CVE Tools
Sign in
month report

January 2024

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

January 2024 closed with 2,698 published CVEs. 312 criticals, 21 added to CISA KEV (8 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via debian gnu/linux. Top weakness class — CWE-79 (447 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
2,698
— MoM— YoY
Severity mix
312 / 909
critical / high
KEV added
21
8 ransomware-linked
Nuclei coverage
16.4%
442 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
781.0
n=442
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
22
n=13
Detection gap

KEV pressure, no Nuclei coverage

January 2024 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in January 2024

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write89SQL Injection352CSRF121CWE-121200Information Exposure119Memory Buffer Bounds20Improper Input Validation284CWE-28422Path Traversalсообщество свободного программного обеспечения81612136536ооо «ред софт»9152226357ооо «русбитех-астра»111124811ао «ивк»19113611apple6115232gtkwave19323tonybybell19323ао «нппкт»1102224microsoft corp2183pypi104111137totolink72113apple inc.6103131

Most discussed CVEs — January 2024

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    152 CVE13 critCVSS 6.7
    NEWKEV 3Nuclei 5PoC 38
    debian gnu/linux (70) · linux (44) · mediawiki (7)
  • 2ооо «ред софт»—
    143 CVE9 critCVSS 6.8
    NEWKEV 4Nuclei 2PoC 35
    ред ос (143)
  • 3unknown—
    139 CVE7 critCVSS 6.3
    NEWNuclei 133PoC 133
    eventon (8) · essential real estate (3) · estatik real estate plugin (3)
  • 4ооо «русбитех-астра»—
    111 CVE4 critCVSS 6.7
    NEWKEV 4PoC 21
    astra linux special edition (109) · astra linux special edition для «эльбрус» (9) · astra linux common edition (6)
  • 5ао «ивк»—
    85 CVE1 critCVSS 6.4
    NEWKEV 2Nuclei 1PoC 20
    альт сп 10 (78) · альт 8 сп (48)
  • 6apple—
    84 CVE1 critCVSS 6.3
    NEWKEV 3PoC 1
    macos (76) · ios and ipados (52) · ipados (51)
  • 7gtkwave—
    82 CVECVSS 7.7
    NEWPoC 33
    gtkwave (82)
  • 8microsoft—
    82 CVE5 critCVSS 6.9
    NEWKEV 1PoC 3
    windows server 2022 (35) · windows server 2022, 23h2 edition (server core installation) (35) · windows server 2022 (server core installation) (35)
  • 9tonybybell—
    82 CVECVSS 7.7
    NEWPoC 33
    gtkwave (82)
  • 10ао "нппкт"—
    82 CVE3 critCVSS 6.9
    NEWKEV 4Nuclei 1PoC 12
    осон основа оnyx (82)
  • 11pypi—
    77 CVE14 critCVSS 6.7
    NEWNuclei 4PoC 15
    paddlepaddle (19) · pyload-ng (4) · whoogle-search (4)
  • 12redhat—
    77 CVE3 critCVSS 6.7
    NEWKEV 2Nuclei 1PoC 19
    red hat enterprise linux (47) · red hat enterprise linux 8 (45) · red hat enterprise linux 9 (45)
  • 13totolink—
    73 CVE35 critCVSS 7.8
    NEWNuclei 11PoC 42
    a3300r firmware (15) · n200re (13) · lr1200gb firmware (13)
  • 14maven—
    62 CVE9 critCVSS 7.0
    NEWKEV 1Nuclei 6PoC 21
    de.tum.in.ase:artemis-java-test-sandbox (6) · com.jfinal:jfinal (4) · io.jenkins.plugins:gitlab-branch-source (3)
  • 15google—
    61 CVE4 critCVSS 7.2
    NEWKEV 1PoC 2
    android (36) · chrome (22) · google chrome (22)
  • 16fedoraproject—
    56 CVE2 critCVSS 7.0
    NEWKEV 2Nuclei 2PoC 10
    fedora (56) · extra packages for enterprise linux (2)
  • 17tenda—
    55 CVE23 critCVSS 7.9
    NEWPoC 36
    ax1803 firmware (21) · ac10u (11) · w9 firmware (7)
  • 18go—
    46 CVE5 critCVSS 6.7
    NEWPoC 2
    github.com/cubefs/cubefs (5) · github.com/0xjacky/nginx-ui (5) · github.com/moby/buildkit (4)
  • 19kashipara—
    46 CVE17 critCVSS 7.0
