Login Request a demo
LO
Product
Lollms-webui
by Lollms · last CVE Nov 14, 2024
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 4Medium 1Low 2
Severity
All severities9Critical2High4Medium1Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Lollms-webui to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-4267
9.8
1%
May 22
A remote code execution (RCE) vulnerability exists in the parisneo/lollms-webui, specifically within the 'open_file' module, version 9.5
Affected: 9.5
CVE-2024-1601
9.8
40%
Apr 16
An SQL injection vulnerability exists in the `delete_discussion()` function of the parisneo/lollms-webui application, allowing an attacker to delete all discussions and message…
Affected: 9.0; 9.1
CVE-2024-4403
8.8
0%
Jun 10
A Cross-Site Request Forgery (CSRF) vulnerability exists in the restart_program function of the parisneo/lollms-webui v9.6
Affected: 9.6
CVE-2024-1646
8.2
1%
Apr 16
parisneo/lollms-webui is vulnerable to authentication bypass due to insufficient protection over sensitive endpoints
Affected: before 9.3
CVE-2024-1569
7.5
1%
Apr 16
parisneo/lollms-webui is vulnerable to a denial of service (DoS) attack due to uncontrolled resource consumption
Affected: 9.1
CVE-2024-5125
7.3
0%
Nov 14
XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui
Affected: 9.6
CVE-2024-6971
4.4
0%
Oct 11
A path traversal vulnerability exists in the parisneo/lollms-webui repository, specifically in the `lollms_file_system.py` file
Affected: 9.8
CVE-2024-4839
3.3
0%
Jun 24
A Cross-Site Request Forgery (CSRF) vulnerability exists in the 'Servers Configurations' function of the parisneo/lollms-webui, versions 9.6 to the latest
Affected: 9.6
CVE-2024-4841
3.3
1%
Jun 23
A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'add_reference_to_local_mode' function due to the lack of input sanitization
Affected: 9.6
Showing 9