CVE Tools
Sign in
month report

April 2024

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

April 2024 closed with 3,769 published CVEs. 280 criticals, 10 added to CISA KEV (1 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via linux. Top weakness class — CWE-79 (619 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
3,769
— MoM— YoY
Severity mix
280 / 1,221
critical / high
KEV added
10
1 ransomware-linked
Nuclei coverage
23.8%
897 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
690.5
n=897
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
5
n=8
Detection gap

KEV pressure, no Nuclei coverage

April 2024 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in April 2024

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS352CSRF89SQL Injection787Out-of-bounds Write121CWE-121125Out-of-bounds Read862Missing Authorization416Use After Free476NULL Pointer Dereference22Path Traversalсообщество свободного программного обеспечения5229121248741linux291223970ооо «ред софт»32012112943ао «нппкт»21711813945ооо «русбитех-астра»3142173028red hat inc.213111337microsoft corp4410141721microsoft229111221oracle corp.7441oracle7441oracle corporation7441debian11411419

Most discussed CVEs — April 2024

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    474 CVE16 critCVSS 6.1
    NEWNuclei 3PoC 30
    linux (332) · debian gnu/linux (288) · xwiki platform (7)
  • 2linux—
    358 CVECVSS 5.9
    NEWPoC 2
    linux kernel (358) · linux (357)
  • 3ооо «ред софт»—
    333 CVE10 critCVSS 6.2
    NEWNuclei 2PoC 15
    ред ос (333)
  • 4ао "нппкт"—
    279 CVE7 critCVSS 6.2
    NEWNuclei 2PoC 11
    осон основа оnyx (279)
  • 5ооо «русбитех-астра»—
    213 CVE7 critCVSS 6.6
    NEWNuclei 3PoC 17
    astra linux special edition (207) · astra linux common edition (38) · astra linux special edition для «эльбрус» (18)
  • 6redhat—
    210 CVE2 critCVSS 6.5
    NEWNuclei 2PoC 2
    red hat enterprise linux (170) · red hat enterprise linux 9 (11) · red hat enterprise linux 8 (11)
  • 7microsoft—
    175 CVE2 critCVSS 7.4
    NEWKEV 1PoC 9
    windows server 2022, 23h2 edition (server core installation) (87) · windows server 2022 (server core installation) (82) · windows server 2022 23h2 (82)
  • 8oracle—
    135 CVE5 critCVSS 5.7
    NEWNuclei 1PoC 2
    e-business suite (42) · complex maintenance repair and overhaul (31) · oracle complex maintenance, repair, and overhaul (31)
  • 9debian—
    124 CVECVSS 5.9
    NEWNuclei 1PoC 6
    debian linux (123) · debian based gnu grub (1)
  • 10canonical—
    113 CVE2 critCVSS 6.1
    NEWNuclei 1PoC 4
    ubuntu (112) · pebble (1)
  • 11tenda—
    102 CVE7 critCVSS 8.4
    NEWPoC 57
    w30e firmware (13) · w15e (13) · w15e firmware (13)
  • 12sourcecodester—
    87 CVECVSS 5.8
    NEWPoC 85
    online courseware (13) · aplaya beach resort online reservation system (11) · computer laboratory management system (10)
  • 13ао «ивк»—
    81 CVE8 critCVSS 6.2
    NEWNuclei 1PoC 5
    альт сп 10 (72) · альт 8 сп (48)
  • 14google—
    79 CVE4 critCVSS 6.7
    NEWKEV 2PoC 5
    android (57) · google chrome (20) · chrome (20)
  • 15fedoraproject—
    77 CVE10 critCVSS 7.2
    NEWNuclei 1PoC 19
    fedora (77) · sssd (1)
  • 16unknown—
    76 CVECVSS 5.6
    NEWNuclei 74PoC 76
    salon booking system (5) · smart forms (3) · woocommerce customers manager (3)
  • 17ао «нтц ит роса»—
    68 CVECVSS 6.2
    NEWNuclei 1PoC 2
    rosa virtualization 3.0 (54) · роса кобальт (12) · роса хром (6)
  • 18pypi—
    66 CVE12 critCVSS 7.2
