CVE Tools
Sign in
month report

March 2024

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

March 2024 closed with 3,374 published CVEs. 281 criticals, 10 added to CISA KEV (5 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via linux. Top weakness class — CWE-79 (795 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
3,374
— MoM— YoY
Severity mix
281 / 1,118
critical / high
KEV added
10
5 ransomware-linked
Nuclei coverage
25.5%
862 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
713.8
n=862
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
53
n=8
Detection gap

KEV pressure, no Nuclei coverage

March 2024 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in March 2024

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS89SQL Injection787Out-of-bounds Write121CWE-121352CSRF862Missing Authorization125Out-of-bounds Read434Unrestricted File Upload200Information Exposure416Use After Freeсообщество свободного программного обеспечения8516151132linux111428ооо «ред софт»2611022ооо «русбитех-астра»9920tenda5910845ао «нппкт»16412apple62243canonical ltd.6912google1262209shenzhen tenda technology co., ltd.356443microsoft corp13218microsoft11217

Most discussed CVEs — March 2024

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    333 CVE6 critCVSS 6.2
    NEWNuclei 2PoC 21
    linux (243) · debian gnu/linux (173) · phpmyfaq (7)
  • 2linux—
    235 CVECVSS 6.0
    NEWPoC 6
    linux (235) · linux kernel (235)
  • 3ооо «ред софт»—
    178 CVE2 critCVSS 6.5
    NEWNuclei 1PoC 12
    ред ос (178)
  • 4ооо «русбитех-астра»—
    140 CVE2 critCVSS 6.3
    NEWPoC 9
    astra linux special edition (131) · astra linux special edition для «эльбрус» (16) · astra linux common edition (8)
  • 5tenda—
    135 CVE16 critCVSS 8.2
    NEWPoC 104
    fh1202 firmware (22) · ac18 firmware (19) · fh1205 firmware (19)
  • 6ао "нппкт"—
    107 CVE3 critCVSS 6.6
    NEWNuclei 1PoC 7
    осон основа оnyx (107)
  • 7google—
    92 CVE4 critCVSS 7.1
    NEWNuclei 1PoC 2
    android (75) · google chrome (16) · chrome (15)
  • 8apple—
    91 CVECVSS 6.2
    NEWKEV 2PoC 1
    macos (79) · iphone os (50) · ios and ipados (50)
  • 9canonical—
    90 CVE2 critCVSS 6.3
    NEWPoC 10
    ubuntu (90)
  • 10shenzhen tenda technology co., ltd.—
    82 CVE8 critCVSS 8.2
    NEWPoC 65
    tenda ac15 (16) · tenda ac7 (13) · tenda ac10u (13)
  • 11microsoft—
    73 CVE2 critCVSS 7.6
    NEWKEV 2Nuclei 1PoC 1
    windows 11 23h2 (39) · windows 11 22h2 (39) · windows server 2022 (server core installation) (37)
  • 12redhat—
    68 CVE2 critCVSS 6.8
    NEWNuclei 1PoC 8
    red hat enterprise linux (53) · red hat enterprise linux 8 (15) · red hat enterprise linux 9 (14)
  • 13maven—
    67 CVE6 critCVSS 6.7
    NEWNuclei 2PoC 5
    org.geoserver:gs-restconfig (3) · org.jenkins-ci.plugins:htmlpublisher (3) · org.open-metadata:openmetadata-service (3)
  • 14ibm—
    63 CVECVSS 5.5
    NEWPoC 1
    secure proxy (6) · sterling secure proxy (6) · ds8900f (4)
  • 15sourcecodester—
    59 CVECVSS 5.5
    NEWPoC 56
    employee task management system (12) · online mobile management store (9) · petrol pump management software (6)
  • 16oretnom23—
    58 CVE2 critCVSS 6.5
    NEWPoC 57
    customer support system (15) · employee task management system (12) · online mobile store management system (9)
  • 17adobe—
    56 CVECVSS 5.7
    NEWKEV 1Nuclei 1
    adobe experience manager (44) · experience manager (44) · bridge (4)
  • 18campcodes—
    55 CVECVSS 5.2
    NEWPoC 54
    online job finder system (20) · online marriage registration system (9) · complete online dj booking system (9)
  • 19go—
    53 CVE6 critCVSS 7.1
