April 2024
3,769 CVEs published, +12% on March 2024 and +60% on April 2023. CISA added 10 to KEV.
2024 month by month
- Critical
- 2808% of the 3,628 with a CVSS score
- Added to CISA KEV
- 108 of this month's CVEs are in KEV, listed a median 4.5 days after publication
- Vendors
- 1,4864,455 products
- Top weakness
- XSSCWE-79 · 619 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1Сообщество Свободного Программного ОбеспеченияLinux, Debian Gnu/linux, Xwiki Platform47416nonenew
- 2LinuxLinux Kernel, Linux3580nonenew
- 3Ооо «ред Софт»Ред Ос33310nonenew
- 4Ао "нппкт"Осон Основа Оnyx2797nonenew
- 5Ооо «русбитех-астра»Astra Linux Special Edition, Astra Linux Common Edition, Astra Linux Special Edition Для «эльбрус»2137nonenew
- 6Red HatRed Hat Enterprise Linux, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 82102nonenew
- 7MicrosoftWindows Server 2022, 23h2 Edition (Server Core Installation), Windows Server 2022 (Server Core Installation), Windows Server 2022 23h217521new
- 8OracleE-business Suite, Complex Maintenance Repair and Overhaul, Oracle Complex Maintenance, Repair, and Overhaul1355nonenew
- 9DebianDebian Linux, Debian Based Gnu Grub1240nonenew
- 10CanonicalUbuntu, Pebble1132nonenew
- 11TendaW30E Firmware, W15E, W15E Firmware1027nonenew
- 12SourcecodesterOnline Courseware, Aplaya Beach Resort Online Reservation System, Computer Laboratory Management System870nonenew
- 13Ао «ивк»Альт Сп 10, Альт 8 Сп818nonenew
- 14GoogleAndroid, Google Chrome, Chrome7942new
- 15FedoraprojectFedora, Sssd7710nonenew
- 16UnknownSalon Booking System, Smart Forms , Woocommerce Customers Manager760nonenew
- 17Ао «нтц Ит Роса»Rosa Virtualization 3.0, Роса Кобальт, Роса Хром680nonenew
- 18PyPIMlflow, Vyper, Scrapy6612nonenew
- 19GoGithub.com/mattermost/mattermost-server, Github.com/mattermost/mattermost/server/v8, Github.com/alexxit/go2rtc643nonenew
- 20Fedora ProjectFedora623nonenew
- 21Shenzhen Tenda Technology Co., Ltd.Tenda W15E, Tenda AC500, Tenda W30E543nonenew
- 22FoxitsoftwarePdf Reader, Pdf Editor, Foxit Reader510nonenew
- 23MavenOrg.keycloak:keycloak-services, Org.apache.zeppelin:zeppelin-server, Org.xwiki.platform:xwiki-platform-oldcore50141new
- 24NetappActive Iq Unified Manager, Oncommand Workflow Automation, Oncommand Insight450nonenew
- 25Foxit Software Inc.Pdf Reader, Pdf Editor420nonenew
Severity
How this month's CVEs score on CVSS; 141 have no score yet. Severity is not exploitation.
- Critical280
- High1,221
- Medium1,949
- Low178
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS619
- CWE-352CSRF223
- CWE-89SQL Injection218
- CWE-787Out-of-bounds Write180
- CWE-121134
- CWE-125Out-of-bounds Read121
- CWE-862Missing Authorization120
- CWE-416Use After Free115
- CWE-476NULL Pointer Dereference109
- CWE-22Path Traversal99
- CWE-200Information Exposure89
- CWE-284Improper Access Control78
- CWE-94Code Injection77
- CWE-20Improper Input Validation68
- CWE-122Heap Buffer Overflow63
- CWE-120Buffer Overflow54
- CWE-434Unrestricted File Upload53
- CWE-78OS Command Injection50
- CWE-918SSRF49
- CWE-77Command Injection44
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 352CSRF | 89SQL Injection | 787Out-of-bounds Write | 121 | 125Out-of-bounds Read | 862Missing Authorization | 416Use After Free | 476NULL Pointer Dereference | 22Path Traversal |
|---|---|---|---|---|---|---|---|---|---|---|
| Сообщество Свободного Программного Обеспечения | 5 | 2 | 29 | 1 | 21 | 2 | 48 | 74 | 1 | |
| Linux | 29 | 12 | 2 | 39 | 70 | |||||
| Ооо «ред Софт» | 3 | 20 | 1 | 21 | 1 | 29 | 43 | |||
| Ао «нппкт» | 2 | 17 | 1 | 18 | 1 | 39 | 45 | |||
| Ооо «русбитех-астра» | 3 | 14 | 2 | 17 | 30 | 28 | ||||
| Red Hat Inc. | 2 | 13 | 11 | 13 | 37 | |||||
| Microsoft Corp | 4 | 4 | 10 | 14 | 17 | 2 | 1 | |||
| Microsoft | 2 | 2 | 9 | 11 | 12 | 2 | 1 | |||
| Oracle Corp. | 7 | 4 | 4 | 1 | ||||||
| Oracle | 7 | 4 | 4 | 1 | ||||||
| Oracle Corporation | 7 | 4 | 4 | 1 | ||||||
| Debian | 11 | 4 | 1 | 14 | 19 |
CVEs published in April 2024
62 vulnerabilities from this month that were exploited in the wild (CISA KEV), covered in the news, explained on cve.tools or searched for. Known-exploited first, then by CVSS.