    NEWNuclei 6PoC 13
    mlflow (6) · vyper (6) · scrapy (4)
  • 19go—
    64 CVE3 critCVSS 6.2
    NEWNuclei 4PoC 7
    github.com/mattermost/mattermost-server (6) · github.com/mattermost/mattermost/server/v8 (4) · github.com/alexxit/go2rtc (3)
  • 20fedora project—
    62 CVE3 critCVSS 6.6
    NEWNuclei 1PoC 9
    fedora (62)
  • 21shenzhen tenda technology co., ltd.—
    54 CVE3 critCVSS 8.7
    NEWPoC 37
    tenda w15e (10) · tenda ac500 (7) · tenda w30e (7)
  • 22foxitsoftware—
    51 CVECVSS 7.3
    NEWPoC 2
    pdf reader (51) · pdf editor (51) · foxit reader (3)
  • 23maven—
    50 CVE14 critCVSS 7.3
    NEWKEV 1Nuclei 2PoC 4
    org.keycloak:keycloak-services (8) · org.apache.zeppelin:zeppelin-server (5) · org.xwiki.platform:xwiki-platform-oldcore (3)
  • 24netapp—
    45 CVECVSS 4.9
    NEWNuclei 2PoC 2
    active iq unified manager (35) · oncommand workflow automation (34) · oncommand insight (34)
  • 25foxit software inc.—
    42 CVECVSS 7.8
    NEWPoC 2
    pdf reader (41) · pdf editor (39)
  • 26packagist—
    42 CVE3 critCVSS 6.4
    NEWPoC 11
    centreon/centreon (6) · concrete5/concrete5 (5) · contao/core-bundle (4)
  • 27ibm—
    40 CVE1 critCVSS 6.1
    NEW
    db2 for linux, unix and windows (6) · aspera faspex (6) · db2 (6)
  • 28huawei—
    35 CVE2 critCVSS 7.2
    NEW
    harmonyos (35) · emui (33)
  • 29ivanti—
    32 CVE4 critCVSS 8.0
    NEW
    avalanche (27) · connect secure (5) · policy secure (5)
  • 30juniper networks—
    32 CVECVSS 6.4
    NEWPoC 31
    junos (26) · junos os (25) · junos os evolved (14)
  • 31npm—
    32 CVE5 critCVSS 7.0
    NEWNuclei 1PoC 5
    mysql2 (4) · undici (2) · psitransfer (2)
  • 32juniper—
    31 CVECVSS 6.3
    NEWPoC 30
    junos (26) · junos os evolved (14) · paragon active assurance control center (1)
  • 33oretnom23—
    31 CVE4 critCVSS 5.8
    NEWPoC 29
    computer laboratory management system (14) · laundry shop management system (5) · warehouse management system (4)
  • 34adobe—
    29 CVE1 critCVSS 6.3
    NEW
    adobe experience manager (14) · experience manager (14) · illustrator (4)
  • 35novell inc.—
    29 CVECVSS 6.0
    NEWNuclei 2PoC 3
    suse linux enterprise server (27) · suse linux enterprise server for sap applications (27) · suse linux enterprise desktop (25)
  • 36apache—
    27 CVE5 critCVSS 6.7
    NEWKEV 1Nuclei 2PoC 2
    zeppelin (10) · http server (3) · cloudstack (3)
  • 37apache software foundation—
    27 CVE5 critCVSS 6.6
    NEWKEV 1Nuclei 2PoC 2
    apache zeppelin (9) · apache http server (3) · apache cloudstack (3)
  • 38broadcom—
    26 CVECVSS 6.5
    NEWPoC 1
    brocade sannav (22) · fabric operating system (4)
  • 39campcodes—
    25 CVECVSS 5.2
    NEWPoC 25
    church management system (9) · complete online student management system (6) · online student management system (6)
  • 40brocade—
    24 CVECVSS 6.5
    NEW
    brocade sannav (21) · fabric os (2) · brocade sannav (1)
  • 41phpgurukul—
    23 CVE6 critCVSS 7.1
    NEWPoC 17
    client management system (6) · cyber cafe management system (5) · student record system (3)
  • 42ооо «открытая мобильная платформа»—
    23 CVECVSS 7.7
    NEWNuclei 1PoC 2
    ос аврора (23)
  • 43cisco—
    22 CVECVSS 6.5
    NEWKEV 2PoC 21
    nexus dashboard (3) · adaptive security appliance (3) · adaptive security appliance software (3)
  • 44netapp inc.—
    20 CVECVSS 4.7
    NEW
    oncommand workflow automation (20) · oncommand insight (13) · cloud insights acquisition unit (1)
  • 45totolink—
    19 CVE2 critCVSS 7.1
