May 2024
5,418 CVEs published, +44% on April 2024 and +96% on May 2023. CISA added 14 to KEV.
2024 month by month
- Critical
- 3788% of the 5,029 with a CVSS score
- Added to CISA KEV
- 1413 of this month's CVEs are in KEV, listed a median 5 days after publication
- Vendors
- 1,4354,059 products
- Top weakness
- XSSCWE-79 · 669 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1Сообщество Свободного Программного ОбеспеченияLinux, Debian Gnu/linux, Bluez1,244341new
- 2LinuxLinux Kernel, Linux, Kernel1,07413nonenew
- 3Ооо «ред Софт»Ред Ос743284new
- 4Ао "нппкт"Осон Основа Оnyx531184new
- 5CanonicalUbuntu, Snapd4983nonenew
- 6Ооо «русбитех-астра»Astra Linux Special Edition, Astra Linux Common Edition, Astra Linux Special Edition Для «эльбрус»467204new
- 7Red HatRed Hat Enterprise Linux, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 94319nonenew
- 8PackagistSilverstripe/framework, Typo3/cms-core, Moodle/moodle3238nonenew
- 9DlinkDap-2622 Firmware, Dap-2622, Dap-13252196nonenew
- 10D-LinkDap-2622, Dap-1325, Dir-x32602095nonenew
- 11DebianDebian Linux1893nonenew
- 12Ао «нтц Ит Роса»Rosa Virtualization 3.0, Роса Кобальт, Rosa Virtualization1445nonenew
- 13CampcodesComplete Web-based School Management System, Legal Case Management System, Online Laundry Management System13616nonenew
- 14Pdf-xchangePdf-xchange Editor, Pdf-tools1010nonenew
- 15FedoraprojectFedora8694new
- 16MicrosoftWindows Server 2022 (Server Core Installation), Windows Server 2022, Windows Server 20198113new
- 17FoxitsoftwarePdf Editor, Pdf Reader, Foxit Reader760nonenew
- 18UnknownBusiness Card, Newsletter Popup, Hl Twitter752nonenew
- 19KofaxPower Pdf740nonenew
- 20TungstenautomationPower Pdf740nonenew
- 21Ао «ивк»Альт Сп 10, Альт 8 Сп691nonenew
- 22PyPIRyu, Ait-core, Scrapy656nonenew
- 23Fedora ProjectFedora, 389 Directory Server641nonenew
- 24SourcecodesterSimple Online Bidding System, Event Registration System, Best House Rental Management System630nonenew
- 25GoogleAndroid, Chrome, Google Chrome5744new
Severity
How this month's CVEs score on CVSS; 389 have no score yet. Severity is not exploitation.
- Critical378
- High1,867
- Medium2,581
- Low203
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS669
- CWE-787Out-of-bounds Write368
- CWE-89SQL Injection331
- CWE-416Use After Free285
- CWE-121227
- CWE-476NULL Pointer Dereference226
- CWE-125Out-of-bounds Read214
- CWE-78OS Command Injection132
- CWE-401129
- CWE-22Path Traversal128
- CWE-352CSRF123
- CWE-862Missing Authorization110
- CWE-20Improper Input Validation94
- CWE-269Improper Privilege Mgmt84
- CWE-122Heap Buffer Overflow83
- CWE-200Information Exposure80
- CWE-434Unrestricted File Upload78
- CWE-120Buffer Overflow64
- CWE-94Code Injection63
- CWE-66762
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems1,51624% of sector-tagged CVEs
- Web & CMS Plugins1,15618% of sector-tagged CVEs
- OSS Libraries71911% of sector-tagged CVEs
- Enterprise Software60910% of sector-tagged CVEs
- Networking Infrastructure5118% of sector-tagged CVEs
- Consumer Software3495% of sector-tagged CVEs
- 9 smaller sectors1,056
- Not yet classified430
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 787Out-of-bounds Write | 89SQL Injection | 416Use After Free | 121 | 476NULL Pointer Dereference | 125Out-of-bounds Read | 78OS Command Injection | 401 | 22Path Traversal |
|---|---|---|---|---|---|---|---|---|---|---|
| Сообщество Свободного Программного Обеспечения | 3 | 58 | 2 | 149 | 8 | 210 | 58 | 3 | 126 | 6 |
| Linux | 47 | 138 | 209 | 45 | 123 | |||||
| Ооо «ред Софт» | 3 | 40 | 4 | 75 | 5 | 119 | 34 | 62 | 2 | |
| Ао «нппкт» | 1 | 28 | 1 | 63 | 4 | 87 | 19 | 43 | 2 | |
| Canonical Ltd. | 26 | 36 | 91 | 14 | 63 | |||||
| Ооо «русбитех-астра» | 2 | 22 | 51 | 3 | 72 | 23 | 30 | 2 | ||
| Red Hat Inc. | 1 | 19 | 35 | 1 | 58 | 11 | 52 | |||
| Packagist | 73 | 12 | 2 | 2 | ||||||
