lollms kayıtları
lollms üreticisine ait 68 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 12
- Düzeltme kaydı olan
- %17,6
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-29 Path Traversal: '\..\filename'11
- CWE-352 Cross-Site Request Forgery (CSRF)9
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')9
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')7
- CWE-36 Absolute Path Traversal5
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
68 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
53Planlayın | CVE-2024-1520İstismar yok | OS Command Injection in parisneo/lollms-webuilollms · lollms web ui · CWE-78 | Kritik9,8 | — | %48,2 | 10 Nis 2024 |
51Planlayın | CVE-2024-1601İstismar yok | SQL Injection in parisneo/lollms-webuilollms · lollms-webui · CWE-89 | Kritik9,8 | — | %40,4 | 15 Nis 2024 |
49Planlayın | CVE-2024-4320Kavram kanıtı | Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webuilollms · lollms web ui · CWE-29 | Kritik9,8 | — | %34,4 | 6 Haz 2024 |
47Planlayın | CVE-2024-1600İstismar yok | Local File Inclusion in parisneo/lollms-webuilollms · lollms web ui · CWE-98 | Kritik9,3 | — | %32,5 | 10 Nis 2024 |
47Planlayın | CVE-2024-3429İstismar yok | Path Traversal in parisneo/lollmslollms · lollms · CWE-29 | Kritik9,8 | — | %28,3 | 6 Haz 2024 |
40Planlayın | CVE-2024-1873İstismar yok | Path Traversal and Denial of Service in parisneo/lollms-webuilollms · lollms web ui · CWE-22 | Kritik9,1 | — | %13,4 | 6 Haz 2024 |
40Planlayın | CVE-2026-0558Kavram kanıtı | Unauthenticated File Upload in parisneo/lollmslollms · lollms · CWE-287 | Kritik9,8 | — | %2,0 | 29 Mar 2026 |
40Planlayın | CVE-2024-2360İstismar yok | Path Traversal leading to Remote Code Execution in parisneo/lollms-webuilollms · lollms web ui · CWE-29 | Kritik9,8 | — | %1,9 | 6 Haz 2024 |
39İzleyin | CVE-2024-4322Kavram kanıtı | Path Traversal in parisneo/lollms-webuilollms · lollms web ui · CWE-29 | Yüksek7,5 | — | %31,0 | 16 May 2024 |
39İzleyin | CVE-2024-4267İstismar yok | Remote Code Execution in parisneo/lollms-webuilollms · lollms-webui · CWE-77 | Kritik9,8 | — | %1,5 | 22 May 2024 |
39İzleyin | CVE-2024-2624İstismar yok | Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webuilollms · lollms web ui · CWE-29 | Kritik9,8 | — | %1,4 | 6 Haz 2024 |
39İzleyin | CVE-2024-2359İstismar yok | Improper Neutralization of Special Elements used in an OS Command in parisneo/lollms-webuilollms · lollms web ui · CWE-78 | Kritik9,8 | — | %1,2 | 6 Haz 2024 |
39İzleyin | CVE-2024-2358İstismar yok | Path Traversal leading to Remote Code Execution in parisneo/lollms-webuilollms · lollms web ui · CWE-29 | Kritik9,8 | — | %1,1 | 16 May 2024 |
39İzleyin | CVE-2024-1511İstismar yok | Path Traversal Vulnerability in parisneo/lollms-webuilollms · lollms web ui · CWE-22 | Kritik9,8 | — | %1,0 | 10 Nis 2024 |
39İzleyin | CVE-2024-4326İstismar yok | Remote Code Execution via `/apply_settings` and `/execute_code` in parisneo/lollms-webuilollms · lollms web ui · CWE-15 | Kritik9,8 | — | %1,0 | 16 May 2024 |
39İzleyin | CVE-2024-8898İstismar yok | Path Traversal in parisneo/lollms-webuilollms · lollms web ui · CWE-22 | Kritik9,8 | — | %0,8 | 20 Mar 2025 |
39İzleyin | CVE-2024-3322İstismar yok | Path Traversal in parisneo/lollms-webuilollms · lollms web ui · CWE-22 | Kritik9,8 | — | %0,7 | 6 Haz 2024 |
39İzleyin | CVE-2024-5482İstismar yok | SSRF in add_webpage endpoint in parisneo/lollms-webuilollms · lollms web ui · CWE-918 | Kritik9,8 | — | %0,7 | 6 Haz 2024 |
39İzleyin | CVE-2026-1114İstismar yok | Improper Access Control via Weak JWT Token in parisneo/lollmslollms · lollms · CWE-284 | Kritik9,8 | — | %0,5 | 7 Nis 2026 |
38İzleyin | CVE-2026-1115Kavram kanıtı | Stored XSS in parisneo/lollmslollms · lollms · CWE-79 | Kritik9,6 | — | %1,3 | 10 Nis 2026 |
38İzleyin | CVE-2024-2361İstismar yok | Arbitrary Upload & Read via Path Traversal in parisneo/lollms-webuilollms · lollms web ui · CWE-29 | Kritik9,6 | — | %0,6 | 16 May 2024 |
36İzleyin | CVE-2026-33340Kavram kanıtı | LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpointlollms · lollms web ui · CWE-306 | Kritik9,1 | — | %1,7 | 24 Mar 2026 |
