PA
Vendor
parisneo
136
CVEs
0
On KEV
0
New 30D
Products
PA9.8
parisneo/lollms-webui
parisneo
53 CVEs0 on KEV0 new
LO9.8
lollms-webui
ParisNeo
42 CVEs0 on KEV0 new
PA9.8
parisneo/lollms
parisneo
30 CVEs0 on KEV0 new
LO9.8
Lollms
Parisneo
10 CVEs0 on KEV0 new
LW8.1
Lollms Web UI
Parisneo
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-10595 | PA parisneo/lollms parisneo | 7.5 | Aug 9 | Path Traversal Vulnerability in parisneo/lollms |
| CVE-2026-12228 | PA parisneo/lollms parisneo | 5.4 | Jul 18 | Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms |
| CVE-2026-1116 | PA parisneo/lollms parisneo | 6.1 | Apr 12 | Cross-site Scripting (XSS) in parisneo/lollms |
| CVE-2026-1115 | PA parisneo/lollms parisneo | 9.6 | Apr 10 | Stored XSS in parisneo/lollms |
| CVE-2026-1163 | PA parisneo/lollms parisneo | 4.1 | Apr 8 | Insufficient Session Expiration in parisneo/lollms |
| CVE-2026-1114 | PA parisneo/lollms parisneo | 9.8 | Apr 7 | Improper Access Control via Weak JWT Token in parisneo/lollms |
| CVE-2026-0558 | PA parisneo/lollms parisneo | 9.8 | Mar 29 | Unauthenticated File Upload in parisneo/lollms |
| CVE-2026-0560 | PA parisneo/lollms parisneo | 7.5 | Mar 29 | Server-Side Request Forgery (SSRF) in parisneo/lollms |
| CVE-2026-0562 | PA parisneo/lollms parisneo | 8.3 | Mar 29 | Insecure Direct Object Reference (IDOR) in parisneo/lollms |
| CVE-2026-33340 | LO lollms-webui ParisNeo | 9.1 | Mar 24 | LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint |
| CVE-2024-2356 | PA parisneo/lollms-webui parisneo | 9.6 | Feb 2 | Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webui |
| CVE-2026-1117 | PA parisneo/lollms parisneo | 8.2 | Feb 2 | Improper Access Control in parisneo/lollms |
| CVE-2025-6386 | PA parisneo/lollms parisneo | 7.5 | Jul 7 | Timing Attack Vulnerability in parisneo/lollms |
| CVE-2024-12766 | PA parisneo/lollms-webui parisneo | 7.5 | Mar 20 | SSRF in parisneo/lollms-webui |
| CVE-2024-8736 | PA parisneo/lollms-webui parisneo | 6.5 | Mar 20 | Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui |
| CVE-2024-8898 | PA parisneo/lollms-webui parisneo | 9.8 | Mar 20 | Path Traversal in parisneo/lollms-webui |
| CVE-2025-1451 | PA parisneo/lollms-webui parisneo | 7.5 | Mar 20 | Insufficient Patch Leading to DoS in parisneo/lollms-webui |
| CVE-2024-6986 | PA parisneo/lollms-webui parisneo | 5.4 | Mar 20 | Cross-site Scripting (XSS) in parisneo/lollms-webui |
| CVE-2024-6982 | PA parisneo/lollms parisneo | 8.4 | Mar 20 | Remote Code Execution in Calculate Function in parisneo/lollms |
| CVE-2024-10019 | PA parisneo/lollms-webui parisneo | 6.7 | Mar 20 | Path Traversal and OS Command Injection in parisneo/lollms-webui |
| CVE-2024-9920 | PA parisneo/lollms-webui parisneo | 8.8 | Mar 20 | Unrestricted File Upload and Execution in parisneo/lollms-webui |
| CVE-2024-9919 | PA parisneo/lollms-webui parisneo | 8.4 | Mar 20 | Missing Authentication Check in parisneo/lollms-webui |
| CVE-2024-7058 | PA parisneo/lollms parisneo | 4.4 | Mar 20 | Relative Path Traversal in parisneo/lollms-webui |
| CVE-2024-10047 | PA parisneo/lollms-webui parisneo | 5.3 | Mar 20 | Directory Listing Vulnerability in parisneo/lollms-webui |
| CVE-2024-9597 | PA parisneo/lollms parisneo | 7.1 | Mar 20 | Path Traversal in parisneo/lollms |
| CVE-2024-8581 | PA parisneo/lollms-webui parisneo | 9.1 | Mar 20 | Path Traversal in parisneo/lollms-webui |
| CVE-2024-11302 | PA parisneo/lollms parisneo | 8.0 | Mar 20 | Missing check_access in lollms_binding_infos in parisneo/lollms |
| CVE-2024-5125 | PA parisneo/lollms-webui parisneo | 7.3 | Nov 14 | XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui |
| CVE-2024-6673 | PA parisneo/lollms-webui parisneo | 6.5 | Oct 29 | CSRF Vulnerability in parisneo/lollms-webui |