| Dlink | 2 | 108 | 114 | 1 | 56 | 1 | 5 | |||
| D-Link Corp. | 2 | 108 | 114 | 1 | 56 | 1 | 5 | |||
| D-Link | 108 | 113 | 55 | 1 | 5 | |||||
| Debian | 8 | 21 | 1 | 24 | 7 | 16 | 1 |
CVEs published in May 2024
72 vulnerabilities from this month that were exploited in the wild (CISA KEV), covered in the news, explained on cve.tools or searched for. Known-exploited first, then by CVSS.
- CVE-2024-23692Rejetto HTTP File Server 2.3m Unauthenticated RCEKEV9.8
- CVE-2024-32113Apache OFBiz: Path traversal leading to RCEKEV9.8
- CVE-2024-4358Registration Authentication Bypass VulnerabilityKEV9.8
- CVE-2024-4671Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...KEV9.6
- CVE-2024-4947Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)KEV9.6
- CVE-2024-5274Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)KEV9.6
- CVE-2024-29824An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.KEV8.8
- CVE-2024-30040Windows MSHTML Platform Security Feature Bypass VulnerabilityKEV8.8
- CVE-2024-4761Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)KEV8.8
- CVE-2024-24919Information disclosureKEV8.6
- CVE-2024-4978Malicious Code in Justice AV Solutions (JAVS) ViewerKEV8.4
- CVE-2024-30051Windows DWM Core Library Elevation of Privilege VulnerabilityKEV7.8
- CVE-2023-50224TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure VulnerabilityKEV6.5
- CVE-2024-33644WordPress Customify Site Library plugin <= 0.0.9 - Remote Code Execution (RCE) vulnerability9.9
- CVE-2024-32621HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read in H5HG.c (called from H5VL__native_blob_get in H5VLnative_blob.c), resulting in the corruption of the instruction poi...9.8
- CVE-2024-33808A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.9.8
- CVE-2024-34249wasm3 v0.5.0 was discovered to contain a heap buffer overflow which leads to segmentation fault via the function "DeallocateSlot" in wasm3/source/m3_compile.c.9.8
- CVE-2024-35398TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setMacFilterRules.9.8
- CVE-2024-4548Delta Electronics DIAEnergie SQL Injection9.8
- CVE-2024-34070Froxlor Vulnerable to Blind XSS Leading to Froxlor Application Compromise9.6
- CVE-2024-34716PrestaShop vulnerable to XSS via customer contact form in FO, through file upload9.6
- CVE-2024-34340Authentication Bypass when using using older password hashes9.1
- CVE-2024-29161HDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.8.8
- CVE-2024-29822An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code. 8.8
- CVE-2024-30017Windows Hyper-V Remote Code Execution Vulnerability8.8
- CVE-2024-32623HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VM_array_fill in H5VM.c (called from H5S_select_elements in H5Spoint.c).8.8
- CVE-2024-3808Porto Theme - Functionality <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode8.8
- CVE-2024-21512Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables.8.2
- CVE-2024-32982Litestar and Starlite affected by Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')8.2
- CVE-2024-32523WordPress Mailster plugin <= 4.0.6 - Unauthenticated Local File Inclusion vulnerability8.1
- CVE-2023-27349BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability8.0
- CVE-2024-32810WordPress ShortPixel Critical CSS plugin <= 1.0.2 - Broken Access Control vulnerability7.6
- CVE-2024-32663Suricata 's http2 parser contains an improper compressed header handling can lead to resource starvation7.5
- CVE-2024-33112D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main()func.7.5
- CVE-2024-33820Totolink AC1200 Wireless Dual Band Gigabit Router A3002R_V4 Firmware V4.0.0-B20230531.1404 is vulnerable to Buffer Overflow via the formWlEncrypt function of the boa server. Specifically, they expl...7.5
- CVE-2024-34350Next.js Vulnerable to HTTP Request Smuggling7.5
- CVE-2024-35060An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file.7.5