    NEWNuclei 1PoC 36
    food management system (19) · billing software (13) · travel website (6)
  • 20oracle—
    43 CVECVSS 5.7
    NEW
    mysql server (12) · mysql (12) · e-business suite (7)
  • 21linux—
    42 CVECVSS 6.1
    NEWKEV 2PoC 8
    linux kernel (42) · linux (9) · kernel (2)
  • 22ajaysharma—
    41 CVECVSS 8.2
    NEW
    cups easy (41)
  • 23cups easy—
    41 CVECVSS 8.2
    NEW
    cups easy (purchase & inventory) (41)
  • 24fedora project—
    37 CVE2 critCVSS 7.4
    NEWKEV 1Nuclei 2PoC 6
    fedora (37) · fedora epel (2)
  • 25packagist—
    36 CVE3 critCVSS 6.3
    NEWNuclei 4PoC 16
    gilacms/gila (3) · tinymce/tinymce (3) · wwbn/avideo (3)
  • 26ао «нтц ит роса»—
    35 CVE1 critCVSS 6.7
    NEWKEV 1PoC 7
    rosa virtualization 3.0 (20) · роса хром (11) · роса кобальт (11)
  • 27shenzhen tenda technology co., ltd.—
    34 CVE3 critCVSS 6.9
    NEWPoC 25
    tenda ac10u (11) · tenda w9 (7) · tenda i6 (4)
  • 28trendmicro—
    34 CVECVSS 7.1
    NEW
    apex one (17) · apex central (11) · trend micro apex central (7)
  • 29trend micro, inc.—
    34 CVECVSS 7.3
    NEW
    trend micro apex one (16) · trend micro apex one as a service (16) · trend micro apex central (12)
  • 30npm—
    33 CVE6 critCVSS 7.1
    NEWNuclei 1PoC 10
    tinymce (6) · meshcentral (2) · @evershop/evershop (2)
  • 31ibm—
    30 CVE4 critCVSS 6.3
    NEW
    db2 (9) · db2 for linux, unix and windows (8) · vios (4)
  • 32code-projects—
    28 CVECVSS 5.8
    NEWPoC 21
    fighting cock information system (9) · online faculty clearance (4) · dormitory management system (4)
  • 33qualcomm—
    27 CVE3 critCVSS 7.9
    NEW
    wcd9380 firmware (23) · wsa8815 firmware (23) · wsa8810 firmware (23)
  • 34bosch—
    26 CVECVSS 7.0
    NEW
    nexo-os (25) · bcc101 firmware (1) · bcc102 (1)
  • 35qualcomm, inc.—
    26 CVE3 critCVSS 7.9
    NEW
    snapdragon (26)
  • 36sourcecodester—
    26 CVECVSS 4.7
    NEWPoC 21
    engineers online portal (7) · employee management system (5) · house rental management system (4)
  • 37hathway—
    25 CVECVSS 6.9
    NEW
    skyworth router cm5100 (25)
  • 38juniper—
    25 CVE1 critCVSS 6.8
    NEWNuclei 1PoC 25
    junos (21) · junos os evolved (8) · paragon active assurance control center (1)
  • 39juniper networks—
    25 CVE1 critCVSS 6.8
    NEWNuclei 1PoC 25
    junos (21) · junos os (21) · junos os evolved (8)
  • 40linecorp—
    25 CVECVSS 5.5
    NEWPoC 25
    line (25)
  • 41rexroth—
    25 CVECVSS 6.8
    NEW
    nexo cordless nutrunner nxa011s-36v (0608842011) (25) · nexo cordless nutrunner nxa011s-36v-b (0608842012) (25) · nexo cordless nutrunner nxa015s-36v (0608842001) (25)
  • 42skyworthdigital—
    25 CVECVSS 6.9
    NEW
    cm5100 firmware (25)
  • 43siemens—
    24 CVE2 critCVSS 7.5
    NEW
    solid edge se2023 (11) · teamcenter visualization v14.3 (4) · jt2go (4)
  • 44debian—
    22 CVE2 critCVSS 7.1
    NEWKEV 1PoC 4
    debian linux (21) · debian cpio (1)
  • 45huawei—
    22 CVE2 critCVSS 7.5
    NEW
    harmonyos (22) · emui (18)
  • 46netapp—
    22 CVECVSS 6.2
    NEWKEV 1PoC 2
    oncommand insight (17) · cloud insights acquisition unit (5) · cloud insights storage workload security agent (5)
  • 47unisoc (shanghai) technologies co., ltd.—
    21 CVECVSS 5.1
    NEW
    sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 (21)
  • 48mediatek, inc.—
    20 CVE1 critCVSS 6.4
    NEW
