Vulnerabilidades en ParisNeo

84 resultados
Análisis Vexday

ParisNeo apresenta uma presença limitada na base de vulnerabilidades com apenas 1 CVE registrado, classificado como crítico, porém sem evidência de exploração ativa no momento. A vulnerabilidade relacionada a controles de autenticação/autorização insuficientes (CWE-306) não foi publicada recentemente, sugerindo um risco contido e sem dinâmica de ataque em evolução.

CVE-2024-1520CRITICALOS Command Injection in parisneo/lollms-webuiEPSS 48.2%CVE-2024-1601HIGHSQL Injection in parisneo/lollms-webuiEPSS 40.4%CVE-2024-4320CRITICALRemote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webuiEPSS 34.4%CVE-2024-1600CRITICALLocal File Inclusion in parisneo/lollms-webuiEPSS 32.5%CVE-2024-4322HIGHPath Traversal in parisneo/lollms-webuiEPSS 31.0%CVE-2024-3429CRITICALPath Traversal in parisneo/lollmsEPSS 28.3%CVE-2026-33340CRITICALLoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpointEPSS 21.6%CVE-2024-1873HIGHPath Traversal and Denial of Service in parisneo/lollms-webuiEPSS 13.4%CVE-2024-6250HIGHAbsolute Path Traversal in parisneo/lollms-webuiEPSS 1.9%CVE-2024-2360CRITICALPath Traversal leading to Remote Code Execution in parisneo/lollms-webuiEPSS 1.9%CVE-2026-0560HIGHServer-Side Request Forgery (SSRF) in parisneo/lollmsEPSS 1.8%CVE-2024-4267HIGHRemote Code Execution in parisneo/lollms-webuiEPSS 1.5%CVE-2024-2624CRITICALPath Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webuiEPSS 1.3%CVE-2024-3126HIGHCommand Injection in parisneo/lollms-webuiEPSS 1.3%CVE-2024-9920MEDIUMUnrestricted File Upload and Execution in parisneo/lollms-webuiEPSS 1.3%CVE-2024-2359CRITICALImproper Neutralization of Special Elements used in an OS Command in parisneo/lollms-webuiEPSS 1.2%CVE-2024-5443CRITICALRemote Code Execution via Path Traversal in parisneo/lollmsEPSS 1.2%CVE-2024-2362CRITICALPath Traversal in parisneo/lollms-webuiEPSS 1.1%CVE-2024-2358CRITICALPath Traversal leading to Remote Code Execution in parisneo/lollms-webuiEPSS 1.1%CVE-2024-4315CRITICALLFI Vulnerability due to Lack of Path Sanitization in parisneo/lollmsEPSS 1.0%