- CVE-2024-5228TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability7.5
- CVE-2024-29158HDF5 through 1.14.3 contains a stack buffer overflow in H5FL_arr_malloc, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.7.4
- CVE-2024-32624HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__ref_mem_setnull in H5Tref.c (called from H5T__conv_ref in H5Tconv.c), resulting in the corruption of the instruction pointer.7.4
- CVE-2024-28279Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=.7.3
- CVE-2024-34201TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the getSaveConfig function.7.3
- CVE-2024-29848An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated, privileged user to execute arbitrary commands as SYSTEM. 7.2
- CVE-2024-20056In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interactio...6.7
- CVE-2024-21841Uncontrolled search path for some Intel(R) Distribution for GDB software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access.6.7
- CVE-2024-22588Kwik commit 745fd4e2 does not discard unused encryption keys.6.5
- CVE-2024-34563WordPress Gold Addons for Elementor plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2024-3553Tutor LMS <= 2.6.2 - Missing Authorization to Unauthenticated Limited Options Update6.5
- CVE-2024-5165Eclipse Ditto User Interface vulnerable to XSS due to Improper Neutralization of Input6.5
- CVE-2024-4452ElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4
- CVE-2024-31281WordPress Church Admin plugin <= 4.1.6 - Broken Access Control vulnerability6.3
- CVE-2024-5394itsourcecode Online Student Enrollment System newDept.php sql injection6.3
- CVE-2024-20363Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that could allow an unauthenticated, remote attacker to bypass the configured rule...5.8
- CVE-2024-33875HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5O__layout_encode in H5Olayout.c, resulting in the corruption of the instruction pointer.5.7
- CVE-2023-52781usb: config: fix iteration issue in 'usb_get_bos_descriptor()'5.5
- CVE-2024-34959DedeCMS V5.7.113 is vulnerable to Cross Site Scripting (XSS) via sys_data_replace.php.5.5
- CVE-2024-30055Microsoft Edge (Chromium-based) Spoofing Vulnerability5.4
- CVE-2024-34064Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter5.4
- CVE-2024-34814WordPress Unyson plugin <=2.7.29 - Cross Site Request Forgery (CSRF) vulnerability5.4
- CVE-2024-35302In JetBrains TeamCity before 2023.11 stored XSS during restore from backup was possible5.4
- CVE-2024-24874WordPress Polls CP plugin <= 1.0.71 - Content Injection vulnerability5.3
- CVE-2024-33907WordPress Print My Blog plugin <= 3.26.2 - Broken Access Control vulnerability5.3
- CVE-2024-34473An issue was discovered in appmgr in O-RAN Near-RT RIC I-Release. An attacker could register an unintended RMR message type during xApp registration to disrupt other service components.5.3
- CVE-2024-34556WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Sensitive Data Exposure via Exported File vulnerability5.3
- CVE-2024-0862The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests from the Protect...5.0
- CVE-2024-34241A cross-site scripting (XSS) vulnerability in Rocketsoft Rocket LMS 1.9 allows an administrator to store a JavaScript payload using the admin web interface when creating new courses and new course ...4.8
- CVE-2024-4502Ruijie RG-UAC dhcp_client_commit.php os command injection4.7
- CVE-2024-5194Arris VAP2500 assoc_table.php command injection4.7
- CVE-2024-35172WordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Server Side Request Forgery (SSRF) vulnerability4.4
- CVE-2024-4689WordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Cross Site Request Forgery (CSRF) vulnerability4.3
- CVE-2024-20858Improper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application.4.0
- CVE-2024-32020Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will3.9