agentprime: parisneo-lollms-webui

agentprime: parisneo-lollms-webuiEvery new CVE for parisneo-lollms-webui.https://agentprime.io/CVE-2026-33340: LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpointhttps://agentprime.io/advisories/CVE-2026-33340/https://agentprime.io/advisories/CVE-2026-33340/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.22 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Mar 2026 15:58:35 GMTCVEcriticalCVE-2024-2356: Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-2356/https://agentprime.io/advisories/CVE-2024-2356/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Feb 2026 10:36:23 GMTCVEcriticalCVE-2024-12766: SSRF in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-12766/https://agentprime.io/advisories/CVE-2024-12766/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:11:20 GMTCVECVE-2024-8736: Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-8736/https://agentprime.io/advisories/CVE-2024-8736/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:11:17 GMTCVECVE-2024-8898: Path Traversal in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-8898/https://agentprime.io/advisories/CVE-2024-8898/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:10:58 GMTCVECVE-2025-1451: Insufficient Patch Leading to DoS in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2025-1451/https://agentprime.io/advisories/CVE-2025-1451/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:10:49 GMTCVECVE-2024-6986: Cross-site Scripting (XSS) in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-6986/https://agentprime.io/advisories/CVE-2024-6986/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:10:40 GMTCVECVE-2024-10019: Path Traversal and OS Command Injection in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-10019/https://agentprime.io/advisories/CVE-2024-10019/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:10:14 GMTCVECVE-2024-9920: Unrestricted File Upload and Execution in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-9920/https://agentprime.io/advisories/CVE-2024-9920/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:10:08 GMTCVECVE-2024-9919: Missing Authentication Check in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-9919/https://agentprime.io/advisories/CVE-2024-9919/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:09:56 GMTCVECVE-2024-10047: Directory Listing Vulnerability in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-10047/https://agentprime.io/advisories/CVE-2024-10047/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:09:35 GMTCVECVE-2024-8581: Path Traversal in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-8581/https://agentprime.io/advisories/CVE-2024-8581/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:09:25 GMTCVEcriticalCVE-2024-5125: XSS and Open Redirect via SVG File Upload in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-5125/https://agentprime.io/advisories/CVE-2024-5125/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Nov 2024 17:36:04 GMTCVECVE-2024-6673: CSRF Vulnerability in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-6673/https://agentprime.io/advisories/CVE-2024-6673/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Oct 2024 12:50:20 GMTCVECVE-2024-6674: Data Leak through CORS Misconfiguration in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-6674/https://agentprime.io/advisories/CVE-2024-6674/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Oct 2024 12:46:44 GMTCVECVE-2024-6959: Denial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-6959/https://agentprime.io/advisories/CVE-2024-6959/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 13 Oct 2024 12:28:19 GMTCVECVE-2024-6394: Local File Inclusion in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-6394/https://agentprime.io/advisories/CVE-2024-6394/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Sep 2024 08:09:10 GMTCVECVE-2024-4897: Remote Code Execution in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-4897/https://agentprime.io/advisories/CVE-2024-4897/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jul 2024 14:37:36 GMTCVECVE-2024-5933: Cross-site Scripting (XSS) in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-5933/https://agentprime.io/advisories/CVE-2024-5933/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Jun 2024 18:46:17 GMTCVECVE-2024-6250: Absolute Path Traversal in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-6250/https://agentprime.io/advisories/CVE-2024-6250/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Jun 2024 18:41:41 GMTCVECVE-2024-4498: Path Traversal and RFI Vulnerability in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-4498/https://agentprime.io/advisories/CVE-2024-4498/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 19:55:42 GMTCVECVE-2024-4839: CSRF in Servers Configurations in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-4839/https://agentprime.io/advisories/CVE-2024-4839/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Jun 2024 12:47:59 GMTCVECVE-2024-4841: Path Traversal in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-4841/https://agentprime.io/advisories/CVE-2024-4841/CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 23 Jun 2024 14:33:33 GMTCVECVE-2024-4403: CSRF in restart_program in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-4403/https://agentprime.io/advisories/CVE-2024-4403/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 14:43:21 GMTCVECVE-2024-4328: CSRF in clear_personality_files_list in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-4328/https://agentprime.io/advisories/CVE-2024-4328/CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 07:27:09 GMTCVECVE-2024-2359: Improper Neutralization of Special Elements used in an OS Command in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-2359/https://agentprime.io/advisories/CVE-2024-2359/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:55:40 GMTCVEcriticalCVE-2024-2360: Path Traversal leading to Remote Code Execution in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-2360/https://agentprime.io/advisories/CVE-2024-2360/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:55:02 GMTCVEcriticalCVE-2024-3322: Path Traversal in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-3322/https://agentprime.io/advisories/CVE-2024-3322/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:40:18 GMTCVECVE-2024-1873: Path Traversal and Denial of Service in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-1873/https://agentprime.io/advisories/CVE-2024-1873/CVSS 8.2 (High). Critical: CVSS score 8.2 (7.0 or more) and EPSS 0.13 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:40:04 GMTCVEcriticalCVE-2024-2288: CSRF File Upload Vulnerability in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-2288/https://agentprime.io/advisories/CVE-2024-2288/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:24:08 GMTCVECVE-2024-4320: Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-4320/https://agentprime.io/advisories/CVE-2024-4320/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.34 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:22:40 GMTCVEcriticalCVE-2024-2624: Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-2624/https://agentprime.io/advisories/CVE-2024-2624/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:11:44 GMTCVEcriticalCVE-2024-2548: Path Traversal in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-2548/https://agentprime.io/advisories/CVE-2024-2548/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:08:15 GMTCVECVE-2024-2362: Path Traversal in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-2362/https://agentprime.io/advisories/CVE-2024-2362/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:08:14 GMTCVEcriticalCVE-2024-5482: SSRF in add_webpage endpoint in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-5482/https://agentprime.io/advisories/CVE-2024-5482/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 17:56:52 GMTCVECVE-2024-2178: Path Traversal Vulnerability in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-2178/https://agentprime.io/advisories/CVE-2024-2178/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 02 Jun 2024 10:52:32 GMTCVECVE-2024-4267: Remote Code Execution in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-4267/https://agentprime.io/advisories/CVE-2024-4267/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 May 2024 19:29:56 GMTCVECVE-2024-2361: Arbitrary Upload & Read via Path Traversal in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-2361/https://agentprime.io/advisories/CVE-2024-2361/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 May 2024 09:03:50 GMTCVEcriticalCVE-2024-2366: Remote Code Execution in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-2366/https://agentprime.io/advisories/CVE-2024-2366/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 May 2024 09:03:49 GMTCVEcriticalCVE-2024-3435: Path Traversal in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-3435/https://agentprime.io/advisories/CVE-2024-3435/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 May 2024 09:03:48 GMTCVECVE-2024-3126: Command Injection in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-3126/https://agentprime.io/advisories/CVE-2024-3126/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 May 2024 09:03:47 GMTCVECVE-2024-4326: Remote Code Execution via `/apply_settings` and `/execute_code` in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-4326/https://agentprime.io/advisories/CVE-2024-4326/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 May 2024 09:03:47 GMTCVEcriticalCVE-2024-4322: Path Traversal in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-4322/https://agentprime.io/advisories/CVE-2024-4322/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.31 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 May 2024 09:03:45 GMTCVEcriticalCVE-2024-2358: Path Traversal leading to Remote Code Execution in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-2358/https://agentprime.io/advisories/CVE-2024-2358/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 May 2024 09:03:45 GMTCVEcriticalCVE-2024-2299: Stored Cross-Site Scripting (XSS) via Profile Picture Upload in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-2299/https://agentprime.io/advisories/CVE-2024-2299/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 12 May 2024 20:27:55 GMTCVECVE-2024-1569: Uncontrolled Resource Consumption in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-1569/https://agentprime.io/advisories/CVE-2024-1569/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Apr 2024 00:00:14 GMTCVECVE-2024-1601: SQL Injection in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-1601/https://agentprime.io/advisories/CVE-2024-1601/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.40 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Apr 2024 00:00:14 GMTCVEcriticalCVE-2024-1646: Authentication Bypass in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-1646/https://agentprime.io/advisories/CVE-2024-1646/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Apr 2024 00:00:14 GMTCVECVE-2024-1602: Stored XSS leading to RCE in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-1602/https://agentprime.io/advisories/CVE-2024-1602/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Apr 2024 17:08:02 GMTCVECVE-2024-1520: OS Command Injection in parisneo/lollms-webuihttps://agentprime.io/advisories/CVE-2024-1520/https://agentprime.io/advisories/CVE-2024-1520/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.48 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Apr 2024 17:08:02 GMTCVEcritical