Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,181All CVEsplus 19,170 rejected
- 704Last 24 hours5,205 in the last 7 days
- 17,216Last 30 days1,518 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 4 | 7 | 1 | 0 | 0 | 12 | 84 |
| 2025 | 1 | 8 | 6 | 0 | 0 | 15 | 72 |
| 2024 | 16 | 28 | 12 | 1 | 0 | 57 | 57 |
| Title | ||
|---|---|---|
| CVE-2026-10595 | Path Traversal Vulnerability in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | High7.5 |
| CVE-2026-12228 | Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | High8.7 |
| CVE-2026-1116 | Cross-site Scripting (XSS) in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | High8.2 |
| CVE-2026-1115 | Stored XSS in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | Critical9.6 |
| CVE-2026-1163 | Insufficient Session Expiration in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | Medium4.1 |
| CVE-2026-1114 | Improper Access Control via Weak JWT Token in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | Critical9.8 |
| CVE-2026-0558 | Unauthenticated File Upload in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | High7.5 |
| CVE-2026-0560 | Server-Side Request Forgery (SSRF) in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | High7.5 |
| CVE-2026-0562 | Insecure Direct Object Reference (IDOR) in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | High8.3 |
| CVE-2026-33340 | LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpointPublic exploitParisNeo · lollms-webui | Critical9.1 |
| CVE-2024-2356 | Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Critical9.6 |
| CVE-2026-1117 | Improper Access Control in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | High8.2 |
| CVE-2025-6386 | Timing Attack Vulnerability in parisneo/lollmsparisneo · parisneo/lollms | High7.5 |
| CVE-2024-12766 | SSRF in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | High7.5 |
| CVE-2024-8736 | Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | High7.1 |
| CVE-2024-8898 | Path Traversal in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Medium6.7 |
| CVE-2025-1451 | Insufficient Patch Leading to DoS in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | High7.5 |
| CVE-2024-6986 | Cross-site Scripting (XSS) in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Medium5.5 |
| CVE-2024-6982 | Remote Code Execution in Calculate Function in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | High8.4 |
| CVE-2024-10019 | Path Traversal and OS Command Injection in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Medium6.3 |
| CVE-2024-9920 | Unrestricted File Upload and Execution in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Medium6.6 |
| CVE-2024-9919 | Missing Authentication Check in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | High8.4 |
| CVE-2024-7058 | Relative Path Traversal in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms | Medium4.4 |
| CVE-2024-10047 | Directory Listing Vulnerability in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Medium5.3 |
| CVE-2024-9597 | Path Traversal in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | High7.1 |
| CVE-2024-8581 | Path Traversal in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Critical9.1 |
| CVE-2024-11302 | Missing check_access in lollms_binding_infos in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | High8.0 |
| CVE-2024-5125 | XSS and Open Redirect via SVG File Upload in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | High7.3 |
| CVE-2024-6673 | CSRF Vulnerability in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Medium4.4 |
| CVE-2024-6581 | Remote Code Execution due to Stored XSS in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | Medium6.5 |
| CVE-2024-6674 | Data Leak through CORS Misconfiguration in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | High8.1 |
| CVE-2024-6959 | Denial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | High7.1 |
| CVE-2024-6985 | Path Traversal in api open_personality_folder in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms | Medium4.4 |
| CVE-2024-6971 | Path Traversal in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms | Low3.4 |
| CVE-2024-6394 | Local File Inclusion in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | High7.5 |
| CVE-2024-6040 | Missing client_id in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms | Medium4.4 |
| CVE-2024-6281 | Path Traversal in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | High7.3 |
| CVE-2024-4897 | Remote Code Execution in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | High8.4 |
| CVE-2024-5933 | Cross-site Scripting (XSS) in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Medium6.1 |
| CVE-2024-6139 | Path Traversal in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | High7.3 |
| CVE-2024-5824 | Path Traversal in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | High7.4 |
| CVE-2024-6085 | Path Traversal in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | High8.6 |
| CVE-2024-6250 | Absolute Path Traversal in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | High7.5 |
| CVE-2024-4498 | Path Traversal and RFI Vulnerability in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | High7.7 |
| CVE-2024-4839 | CSRF in Servers Configurations in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Medium4.4 |
| CVE-2024-4499 | CSRF Vulnerability in parisneo/lollms XTTS ServerPublic exploitparisneo · parisneo/lollms | High7.6 |
| CVE-2024-3121 | Remote Code Execution in create_conda_env function in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | Medium6.8 |
| CVE-2024-4841 | Path Traversal in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Medium4.0 |
| CVE-2024-5443 | Remote Code Execution via Path Traversal in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | Critical9.8 |
| CVE-2024-4315 | LFI Vulnerability due to Lack of Path Sanitization in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | Critical9.1 |