lollms lollms web ui

Name: lollms lollms web ui
Brand: lollms

productUS

cpe:2.3:a:lollms:lollms_web_ui:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

9critical7high7medium1low

updated 2026-10-25

vulnerabilities (46)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-4320US	critical9.8	34.4% (98th)	Exploit	no fix	2024-06-06	—
CVE-2024-4322US	—	31.0% (98th)	Exploit	9.8	2024-05-16	< 9.8
CVE-2026-33340US	—OT elevated	1.66% (77th)	Exploit	no fix	2026-03-24	—
CVE-2024-3435US	—	0.83% (57th)	Exploit	9.5	2024-05-16	< 9.5
CVE-2024-1520US	—	48.2% (99th)	—	9.2	2024-04-10	9.0 → 9.2
CVE-2024-1600US	—	32.5% (98th)	—	9.6	2024-04-10	9.0 → 9.6
CVE-2024-1873US	critical9.1	13.4% (96th)	—	no fix	2024-06-06	—
CVE-2024-6250US	—	1.94% (80th)	—	no fix	2024-06-27	= 9.6
CVE-2024-2360US	critical9.8	1.87% (79th)	—	no fix	2024-06-06	—
CVE-2024-9920US	high8.8	1.40% (72nd)	—	no fix	2025-03-20	= 12
CVE-2024-2624US	critical9.8	1.36% (71st)	—	9.4	2024-06-06	< 9.4
CVE-2024-3126US	—	1.32% (71st)	—	9.5	2024-05-16	< 9.5
CVE-2024-2359US	critical9.8	1.23% (69th)	—	no fix	2024-06-06	= 9.3
CVE-2024-2362US	critical9.1	1.15% (67th)	—	no fix	2024-06-06	= 9.3
CVE-2024-2358US	—	1.12% (66th)	—	9.5	2024-05-16	< 9.5
CVE-2024-10047US	—	1.03% (63rd)	—	no fix	2025-03-20	= 9.9
CVE-2024-1511US	—	0.98% (62nd)	—	no fix	2024-04-10	= 9.0
CVE-2024-8581US	—	0.97% (62nd)	—	no fix	2025-03-20	= 12
CVE-2024-4326US	—	0.97% (61st)	—	9.5	2024-05-16	< 9.5
CVE-2024-2548US	high7.5	0.88% (59th)	—	9.5	2024-06-06	< 9.5
CVE-2024-10019US	medium6.7	0.82% (57th)	—	no fix	2025-03-20	= 12
CVE-2024-8898US	critical9.8	0.81% (57th)	—	no fix	2025-03-20	= 12
CVE-2024-12766US	—	0.76% (55th)	—	no fix	2025-03-20	= 13
CVE-2024-3322US	critical9.8	0.73% (54th)	—	9.5	2024-06-06	< 9.5
CVE-2024-1602US	medium6.1	0.72% (54th)	—	no fix	2024-04-10	= 9.0
CVE-2024-2366US	—	0.66% (51st)	—	9.5	2024-05-16	< 9.5
CVE-2024-5482US	critical9.8	0.65% (51st)	—	no fix	2024-06-06	—
CVE-2025-1451US	high7.5	0.64% (50th)	—	no fix	2025-03-20	= 13
CVE-2024-2361US	—	0.63% (50th)	—	9.5	2024-05-16	< 9.5
CVE-2024-6394US	—	0.60% (48th)	—	no fix	2024-09-30	= 9.8
CVE-2024-2178US	—	0.60% (48th)	—	9.4	2024-06-02	< 9.4
CVE-2024-4498US	—	0.49% (41st)	—	no fix	2024-06-25	= 9.7
CVE-2024-4897US	—	0.45% (38th)	—	9.8	2024-07-02	< 9.8
CVE-2024-1522US	—	0.45% (38th)	—	no fix	2024-03-30	9.0 → 9.2
CVE-2024-2299US	medium6.1	0.37% (29th)	—	9.5	2024-05-14	< 9.5
CVE-2024-5933US	medium5.4	0.35% (28th)	—	no fix	2024-06-27	—
CVE-2024-7058US	—	0.33% (25th)	—	no fix	2025-03-20	= 10
CVE-2024-9919US	—OT elevated	0.32% (23rd)	—	no fix	2025-03-20	= 13
CVE-2024-6986US	medium5.4	0.30% (22nd)	—	no fix	2025-03-20	= 9.8
CVE-2024-4330US	low3.3	0.29% (20th)	—	9.8	2024-05-30	9.6 → 9.8
CVE-2024-6674US	high7.1	0.26% (17th)	—	10	2024-10-29	< 10
CVE-2024-2288US	high8.3	0.26% (17th)	—	9.3	2024-06-06	< 9.3
CVE-2024-8736US	medium6.5	0.25% (15th)	—	no fix	2025-03-20	= 12
CVE-2024-6959US	high7.1	0.22% (12th)	—	no fix	2024-10-13	= 9.8
CVE-2024-6673US	medium6.5	0.17% (7th)	—	10	2024-10-29	< 10
CVE-2024-6040US	high8.8	0.17% (6th)	—	no fix	2024-08-01	= 9.8

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')11 CVEs
CWE-29Path Traversal: '\..\filename'9 CVEs
CWE-352Cross-Site Request Forgery (CSRF)6 CVEs
CWE-36Absolute Path Traversal4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-23Relative Path Traversal2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE46 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan