Latest vulnerabilities for vendor "lollms"

7.1

First published (updated )

CVE-2024-8736

parisneo lollmsPath Traversal in parisneo/lollms-webui

9.8

First published (updated )

CVE-2024-8898

parisneo lollmsInsufficient Patch Leading to DoS in parisneo/lollms-webui

7.5

First published (updated )

CVE-2025-1451

parisneo lollmsUnrestricted File Upload and Execution in parisneo/lollms-webui

8.8

First published (updated )

CVE-2024-9920

Parisneo LollmsCSRF Vulnerability in parisneo/lollms-webui

6.5

First published (updated )

CVE-2024-6673

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

pip/lollmsRemote Code Execution due to Stored XSS in parisneo/lollms

9

First published (updated )

CVE-2024-6581

Parisneo LollmsData Leak through CORS Misconfiguration in parisneo/lollms-webui

8.1

First published (updated )

CVE-2024-6674

Parisneo LollmsDenial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webui

7.1

First published (updated )

CVE-2024-6959

pip/lollmsPath Traversal in api open_personality_folder in parisneo/lollms-webui

4.4

First published (updated )

CVE-2024-6985

Parisneo LollmsCross-site Scripting (XSS) in parisneo/lollms-webui

6.1

EPSS

0.04%

First published (updated )

CVE-2024-5933

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Parisneo Lollms Web UiCSRF Vulnerability in parisneo/lollms XTTS Server

7.6

First published (updated )

CVE-2024-4499

pip/lollmsRemote Code Execution in create_conda_env function in parisneo/lollms

6.8

First published (updated )

CVE-2024-3121

Parisneo LollmsImproper Neutralization of Special Elements used in an OS Command in parisneo/lollms-webui

9.8

First published (updated )

CVE-2024-2359

Parisneo LollmsPath Traversal leading to Remote Code Execution in parisneo/lollms-webui

9.8

First published (updated )

CVE-2024-2360

pip/lollmsPath Traversal in parisneo/lollms

9.8

First published (updated )

CVE-2024-3429

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Parisneo LollmsPath Traversal in parisneo/lollms-webui

9.8

First published (updated )

CVE-2024-3322

Parisneo LollmsPath Traversal and Denial of Service in parisneo/lollms-webui

9.1

First published (updated )

CVE-2024-1873

Parisneo LollmsCSRF File Upload Vulnerability in parisneo/lollms-webui

8.3

First published (updated )

CVE-2024-2288

Parisneo LollmsRemote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui

9.8

EPSS

0.04%

First published (updated )

CVE-2024-4320

pip/lollmsPath Traversal in parisneo/lollms

7.5

EPSS

0.04%

First published (updated )

CVE-2024-4881

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Parisneo LollmsPath Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui

9.8

First published (updated )

CVE-2024-2624

Parisneo LollmsPath Traversal in parisneo/lollms-webui

7.5

First published (updated )

CVE-2024-2548

LollmsPath Traversal in parisneo/lollms-webui

9.1

First published (updated )

CVE-2024-2362

Parisneo LollmsSSRF in add_webpage endpoint in parisneo/lollms-webui