| CVE-2024-6581 | PA parisneo/lollms parisneo | 9.0 | Oct 29 | Remote Code Execution due to Stored XSS in parisneo/lollms |
| CVE-2024-6674 | PA parisneo/lollms-webui parisneo | 7.1 | Oct 29 | Data Leak through CORS Misconfiguration in parisneo/lollms-webui |
| CVE-2024-6959 | PA parisneo/lollms-webui parisneo | 7.1 | Oct 13 | Denial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webui |
| CVE-2024-6985 | PA parisneo/lollms parisneo | 4.4 | Oct 11 | Path Traversal in api open_personality_folder in parisneo/lollms-webui |
| CVE-2024-6971 | PA parisneo/lollms parisneo | 4.4 | Oct 11 | Path Traversal in parisneo/lollms-webui |
| CVE-2024-6394 | PA parisneo/lollms-webui parisneo | 7.5 | Sep 30 | Local File Inclusion in parisneo/lollms-webui |
| CVE-2024-6040 | PA parisneo/lollms parisneo | 8.8 | Aug 1 | Missing client_id in parisneo/lollms-webui |
| CVE-2024-6281 | PA parisneo/lollms parisneo | 7.3 | Jul 20 | Path Traversal in parisneo/lollms |
| CVE-2024-4897 | PA parisneo/lollms-webui parisneo | 8.4 | Jul 2 | Remote Code Execution in parisneo/lollms-webui |
| CVE-2024-5933 | PA parisneo/lollms-webui parisneo | 5.4 | Jun 27 | Cross-site Scripting (XSS) in parisneo/lollms-webui |
| CVE-2024-6139 | PA parisneo/lollms parisneo | 7.3 | Jun 27 | Path Traversal in parisneo/lollms |
| CVE-2024-5824 | PA parisneo/lollms parisneo | 7.4 | Jun 27 | Path Traversal in parisneo/lollms |
| CVE-2024-6085 | PA parisneo/lollms parisneo | 8.6 | Jun 27 | Path Traversal in parisneo/lollms |
| CVE-2024-6250 | PA parisneo/lollms-webui parisneo | 7.5 | Jun 27 | Absolute Path Traversal in parisneo/lollms-webui |
| CVE-2024-4498 | PA parisneo/lollms-webui parisneo | 7.7 | Jun 25 | Path Traversal and RFI Vulnerability in parisneo/lollms-webui |
| CVE-2024-4839 | PA parisneo/lollms-webui parisneo | 3.3 | Jun 24 | CSRF in Servers Configurations in parisneo/lollms-webui |
| CVE-2024-4499 | PA parisneo/lollms parisneo | 6.3 | Jun 24 | CSRF Vulnerability in parisneo/lollms XTTS Server |
| CVE-2024-3121 | PA parisneo/lollms parisneo | 3.3 | Jun 24 | Remote Code Execution in create_conda_env function in parisneo/lollms |
| CVE-2024-4841 | PA parisneo/lollms-webui parisneo | 3.3 | Jun 23 | Path Traversal in parisneo/lollms-webui |
| CVE-2024-5443 | PA parisneo/lollms parisneo | 9.8 | Jun 22 | Remote Code Execution via Path Traversal in parisneo/lollms |
| CVE-2024-4315 | PA parisneo/lollms parisneo | 9.1 | Jun 12 | LFI Vulnerability due to Lack of Path Sanitization in parisneo/lollms |
| CVE-2024-4403 | PA parisneo/lollms-webui parisneo | 8.8 | Jun 10 | CSRF in restart_program in parisneo/lollms-webui |
| CVE-2024-4328 | PA parisneo/lollms-webui parisneo | 8.1 | Jun 10 | CSRF in clear_personality_files_list in parisneo/lollms-webui |
| CVE-2024-2359 | PA parisneo/lollms-webui parisneo | 9.8 | Jun 6 | Improper Neutralization of Special Elements used in an OS Command in parisneo/lollms-webui |
| CVE-2024-2360 | PA parisneo/lollms-webui parisneo | 9.8 | Jun 6 | Path Traversal leading to Remote Code Execution in parisneo/lollms-webui |
| CVE-2024-3429 | PA parisneo/lollms parisneo | 9.8 | Jun 6 | Path Traversal in parisneo/lollms |
| CVE-2024-3322 | PA parisneo/lollms-webui parisneo | 9.8 | Jun 6 | Path Traversal in parisneo/lollms-webui |
| CVE-2024-1873 | PA parisneo/lollms-webui parisneo | 9.1 | Jun 6 | Path Traversal and Denial of Service in parisneo/lollms-webui |
| CVE-2024-2288 | PA parisneo/lollms-webui parisneo | 8.3 | Jun 6 | CSRF File Upload Vulnerability in parisneo/lollms-webui |
| CVE-2024-4320 | PA parisneo/lollms-webui parisneo | 9.8 | Jun 6 | Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui |
| CVE-2024-4881 | PA parisneo/lollms parisneo | 7.5 | Jun 6 | Path Traversal in parisneo/lollms |
