# CVEs published 2024-06-02

10 CVEs were published on June 2, 2024: 4 critical, 2 high. Days are UTC.

- [CVE-2024-5588](https://cve.now/CVE-2024-5588.md): itsourcecode Learning Management System processscore.php sql injection (CVSS 5.3, itsourcecode Learning Management System)
- [CVE-2024-36392](https://cve.now/CVE-2024-36392.md): MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVSS 6.1, MileSight DeviceHub)
- [CVE-2024-36391](https://cve.now/CVE-2024-36391.md): MileSight DeviceHub - CWE-320: Key Management Errors (CVSS 9.1, MileSight DeviceHub)
- [CVE-2024-36390](https://cve.now/CVE-2024-36390.md): MileSight DeviceHub - CWE-20 Improper Input Validation (CVSS 7.5, MileSight DeviceHub)
- [CVE-2024-36389](https://cve.now/CVE-2024-36389.md): MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values (CVSS 9.8, MileSight DeviceHub)
- [CVE-2024-36388](https://cve.now/CVE-2024-36388.md): MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function (CVSS 10.0, MileSight DeviceHub)
- [CVE-2024-27776](https://cve.now/CVE-2024-27776.md): MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CVSS 9.8, MileSight DeviceHub)
- [CVE-2024-2178](https://cve.now/CVE-2024-2178.md): Path Traversal Vulnerability in parisneo/lollms-webui (CVSS 7.5, parisneo/lollms-webui)
- [CVE-2024-5587](https://cve.now/CVE-2024-5587.md): Casdoor Configuration File app.conf file access (CVSS 6.9, Casdoor)
- [CVE-2024-4344](https://cve.now/CVE-2024-4344.md): Shield Security – Smart Bot Blocking & Intrusion Prevention Security \<= 19.1.13 - Cross-Site Request Forgery (CVSS 4.3, paultgoodchild Shield: Blocks Bots, Protects Users, and Pre…)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-06-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.