- CVE-2024-3400PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtectKEV10.0
- CVE-2024-27348Apache HugeGraph-Server: Command execution in gremlinKEV9.8
- CVE-2024-3272D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentialsKEV9.8
- CVE-2024-4040Unauthenticated arbitrary file read and remote code execution in CrushFTPKEV9.8
- CVE-2024-29988SmartScreen Prompt Security Feature Bypass VulnerabilityKEV8.8
- CVE-2024-20353A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote a...KEV8.6
- CVE-2024-29748there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for ...KEV7.8
- CVE-2024-3273D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injectionKEV7.3
- CVE-2024-20359A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepowe...KEV6.0
- CVE-2024-29745there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed ...KEV5.5
- CVE-2024-31982XWiki Platform: Remote code execution as guest via DatabaseSearch10.0
- CVE-2024-30568Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter.9.8
- CVE-2024-31002Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4 BitReader::ReadCache() at Ap4Utils.cpp component.9.8
- CVE-2024-31601An issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v. 20240323 and before allows attackers to execute arbitrary code via the exportpdf.php component.9.8
- CVE-2024-1643Unauthorized Organization Access in lunary-ai/lunary9.1
- CVE-2024-32880pyLoad allows upload to arbitrary folder lead to RCE9.1
- CVE-2024-0637Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability8.8
- CVE-2024-24994A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. 8.8
- CVE-2024-29269An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system commands via the Cmd parameter.8.8
- CVE-2024-31370WordPress CodeisAwesome AIKit plugin <= 4.14.1 - SQL Injection vulnerability8.5
- CVE-2024-28235Contao possible cookie sharing with external domains while checking protected pages for broken links8.3
- CVE-2024-0399WooCommerce Customers Manager < 29.7 - Subscriber+ SQL Injection8.1
- CVE-2024-28699A buffer overflow vulnerability in pdf2json v0.70 allows a local attacker to execute arbitrary code via the GString::copy() and ImgOutputDev::ImgOutputDev function.7.8
- CVE-2024-22092Bundlemanager has an authentication bypass vulnerability7.7
- CVE-2024-30248Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page7.7
- CVE-2024-32602WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.3.1 - SQL Injection vulnerability7.6
- CVE-2024-1594Local File Read via Path Traversal in mlflow/mlflow7.5
- CVE-2024-26769nvmet-fc: avoid deadlock on delete association path7.5
- CVE-2024-30405Junos OS: SRX 5000 Series with SPC2: Processing of specific crafted packets when ALG is enabled causes a transit traffic Denial of Service7.5
- CVE-2024-31031An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow.7.5
- CVE-2024-32650Rustls vulnerable to an infinite loop in rustls::conn::ConnectionCommon::complete_io() with proper client input7.5
- CVE-2024-3572XML External Entity (XXE) Vulnerability in scrapy/scrapy7.5
- CVE-2024-3574Authorization Header Leak During Cross-Domain Redirect in scrapy/scrapy7.5
- CVE-2024-3840Insufficient policy enforcement in Site Isolation in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security sev...7.5
- CVE-2024-32878 Use of Uninitialized Variable Vulnerability in llama.cpp7.1
- CVE-2024-33571WordPress VOD Infomaniak plugin <= 1.5.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1
- CVE-2024-1183SSRF Vulnerability in gradio-app/gradio6.5
- CVE-2024-23271A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A malicious website may cause unexpected ...6.5
- CVE-2024-2447Mattermost versions 8.1.x before 8.1.11, 9.3.x before 9.3.3, 9.4.x before 9.4.4, and 9.5.x before 9.5.2 fail to authenticate the source of certain types of post actions, allowing an authenticated a...6.5
- CVE-2024-31865Apache Zeppelin: Cron arbitrary user impersonation with improper privileges6.5
- CVE-2024-32505WordPress ElementsKit Elementor addons plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2024-32536WordPress WP TradingView plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2024-32566WordPress WP Club Manager plugin <= 2.2.11 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2024-3721TBK DVR-4104/DVR-4216 os command injection6.3
- CVE-2024-30270mailcow Path Traversal and Arbitrary Code Execution Vulnerability6.2
- CVE-2024-32472excalidraw vulnerable to a Stored XSS in excalidraw's web embed component6.1
- CVE-2024-1905Smart Forms < 2.6.96 - Admin+ Stored XSS5.9
- CVE-2024-30402Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription5.9
- CVE-2024-32126WordPress Navigation menu as dropdown Widget plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability5.9
- CVE-2024-32573WordPress WP-Lister Lite for eBay plugin <=3.5.11 - Cross Site Scripting (XSS) vulnerability5.9
- CVE-2024-29030memos vulnerable to an SSRF in /api/resource5.8
- CVE-2024-26076Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4
- CVE-2024-31375WordPress WP2LEADS plugin <= 3.2.7 - Broken Access Control vulnerability5.4
- CVE-2024-31933WordPress Page Builder: Live Composer plugin <= 1.5.35 - Cross Site Request Forgery (CSRF) vulnerability5.4
- CVE-2024-0874Coredns: cd bit response is cached and served later5.3
- CVE-2024-1526Hubbub Lite < 1.33.1 - Unauthenticated Password Protected Posts Access5.3
- CVE-2024-31839Cross Site Scripting vulnerability in tiagorlampert CHAOS v.5.0.1 allows a remote attacker to escalate privileges via the sendCommandHandler function in the handler.go component.4.8
- CVE-2024-32957WordPress Page Builder: Live Composer plugin <= 1.5.38 - Broken Access Control vulnerability4.7
- CVE-2024-31382WordPress Blocksy theme <= 2.0.22 - Cross Site Request Forgery (CSRF) vulnerability4.3
- CVE-2024-32090WordPress Church Admin plugin <= 4.0.27 - Cross Site Request Forgery (CSRF) vulnerability4.3
- CVE-2024-32432WordPress Ovic Addon Toolkit plugin <= 2.6.1 - Broken Access Control vulnerability4.3
- CVE-2024-32435WordPress AffiEasy plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability4.3