    NEWPoC 19
    ex200 firmware (14) · ex200 (11) · n300rt firmware (5)
  • 46ffmpeg—
    18 CVE1 critCVSS 7.3
    NEWPoC 3
    ffmpeg (18)
  • 47ffmpeg team—
    18 CVE1 critCVSS 7.3
    NEWPoC 3
    ffmpeg (18)
  • 48janobe—
    18 CVECVSS 6.5
    NEWPoC 18
    aplaya beach resort online reservation system (11) · online library system (7)
  • 49netentsec—
    18 CVE4 critCVSS 7.4
    NEWPoC 12
    ns-asg firmware (14) · ns-asg application security gateway (4) · application security gateway (4)
  • 50brocade inc.—
    17 CVECVSS 6.7
    NEW
    brocade sannav (17)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79619—
2CWE-352223—
3CWE-89218—
4CWE-787180—
5CWE-121134—
6CWE-125121—
7CWE-862120—
8CWE-416115—
9CWE-476109—
10CWE-2299—
11CWE-20089—
12CWE-28478—
13CWE-9477—
14CWE-2068—
15CWE-12263—
16CWE-12054—
17CWE-43453—
18CWE-7850—
19CWE-91849—
20CWE-7744—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins1,062 CVE
    97 crit3 KEV592 vendorsCVSS 6.3
    happy addons for elementor (16) · bold page builder (12) · forminator (8)
  • Operating Systems892 CVE
    83 crit29 KEV42 vendorsCVSS 7.4
    linux (689) · linux kernel (358) · ред ос (333)
  • OSS Libraries431 CVE
    80 crit2 KEV105 vendorsCVSS 7.3
    ffmpeg (36) · freerdp (22) · axiom axiomjdk (9)
  • Enterprise Software381 CVE
    33 crit94 vendorsCVSS 7.9
    active iq unified manager (35) · oncommand insight (34) · oncommand workflow automation (34)
  • Networking Infrastructure337 CVE
    71 crit75 KEV61 vendorsCVSS 7.5
    junos (53) · junos os evolved (42) · brocade sannav (38)
  • Databases151 CVE
    16 crit12 vendorsCVSS 7.1
    mysql server (64) · e-business suite (43) · vm virtualbox (39)
  • Hardware Firmware150 CVE
    167 crit29 vendorsCVSS 9.0
    sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 (10) · mini 3 pro (9) · matrice m30 (7)
  • Consumer Software142 CVE
    20 crit35 vendorsCVSS 8.6
    pdf reader (92) · pdf editor (90) · adobe experience manager (28)
  • Mobile Apps138 CVE
    19 crit4 KEV11 vendorsCVSS 6.8
    android (67) · harmonyos (35) · emui (33)
  • Cloud & SaaS129 CVE
    16 crit1 KEV66 vendorsCVSS 7.5
    online courseware (13) · zoho campaigns (4) · judge0 (3)
  • Security Products121 CVE
    18 crit5 KEV54 vendorsCVSS 7.9
    avalanche (27) · fortisandbox (6) · connect secure (5)
  • ICS / OT / IoT110 CVE
    18 crit52 vendorsCVSS 8.1
    compact dab transmitter (7) · compact fm transmitter (7) · digital fm transmitter (7)
  • AI / ML96 CVE
    51 crit46 vendorsCVSS 9.8
    anythingllm (9) · mintplex-labs/anything-llm (9) · lollms web ui (4)
  • Communications49 CVE
    4 crit1 KEV29 vendorsCVSS 9.3
    mattermost (11) · mattermost server (10) · s-notify (2)
  • DevTools & CI36 CVE
    2 crit21 vendorsCVSS 6.9
    vyper (6) · vite (2) · build app online (1)
  • Unclassified225 CVE
    28 crit8 KEV140 vendorsCVSS 6.6
    мсвсфера (15) · hubbank (10) · internship portal management system (8)
Weakness × Sector

Which weaknesses hit which solution categories in April 2024

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS352CSRF89SQL Injection787Out-of-bounds Write121CWE-121125Out-of-bounds Read862Missing Authorization416Use After Free476NULL Pointer Dereference22Path TraversalWeb & CMS Plugins4241731369016Operating Systems71651655667845OSS Libraries4114974145111217Enterprise Software931192825719Networking Infrastructure2045799982234Hardware Firmware2132561135410Consumer Software711834054323ICS / OT / IoT113887154Security Products9241841718Cloud & SaaS251011332