    NEWPoC 5
    github.com/argoproj/argo-cd/v2 (6) · github.com/zitadel/zitadel (4) · github.com/cilium/cilium (4)
  • 20pypi—
    48 CVE6 critCVSS 6.9
    NEWPoC 11
    gradio (5) · paddlepaddle (5) · apache-airflow (3)
  • 21debian—
    47 CVECVSS 6.2
    NEWPoC 9
    debian linux (47)
  • 22packagist—
    47 CVE1 critCVSS 6.3
    NEWNuclei 1PoC 15
    phpmyfaq/phpmyfaq (8) · getgrav/grav (6) · friendsofsymfony1/symfony1 (2)
  • 23npm—
    43 CVE7 critCVSS 6.8
    NEWNuclei 2PoC 10
    directus (4) · katex (4) · rsshub (2)
  • 24fedoraproject—
    41 CVE1 critCVSS 7.0
    NEWPoC 1
    fedora (41)
  • 25ао «нтц ит роса»—
    41 CVE1 critCVSS 6.4
    NEWNuclei 1PoC 4
    rosa virtualization 3.0 (34) · роса хром (8) · rosa virtualization (6)
  • 26unknown—
    40 CVECVSS 6.0
    NEWNuclei 38PoC 40
    cm download manager (3) · pz-linkcard (3) · enjoy social feed plugin for wordpress website (2)
  • 27dell—
    39 CVECVSS 5.5
    NEW
    powerscale onefs (10) · secure connect gateway (scg) policy manager (6) · policy manager for secure connect gateway (6)
  • 28novell inc.—
    39 CVE2 critCVSS 5.9
    NEWNuclei 1PoC 4
    suse linux enterprise server (34) · suse linux enterprise server for sap applications (31) · suse linux enterprise desktop (29)
  • 29cisco—
    35 CVECVSS 6.5
    NEWPoC 33
    ios xe (14) · cisco ios xe software (13) · cisco ios xr (8)
  • 30fedora project—
    35 CVE1 critCVSS 6.5
    NEWNuclei 1PoC 2
    fedora (35)
  • 31ао «ивк»—
    35 CVECVSS 6.7
    NEWPoC 5
    альт сп 10 (32) · альт 8 сп (12)
  • 32apache software foundation—
    29 CVE5 critCVSS 7.2
    NEWNuclei 1PoC 1
    pulsar (5) · apache pulsar (5) · apache doris (3)
  • 33apache—
    28 CVE5 critCVSS 7.3
    NEWNuclei 1
    pulsar (5) · archiva (3) · fineract (3)
  • 34dedecms—
    28 CVE1 critCVSS 6.6
    NEWPoC 17
    dedecms (28)
  • 35freeimage project—
    23 CVECVSS 6.6
    NEWPoC 9
    freeimage (23)
  • 36magesh-k21—
    22 CVECVSS 5.1
    NEWPoC 15
    online-college-event-hall-reservation-system (22)
  • 37qualcomm—
    22 CVE4 critCVSS 8.4
    NEW
    fastconnect 7800 firmware (22) · fastconnect 6900 firmware (22) · wcd9380 firmware (22)
  • 38qualcomm, inc.—
    22 CVE4 critCVSS 7.9
    NEW
    snapdragon (22)
  • 39mediatek, inc.—
    21 CVE2 critCVSS 6.4
    NEWPoC 1
    mt6739, mt6757, mt6761, mt6763, mt6765, mt6768, mt6771, mt6779, mt6785, mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8163, mt8167, mt8168, mt8512 (4) · mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6983, mt6985, mt6989, mt8168, mt8188, mt8195, mt8673, mt8675 (2) · mt2713, mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6785, mt6789, mt6835, mt6855, mt6879, mt6883, mt6885, mt6886, mt6893, mt6895, mt6983, mt6985, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8185, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8370, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8675, mt8676, mt8678, mt8755, mt8765, mt8766, mt8768, mt8775, mt8781, mt8786, mt8788, mt8789, mt8791, mt8792, mt8796, mt8797, mt8798 (1)
  • 40mayurik—
    20 CVE3 critCVSS 6.2
    NEWPoC 18
    petrol pump management (10) · best pos management system (3) · php task management system (3)
  • 41dell technologies—
    19 CVECVSS 5.0
    NEW
    powerscale onefs (10) · poweredge r650 (5) · poweredge r650xs (5)
  • 42ibm corp.—
    18 CVECVSS 5.9
    NEW
    ibm mq operator (3) · ibm engineering requirements management doors (3) · ibm cloud pak for security (2)
  • 43code-projects—
    17 CVE5 critCVSS 7.4
    NEWPoC 16
    online book system (5) · scholars tracking system (4) · student enrollment (3)
  • 44amssplus—
    16 CVE1 critCVSS 7.9
