PA
Vendor
parisneo
5 products with CVEs on record
136
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-10595
PA
parisneo/lollms
parisneo
7.5
1%
Aug 9Path Traversal Vulnerability in parisneo/lollms
CVE-2026-12228
PA
parisneo/lollms
parisneo
5.4
0%
Jul 18Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms
CVE-2026-1116
PA
parisneo/lollms
parisneo
6.1
0%
Apr 12Cross-site Scripting (XSS) in parisneo/lollms
CVE-2026-1115
PA
parisneo/lollms
parisneo
9.6
1%
Apr 10Stored XSS in parisneo/lollms
CVE-2026-1163
PA
parisneo/lollms
parisneo
4.1
0%
Apr 8Insufficient Session Expiration in parisneo/lollms
CVE-2026-1114
PA
parisneo/lollms
parisneo
9.8
1%
Apr 7Improper Access Control via Weak JWT Token in parisneo/lollms
CVE-2026-0558
PA
parisneo/lollms
parisneo
9.8
2%
Mar 29Unauthenticated File Upload in parisneo/lollms
CVE-2026-0560
PA
parisneo/lollms
parisneo
7.5
2%
Mar 29Server-Side Request Forgery (SSRF) in parisneo/lollms
CVE-2026-0562
PA
parisneo/lollms
parisneo
8.3
0%
Mar 29Insecure Direct Object Reference (IDOR) in parisneo/lollms
CVE-2026-33340
LO
lollms-webui
ParisNeo
9.1
22%
Mar 24LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint
CVE-2024-2356
PA
parisneo/lollms-webui
parisneo
9.6
1%
Feb 2Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webui
CVE-2026-1117
PA
parisneo/lollms
parisneo
8.2
1%
Feb 2Improper Access Control in parisneo/lollms
CVE-2025-6386
PA
parisneo/lollms
parisneo
7.5
0%
Jul 7Timing Attack Vulnerability in parisneo/lollms
CVE-2024-12766
PA
parisneo/lollms-webui
parisneo
7.5
1%
Mar 20SSRF in parisneo/lollms-webui
CVE-2024-8736
PA
parisneo/lollms-webui
parisneo
6.5
0%
Mar 20Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui
CVE-2024-8898
PA
parisneo/lollms-webui
parisneo
9.8
1%
Mar 20Path Traversal in parisneo/lollms-webui
CVE-2025-1451
PA
parisneo/lollms-webui
parisneo
7.5
1%
Mar 20Insufficient Patch Leading to DoS in parisneo/lollms-webui
CVE-2024-6986
PA
parisneo/lollms-webui
parisneo
5.4
0%
Mar 20Cross-site Scripting (XSS) in parisneo/lollms-webui
CVE-2024-6982
PA
parisneo/lollms
parisneo
8.4
0%
Mar 20Remote Code Execution in Calculate Function in parisneo/lollms
CVE-2024-10019
PA
parisneo/lollms-webui
parisneo
6.7
1%
Mar 20Path Traversal and OS Command Injection in parisneo/lollms-webui
CVE-2024-9920
PA
parisneo/lollms-webui
parisneo
8.8
1%
Mar 20Unrestricted File Upload and Execution in parisneo/lollms-webui
CVE-2024-9919
PA
parisneo/lollms-webui
parisneo
8.4
0%
Mar 20Missing Authentication Check in parisneo/lollms-webui
CVE-2024-7058
PA
parisneo/lollms
parisneo
4.4
0%
Mar 20Relative Path Traversal in parisneo/lollms-webui
CVE-2024-10047
PA
parisneo/lollms-webui
parisneo
5.3
1%
Mar 20Directory Listing Vulnerability in parisneo/lollms-webui
CVE-2024-9597
PA
parisneo/lollms
parisneo
7.1
0%
Mar 20Path Traversal in parisneo/lollms
CVE-2024-8581
PA
parisneo/lollms-webui
parisneo
9.1
1%
Mar 20Path Traversal in parisneo/lollms-webui
CVE-2024-11302
PA
parisneo/lollms
parisneo
8.0
0%
Mar 20Missing check_access in lollms_binding_infos in parisneo/lollms
CVE-2024-5125
PA
parisneo/lollms-webui
parisneo
7.3
0%
Nov 14XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui
CVE-2024-6673
PA
parisneo/lollms-webui
parisneo
6.5
0%
Oct 29CSRF Vulnerability in parisneo/lollms-webui
CVE-2024-6581
PA
parisneo/lollms
parisneo
9.0
1%
Oct 29Remote Code Execution due to Stored XSS in parisneo/lollms
