Login Request a demo
PA
Vendor
parisneo
4 products with CVEs on record
14
CVEs
0
On KEV
0
New 30D
Products
PA
parisneo/lollms
parisneo
9.8
11 CVEs0 on KEV0 new
LW
Lollms Web UI
Parisneo
8.1
1 CVEs0 on KEV0 new
LO
lollms-webui
ParisNeo
9.1
1 CVEs0 on KEV0 new
PA
parisneo/lollms-webui
parisneo
9.6
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-10595
PA
parisneo/lollms
parisneo
7.5
1%
Aug 9Path Traversal Vulnerability in parisneo/lollms
CVE-2026-12228
PA
parisneo/lollms
parisneo
5.4
0%
Jul 18Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms
CVE-2026-1116
PA
parisneo/lollms
parisneo
6.1
0%
Apr 12Cross-site Scripting (XSS) in parisneo/lollms
CVE-2026-1115
PA
parisneo/lollms
parisneo
9.6
1%
Apr 10Stored XSS in parisneo/lollms
CVE-2026-1163
PA
parisneo/lollms
parisneo
4.1
0%
Apr 8Insufficient Session Expiration in parisneo/lollms
CVE-2026-1114
PA
parisneo/lollms
parisneo
9.8
1%
Apr 7Improper Access Control via Weak JWT Token in parisneo/lollms
CVE-2026-0558
PA
parisneo/lollms
parisneo
9.8
2%
Mar 29Unauthenticated File Upload in parisneo/lollms
CVE-2026-0560
PA
parisneo/lollms
parisneo
7.5
2%
Mar 29Server-Side Request Forgery (SSRF) in parisneo/lollms
CVE-2026-0562
PA
parisneo/lollms
parisneo
8.3
0%
Mar 29Insecure Direct Object Reference (IDOR) in parisneo/lollms
CVE-2026-33340
LO
lollms-webui
ParisNeo
9.1
22%
Mar 24LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint
CVE-2024-2356
PA
parisneo/lollms-webui
parisneo
9.6
1%
Feb 2Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webui
CVE-2026-1117
PA
parisneo/lollms
parisneo
8.2
1%
Feb 2Improper Access Control in parisneo/lollms
CVE-2025-6386
PA
parisneo/lollms
parisneo
7.5
0%
Jul 7Timing Attack Vulnerability in parisneo/lollms
CVE-2024-4328
LW
Lollms Web UI
Parisneo
8.1
0%
Jun 10A Cross-Site Request Forgery (CSRF) vulnerability exists in the clear_personality_files_list function of the parisneo/lollms-webui v9.6