CVEs published June 2, 2024
10 CVEs were published on June 2, 2024: 4 critical, 2 high.
- Published
- 10
- Critical
- 4
- High
- 2
- Medium
- 4
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- MileSight DeviceHub
- 6
- Casdoor
- 1
- itsourcecode Learning Management System
- 1
- parisneo/lollms-webui
- 1
- paultgoodchild Shield: Blocks Bots, Protects Users, and Pre…
- 1
Critical 4
- CVE-2024-36391MileSight DeviceHub - CWE-320: Key Management ErrorsMileSight DeviceHub
- CVE-2024-36389MileSight DeviceHub - CWE-330 Use of Insufficiently Random ValuesMileSight DeviceHub
- CVE-2024-36388MileSight DeviceHub - CWE-305 Missing Authentication for Critical FunctionMileSight DeviceHub
- CVE-2024-27776MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')MileSight DeviceHub
High 2
Medium, low and unrated 4
- CVE-2024-5588itsourcecode Learning Management System processscore.php sql injectionitsourcecode Learning Management System
- CVE-2024-36392MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')MileSight DeviceHub
- CVE-2024-5587Casdoor Configuration File app.conf file accessCasdoor
- CVE-2024-4344Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 19.1.13 - Cross-Site Request Forgerypaultgoodchild Shield: Blocks Bots, Protects Users, and Pre…