    NEW
    amss++ (16)
  • 45amss\+\+ project—
    16 CVE1 critCVSS 7.9
    NEW
    amss\+\+ (16)
  • 46jenkins—
    16 CVECVSS 5.8
    NEWPoC 1
    jenkins html publisher plugin (3) · html publisher (3) · docker-build-step (2)
  • 47metagauss—
    16 CVE1 critCVSS 6.3
    NEWNuclei 16
    eventprime (9) · eventprime – events calendar, bookings and tickets (7) · profilegrid (4)
  • 48mozilla—
    16 CVE2 critCVSS 7.0
    NEWPoC 3
    firefox (15) · firefox esr (11) · thunderbird (11)
  • 49crates.io—
    15 CVE1 critCVSS 7.3
    NEWPoC 1
    deno (6) · quiche (2) · eza (2)
  • 50jetbrains—
    15 CVE1 critCVSS 6.1
    NEWKEV 2Nuclei 2PoC 1
    teamcity (12) · youtrack (3)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79795—
2CWE-89258—
3CWE-787165—
4CWE-121145—
5CWE-352140—
6CWE-862112—
7CWE-12574—
8CWE-43474—
9CWE-20071—
10CWE-41668—
11CWE-47664—
12CWE-2260—
13CWE-2057—
14CWE-28448—
15CWE-26945—
16CWE-7844—
17CWE-50241—
18CWE-12040—
19CWE-9439—
20CWE-40035—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins1,119 CVE
    74 crit616 vendorsCVSS 6.4
    elementor addon elements (10) · exclusive addons for elementor (10) · beaver builder (7)
  • Operating Systems592 CVE
    66 crit68 KEV49 vendorsCVSS 8.6
    linux (478) · linux kernel (235) · ред ос (178)
  • Enterprise Software453 CVE
    100 crit106 vendorsCVSS 7.8
    pandora fms (12) · glpi (11) · powerscale onefs (10)
  • OSS Libraries447 CVE
    49 crit108 vendorsCVSS 7.3
    freeimage (23) · curl (12) · deno (12)
  • Networking Infrastructure299 CVE
    1,009 crit1 KEV56 vendorsCVSS 8.7
    fh1202 firmware (22) · ac15 firmware (19) · ac18 firmware (19)
  • Mobile Apps202 CVE
    6 crit26 KEV9 vendorsCVSS 6.8
    android (86) · google chrome (16) · chrome (15)
  • Hardware Firmware148 CVE
    1,083 crit38 vendorsCVSS 8.4
    imx6 (12) · imx6 bundle (11) · nvidia nvs r535 (7)
  • Consumer Software119 CVE
    16 crit2 KEV32 vendorsCVSS 8.0
    adobe experience manager (88) · experience manager (44) · animate (8)
  • Security Products114 CVE
    23 crit2 KEV61 vendorsCVSS 7.9
    jumpserver (5) · secret server (5) · zitadel (4)
  • ICS / OT / IoT108 CVE
    308 crit51 vendorsCVSS 8.9
    charx sec-3100 (18) · charx sec-3000 (14) · charx sec-3050 (14)
  • Cloud & SaaS96 CVE
    33 crit58 vendorsCVSS 7.4
    play.ht (3) · play.ht – make your blog posts accessible with text to speech audio (3) · contests by rewards fuel (2)
  • DevTools & CI75 CVE
    7 crit2 KEV30 vendorsCVSS 7.7
    teamcity (12) · labview (5) · youtrack (3)
  • Databases49 CVE
    8 crit24 vendorsCVSS 9.1
    ibm engineering requirements management doors (3) · ibm mq operator (3) · filenet content manager (2)
  • AI / ML34 CVE
    8 crit22 vendorsCVSS 7.7
    paddlepaddle (5) · paddlepaddle/paddle (5) · langchain (3)
  • Communications30 CVE
    5 crit23 vendorsCVSS 7.2
    mattermost (4) · mattermost server (4) · teamwire (3)
  • Unclassified281 CVE
    31 crit155 vendorsCVSS 6.7
    online-college-event-hall-reservation-system (22) · amss\+\+ (16) · мсвсфера (13)
Weakness × Sector

Which weaknesses hit which solution categories in March 2024

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS89SQL Injection787Out-of-bounds Write121CWE-121352CSRF862Missing Authorization125Out-of-bounds Read434Unrestricted File Upload200Information Exposure416Use After FreeWeb & CMS Plugins5591311102724527Operating Systems4562544950Enterprise Software13583611414314114OSS Libraries592011101265121110Networking Infrastructure1312631197177Hardware Firmware81237229223ICS / OT / IoT1223135147362Consumer Software28131416464210Security Products311121143Cloud & SaaS165318112