CVE-2024-6674
PA
parisneo/lollms-webui
parisneo
7.1
0%
Oct 29Data Leak through CORS Misconfiguration in parisneo/lollms-webui
CVE-2024-6959
PA
parisneo/lollms-webui
parisneo
7.1
0%
Oct 13Denial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webui
CVE-2024-6985
PA
parisneo/lollms
parisneo
4.4
0%
Oct 11Path Traversal in api open_personality_folder in parisneo/lollms-webui
CVE-2024-6971
PA
parisneo/lollms
parisneo
4.4
0%
Oct 11Path Traversal in parisneo/lollms-webui
CVE-2024-6394
PA
parisneo/lollms-webui
parisneo
7.5
1%
Sep 30Local File Inclusion in parisneo/lollms-webui
CVE-2024-6040
PA
parisneo/lollms
parisneo
8.8
0%
Aug 1Missing client_id in parisneo/lollms-webui
CVE-2024-6281
PA
parisneo/lollms
parisneo
7.3
0%
Jul 20Path Traversal in parisneo/lollms
CVE-2024-4897
PA
parisneo/lollms-webui
parisneo
8.4
0%
Jul 2Remote Code Execution in parisneo/lollms-webui
CVE-2024-5933
PA
parisneo/lollms-webui
parisneo
5.4
0%
Jun 27Cross-site Scripting (XSS) in parisneo/lollms-webui
CVE-2024-6139
PA
parisneo/lollms
parisneo
7.3
1%
Jun 27Path Traversal in parisneo/lollms
CVE-2024-5824
PA
parisneo/lollms
parisneo
7.4
0%
Jun 27Path Traversal in parisneo/lollms
CVE-2024-6085
PA
parisneo/lollms
parisneo
8.6
1%
Jun 27Path Traversal in parisneo/lollms
CVE-2024-6250
PA
parisneo/lollms-webui
parisneo
7.5
2%
Jun 27Absolute Path Traversal in parisneo/lollms-webui
CVE-2024-4498
PA
parisneo/lollms-webui
parisneo
7.7
0%
Jun 25Path Traversal and RFI Vulnerability in parisneo/lollms-webui
CVE-2024-4839
PA
parisneo/lollms-webui
parisneo
3.3
0%
Jun 24CSRF in Servers Configurations in parisneo/lollms-webui
CVE-2024-4499
PA
parisneo/lollms
parisneo
6.3
0%
Jun 24CSRF Vulnerability in parisneo/lollms XTTS Server
CVE-2024-3121
PA
parisneo/lollms
parisneo
3.3
0%
Jun 24Remote Code Execution in create_conda_env function in parisneo/lollms
CVE-2024-4841
PA
parisneo/lollms-webui
parisneo
3.3
1%
Jun 23Path Traversal in parisneo/lollms-webui
CVE-2024-5443
PA
parisneo/lollms
parisneo
9.8
1%
Jun 22Remote Code Execution via Path Traversal in parisneo/lollms
CVE-2024-4315
PA
parisneo/lollms
parisneo
9.1
1%
Jun 12LFI Vulnerability due to Lack of Path Sanitization in parisneo/lollms
CVE-2024-4403
PA
parisneo/lollms-webui
parisneo
8.8
0%
Jun 10CSRF in restart_program in parisneo/lollms-webui
CVE-2024-4328
PA
parisneo/lollms-webui
parisneo
8.1
0%
Jun 10CSRF in clear_personality_files_list in parisneo/lollms-webui
CVE-2024-2359
PA
parisneo/lollms-webui
parisneo
9.8
1%
Jun 6Improper Neutralization of Special Elements used in an OS Command in parisneo/lollms-webui
CVE-2024-2360
PA
parisneo/lollms-webui
parisneo
9.8
2%
Jun 6Path Traversal leading to Remote Code Execution in parisneo/lollms-webui
CVE-2024-3429
PA
parisneo/lollms
parisneo
9.8
28%
Jun 6Path Traversal in parisneo/lollms
CVE-2024-3322
PA
parisneo/lollms-webui
parisneo
9.8
1%
Jun 6Path Traversal in parisneo/lollms-webui
CVE-2024-1873
PA
parisneo/lollms-webui
parisneo
9.1
13%
Jun 6Path Traversal and Denial of Service in parisneo/lollms-webui
CVE-2024-2288
PA
parisneo/lollms-webui
parisneo
8.3
0%
Jun 6CSRF File Upload Vulnerability in parisneo/lollms-webui
CVE-2024-4320
PA
parisneo/lollms-webui
parisneo
9.8
34%
Jun 6Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui
CVE-2024-4881
PA
parisneo/lollms
parisneo
7.5
1%
Jun 6Path Traversal in parisneo/lollms