36İzleyin | CVE-2024-2362İstismar yok | Path Traversal in parisneo/lollms-webuilollms · lollms web ui · CWE-36 | Kritik9,1 | — | %1,2 | 6 Haz 2024 |
36İzleyin | CVE-2024-8581İstismar yok | Path Traversal in parisneo/lollms-webuilollms · lollms web ui · CWE-22 | Kritik9,1 | — | %1,0 | 20 Mar 2025 |
36İzleyin | CVE-2024-2366İstismar yok | Remote Code Execution in parisneo/lollms-webuilollms · lollms web ui · CWE-77 | Kritik9,0 | — | %0,7 | 16 May 2024 |
- CVE-2024-152053Planlayın
OS Command Injection in parisneo/lollms-webui
KritikCVSS 9,8İstismar yokEPSS %48lollms · lollms web ui10 Nis 2024
- CVE-2024-160151Planlayın
SQL Injection in parisneo/lollms-webui
KritikCVSS 9,8İstismar yokEPSS %40lollms · lollms-webui15 Nis 2024
- CVE-2024-432049Planlayın
Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui
KritikCVSS 9,8Kavram kanıtıEPSS %34lollms · lollms web ui6 Haz 2024
- CVE-2024-160047Planlayın
Local File Inclusion in parisneo/lollms-webui
KritikCVSS 9,3İstismar yokEPSS %33lollms · lollms web ui10 Nis 2024
- CVE-2024-342947Planlayın
Path Traversal in parisneo/lollms
KritikCVSS 9,8İstismar yokEPSS %28lollms · lollms6 Haz 2024
- CVE-2024-187340Planlayın
Path Traversal and Denial of Service in parisneo/lollms-webui
KritikCVSS 9,1İstismar yokEPSS %13lollms · lollms web ui6 Haz 2024
- CVE-2026-055840Planlayın
Unauthenticated File Upload in parisneo/lollms
KritikCVSS 9,8Kavram kanıtıEPSS %2lollms · lollms29 Mar 2026
- CVE-2024-236040Planlayın
Path Traversal leading to Remote Code Execution in parisneo/lollms-webui
KritikCVSS 9,8İstismar yokEPSS %2lollms · lollms web ui6 Haz 2024
- CVE-2024-432239İzleyin
Path Traversal in parisneo/lollms-webui
YüksekCVSS 7,5Kavram kanıtıEPSS %31lollms · lollms web ui16 May 2024
- CVE-2024-426739İzleyin
Remote Code Execution in parisneo/lollms-webui
KritikCVSS 9,8İstismar yokEPSS %1lollms · lollms-webui22 May 2024
- CVE-2024-262439İzleyin
Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui
KritikCVSS 9,8İstismar yokEPSS %1lollms · lollms web ui6 Haz 2024
- CVE-2024-235939İzleyin
Improper Neutralization of Special Elements used in an OS Command in parisneo/lollms-webui
KritikCVSS 9,8İstismar yokEPSS %1lollms · lollms web ui6 Haz 2024
- CVE-2024-235839İzleyin
Path Traversal leading to Remote Code Execution in parisneo/lollms-webui
KritikCVSS 9,8İstismar yokEPSS %1lollms · lollms web ui16 May 2024
- CVE-2024-151139İzleyin
Path Traversal Vulnerability in parisneo/lollms-webui
KritikCVSS 9,8İstismar yokEPSS %1lollms · lollms web ui10 Nis 2024
- CVE-2024-432639İzleyin
Remote Code Execution via `/apply_settings` and `/execute_code` in parisneo/lollms-webui
KritikCVSS 9,8İstismar yokEPSS %1lollms · lollms web ui16 May 2024
- CVE-2024-889839İzleyin
Path Traversal in parisneo/lollms-webui
KritikCVSS 9,8İstismar yokEPSS %1lollms · lollms web ui20 Mar 2025
- CVE-2024-332239İzleyin
Path Traversal in parisneo/lollms-webui
KritikCVSS 9,8İstismar yokEPSS %1lollms · lollms web ui6 Haz 2024
- CVE-2024-548239İzleyin
SSRF in add_webpage endpoint in parisneo/lollms-webui
KritikCVSS 9,8İstismar yokEPSS %1lollms · lollms web ui6 Haz 2024
- CVE-2026-111439İzleyin
Improper Access Control via Weak JWT Token in parisneo/lollms
KritikCVSS 9,8İstismar yokEPSS %1lollms · lollms7 Nis 2026
- CVE-2026-111538İzleyin
Stored XSS in parisneo/lollms
KritikCVSS 9,6Kavram kanıtıEPSS %1lollms · lollms10 Nis 2026
- CVE-2024-236138İzleyin
Arbitrary Upload & Read via Path Traversal in parisneo/lollms-webui
KritikCVSS 9,6İstismar yokEPSS %1lollms · lollms web ui16 May 2024
- CVE-2026-3334036İzleyin
LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint
KritikCVSS 9,1Kavram kanıtıEPSS %2lollms · lollms web ui24 Mar 2026
- CVE-2024-236236İzleyin
Path Traversal in parisneo/lollms-webui
KritikCVSS 9,1İstismar yokEPSS %1lollms · lollms web ui6 Haz 2024
- CVE-2024-858136İzleyin
Path Traversal in parisneo/lollms-webui
KritikCVSS 9,1İstismar yokEPSS %1lollms · lollms web ui20 Mar 2025
- CVE-2024-236636İzleyin
Remote Code Execution in parisneo/lollms-webui
KritikCVSS 9,0İstismar yokEPSS %1lollms · lollms web ui16 May 2024