    mt6762, mt6765, mt6833, mt6879, mt6883, mt6885, mt6983, mt8167, mt8168, mt8188, mt8321, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8797, mt8798 (6) · mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt8185, mt8321, mt8385, mt8666, mt8667, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797, mt8798 (3) · mt2735, mt6813, mt6833, mt6833p, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6877t, mt6878, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6891, mt6893, mt6895, mt6895t, mt6896, mt6897, mt6980, mt6980d, mt6983t, mt6983w, mt6983z, mt6985, mt6985t, mt6989, mt6990 (3)
  • 49paddlepaddle—
    19 CVE3 critCVSS 6.2
    NEW
    paddlepaddle (18) · paddle (1) · paddlepaddle/paddle (1)
  • 50rubygems—
    19 CVE1 critCVSS 6.5
    NEWPoC 12
    encoded_id-rails (2) · audited (2) · avo (2)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79447—
2CWE-787186—
3CWE-89185—
4CWE-352103—
5CWE-12176—
6CWE-20074—
7CWE-11973—
8CWE-2071—
9CWE-28471—
10CWE-2269—
11CWE-7869—
12CWE-41668—
13CWE-86264—
14CWE-43458—
15CWE-12057—
16CWE-19055—
17CWE-12553—
18CWE-9443—
19CWE-7742—
20CWE-40037—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins687 CVE
    70 crit433 vendorsCVSS 7.2
    avideo (14) · eventon (11) · post smtp (6)
  • OSS Libraries433 CVE
    67 crit1 KEV97 vendorsCVSS 8.7
    swftools (12) · ffmpeg (6) · freeimage (6)
  • Operating Systems409 CVE
    125 crit41 KEV41 vendorsCVSS 7.7
    ред ос (143) · astra linux special edition (109) · fedora (99)
  • Enterprise Software372 CVE
    86 crit6 KEV113 vendorsCVSS 7.6
    dryice myxalytics (24) · oncommand insight (17) · checkmk (9)
  • Networking Infrastructure297 CVE
    155 crit2 KEV72 vendorsCVSS 8.7
    junos (42) · skyworth router cm5100 (25) · junos os evolved (24)
  • Hardware Firmware208 CVE
    482 crit53 vendorsCVSS 7.9
    sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 (21) · dgx a100 (9) · dgx a100 firmware (9)
  • Mobile Apps186 CVE
    33 crit28 KEV9 vendorsCVSS 7.1
    android (40) · chrome (22) · google chrome (22)
  • ICS / OT / IoT161 CVE
    126 crit53 vendorsCVSS 8.5
    cm5100 firmware (25) · nexo-os (25) · wic1200 firmware (3)
  • Consumer Software133 CVE
    13 crit23 vendorsCVSS 9.1
    gtkwave (164) · pyload (4) · b3d (3)
  • Security Products129 CVE
    12 crit13 KEV61 vendorsCVSS 8.4
    trend micro apex central (19) · apex one (18) · trend micro apex one (16)
  • Cloud & SaaS123 CVE
    23 crit11 KEV55 vendorsCVSS 7.9
    nueva ecija engineer online portal (9) · security-advisories (7) · nginx-ui (5)
  • Databases72 CVE
    3 crit1 KEV18 vendorsCVSS 8.9
    mysql server (24) · mysql (12) · ibm db2 (8)
  • Communications70 CVE
    9 crit31 vendorsCVSS 8.8
    line (25) · mattermost (3) · mattermost server (3)
  • DevTools & CI51 CVE
    11 crit5 KEV26 vendorsCVSS 7.1
    wireshark (5) · artemis java test sandbox (3) · vyper (2)
  • AI / ML50 CVE
    7 crit18 vendorsCVSS 8.1
    paddlepaddle (18) · cubefs (5) · ai-flow (1)
  • Unclassified267 CVE
    31 crit1 KEV174 vendorsCVSS 6.6
    cups easy (41) · dopsoft (10) · rrj nueva ecija engineer online portal (9)
Weakness × Sector

Which weaknesses hit which solution categories in January 2024

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write89SQL Injection352CSRF121CWE-121200Information Exposure119Memory Buffer Bounds20Improper Input Validation284CWE-28422Path TraversalWeb & CMS Plugins260288791621516Operating Systems1054332117211411OSS Libraries49231063113161824Enterprise Software6548475141299Networking Infrastructure3258215423376Hardware Firmware8422164111793Consumer Software4430334229432ICS / OT / IoT3123428315617Security Products24221128575Cloud & SaaS1259218542