
Lollms
4.4
0%
Oct 11Path Traversal in api open_personality_folder in parisneo/lollms-webui
CVE-2024-6971
LO
Lollms-webui
Lollms
4.4
0%
Oct 11Path Traversal in parisneo/lollms-webui
CVE-2024-6394
LW
Lollms Web UI
Lollms
7.5
1%
Sep 30Local File Inclusion in parisneo/lollms-webui
CVE-2024-6040
LW
Lollms Web UI
Lollms
8.8
0%
Aug 1Missing client_id in parisneo/lollms-webui
CVE-2024-4897
LW
Lollms Web UI
Lollms
8.4
0%
Jul 2Remote Code Execution in parisneo/lollms-webui
CVE-2024-5933
LW
Lollms Web UI
Lollms
5.4
0%
Jun 27Cross-site Scripting (XSS) in parisneo/lollms-webui
CVE-2024-6250
LW
Lollms Web UI
Lollms
7.5
2%
Jun 27Absolute Path Traversal in parisneo/lollms-webui
CVE-2024-4498
LW
Lollms Web UI
Lollms
7.7
0%
Jun 25Path Traversal and RFI Vulnerability in parisneo/lollms-webui
CVE-2024-4839
LO
Lollms-webui
Lollms
3.3
0%
Jun 24CSRF in Servers Configurations in parisneo/lollms-webui
CVE-2024-4499
LO
Lollms
Lollms
6.3
0%
Jun 24CSRF Vulnerability in parisneo/lollms XTTS Server
CVE-2024-3121
LO
Lollms
Lollms
3.3
0%
Jun 24Remote Code Execution in create_conda_env function in parisneo/lollms
CVE-2024-4841
LO
Lollms-webui
Lollms
3.3
1%
Jun 23Path Traversal in parisneo/lollms-webui
CVE-2024-4403
LO
Lollms-webui
Lollms
8.8
0%
Jun 10CSRF in restart_program in parisneo/lollms-webui
CVE-2024-2359
LW
Lollms Web UI
Lollms
9.8
1%
Jun 6Improper Neutralization of Special Elements used in an OS Command in parisneo/lollms-webui
CVE-2024-2360
LW
Lollms Web UI
Lollms
9.8
2%
Jun 6Path Traversal leading to Remote Code Execution in parisneo/lollms-webui
CVE-2024-3429
LO
Lollms
Lollms
9.8
28%
Jun 6Path Traversal in parisneo/lollms
CVE-2024-3322
LW
Lollms Web UI
Lollms
9.8
1%
Jun 6Path Traversal in parisneo/lollms-webui
CVE-2024-1873
LW
Lollms Web UI
Lollms
9.1
13%
Jun 6Path Traversal and Denial of Service in parisneo/lollms-webui
CVE-2024-2288
LW
Lollms Web UI
Lollms
8.3
0%
Jun 6CSRF File Upload Vulnerability in parisneo/lollms-webui
CVE-2024-4320
LW
Lollms Web UI
Lollms
9.8
34%
Jun 6Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui
CVE-2024-4881
LO
Lollms
Lollms
7.5
1%
Jun 6Path Traversal in parisneo/lollms
CVE-2024-2624
LW
Lollms Web UI
Lollms
9.8
1%
Jun 6Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui
CVE-2024-2548
LW
Lollms Web UI
Lollms
7.5
1%
Jun 6Path Traversal in parisneo/lollms-webui
CVE-2024-2362
LW
Lollms Web UI
Lollms
9.1
1%
Jun 6Path Traversal in parisneo/lollms-webui
CVE-2024-5482
LW
Lollms Web UI
Lollms
9.8
1%
Jun 6SSRF in add_webpage endpoint in parisneo/lollms-webui
CVE-2024-2178
LW
Lollms Web UI
Lollms
7.5
1%
Jun 2Path Traversal Vulnerability in parisneo/lollms-webui
CVE-2024-4330
LW
Lollms Web UI
Lollms
3.3
0%
May 30Path Traversal in parisneo/lollms-webui
CVE-2024-4267
LO
Lollms-webui
Lollms
9.8
1%
May 22Remote Code Execution in parisneo/lollms-webui
CVE-2024-2361
LW
Lollms Web UI
Lollms
9.6
1%
May 16Arbitrary Upload & Read via Path Traversal in parisneo/lollms-webui
CVE-2024-2366
LW
Lollms Web UI
Lollms
9.0
1%
May 16Remote Code Execution in parisneo/lollms-webui
CVE-2024-3435
LW
Lollms Web UI
Lollms
8.4
1%
May 16Path Traversal in parisneo/lollms-webui
CVE-2024-3126
LW
Lollms Web UI
Lollms
8.4
1%
May 16Command Injection in parisneo/lollms-webui
CVE-2024-4326
LW
Lollms Web UI
Lollms
9.8
1%
May 16Remote Code Execution via `/apply_settings` and `/execute_code` in parisneo/lollms-webui
CVE-2024-4322
LW
Lollms Web UI
Lollms
7.5
31%
May 16Path Traversal in parisneo/lollms-webui
CVE-2024-2358
LW
Lollms Web UI
Lollms
9.8
1%
May 16Path Traversal leading to Remote Code Execution in parisneo/lollms-webui
CVE-2024-2299
LW
Lollms Web UI
Lollms
6.1
0%
May 12Stored Cross-Site Scripting (XSS) via Profile Picture Upload in parisneo/lollms-webui