# CVEs published 2024-06-30

21 CVEs were published on June 30, 2024: 1 critical, 2 high. Days are UTC.

- [CVE-2024-6419](https://cve.now/CVE-2024-6419.md): SourceCodester Medicine Tracker System sql injection (CVSS 5.3, SourceCodester Medicine Tracker System)
- [CVE-2024-6418](https://cve.now/CVE-2024-6418.md): SourceCodester Medicine Tracker System sql injection (CVSS 6.9, SourceCodester Medicine Tracker System)
- [CVE-2024-6417](https://cve.now/CVE-2024-6417.md): SourceCodester Simple Online Bidding System sql injection (CVSS 5.3, SourceCodester Simple Online Bidding System)
- [CVE-2024-6416](https://cve.now/CVE-2024-6416.md): SeaCMS sql injection (CVSS 5.3, SeaCMS)
- [CVE-2024-34703](https://cve.now/CVE-2024-34703.md): Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters (CVSS 7.5, randombit botan)
- [CVE-2023-50964](https://cve.now/CVE-2023-50964.md): IBM InfoSphere Information Server cross-site scripting (CVSS 5.4, IBM InfoSphere Information Server)
- [CVE-2024-28794](https://cve.now/CVE-2024-28794.md): IBM InfoSphere Information Server cross-site scripting (CVSS 5.4, IBM InfoSphere Information Server)
- [CVE-2023-50953](https://cve.now/CVE-2023-50953.md): IBM InfoSphere Information Server information disclosure (CVSS 5.4, IBM InfoSphere Information Server)
- [CVE-2023-50952](https://cve.now/CVE-2023-50952.md): IBM InfoSphere Information Server server-side request forgery (CVSS 5.4, IBM InfoSphere Information Server)
- [CVE-2024-28797](https://cve.now/CVE-2024-28797.md): IBM InfoSphere Information Server cross-site scripting (CVSS 6.4, IBM InfoSphere Information Server)
- [CVE-2024-31898](https://cve.now/CVE-2024-31898.md): IBM InfoSphere Information Server data modification (CVSS 5.4, IBM InfoSphere Information Server)
- [CVE-2023-50954](https://cve.now/CVE-2023-50954.md): IBM InfoSphere Information Server information disclosure (CVSS 4.3, IBM InfoSphere Information Server)
- [CVE-2024-31902](https://cve.now/CVE-2024-31902.md): IBM InfoSphere Information Server cross-site request forgery (CVSS 4.3, IBM InfoSphere Information Server)
- [CVE-2024-35119](https://cve.now/CVE-2024-35119.md): IBM InfoSphere Information Server information disclosure (CVSS 5.3, IBM InfoSphere Information Server)
- [CVE-2024-28798](https://cve.now/CVE-2024-28798.md): IBM InfoSphere Information Server cross-site scripting (CVSS 7.2, IBM InfoSphere Information Server)
- [CVE-2023-35022](https://cve.now/CVE-2023-35022.md): IBM InfoSphere Information Server improper authentication (CVSS 3.3, IBM InfoSphere Information Server)
- [CVE-2024-28795](https://cve.now/CVE-2024-28795.md): IBM InfoSphere Information Server cross-site scripting (CVSS 5.4, IBM InfoSphere Information Server)
- [CVE-2024-5062](https://cve.now/CVE-2024-5062.md): Reflected XSS through survey redirect parameter in zenml-io/zenml (CVSS 5.3, zenml-io/zenml · zenml)
- [CVE-2024-6415](https://cve.now/CVE-2024-6415.md): Ingenico Estate Manager New Widget cross site scripting (CVSS 5.1, Ingenico Estate Manager)
- [CVE-2024-6414](https://cve.now/CVE-2024-6414.md): Parsec Automation TrakSYS Export Page contentpage direct request (CVSS 6.9, Parsec Automation TrakSYS)
- [CVE-2024-5926](https://cve.now/CVE-2024-5926.md): Path Traversal in stitionai/devika (CVSS 9.1, stitionai/devika)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-06-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.