CVE Tools
Sign in
month report

June 2024

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

June 2024 closed with 3,333 published CVEs. 313 criticals, 9 added to CISA KEV (2 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via linux. Top weakness class — CWE-79 (643 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
3,333
— MoM— YoY
Severity mix
313 / 942
critical / high
KEV added
9
2 ransomware-linked
Nuclei coverage
27.4%
914 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
634.2
n=914
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
58
n=13
Detection gap

KEV pressure, no Nuclei coverage

June 2024 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in June 2024

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS862Missing Authorization89SQL Injection787Out-of-bounds Write22Path Traversal352CSRF476NULL Pointer Dereference125Out-of-bounds Read416Use After Free94Code Injectionсообщество свободного программного обеспечения421836022385ооо «ред софт»3115314416381linux12601829ооо «русбитех-астра»11323314311ао «нппкт»133214302adobe1421113adobe systems inc.1421113packagist4028364red hat inc.5176141canonical ltd.381468pypi9321418microsoft corp53191

Most discussed CVEs — June 2024

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    360 CVE16 critCVSS 6.5
    NEWKEV 2Nuclei 3PoC 14
    linux (282) · debian gnu/linux (214) · webkitgtk (5)
  • 2ооо «ред софт»—
    286 CVE11 critCVSS 6.6
    NEWKEV 2Nuclei 1PoC 10
    ред ос (286)
  • 3linux—
    285 CVE5 critCVSS 6.2
    NEWKEV 1
    linux (285) · linux kernel (285)
  • 4ооо «русбитех-астра»—
    227 CVE13 critCVSS 6.8
    NEWKEV 1PoC 6
    astra linux special edition (226) · astra linux common edition (25) · astra linux special edition для «эльбрус» (6)
  • 5ао "нппкт"—
    211 CVE12 critCVSS 6.7
    NEWPoC 5
    осон основа оnyx (211)
  • 6adobe—
    167 CVE4 critCVSS 5.7
    NEWKEV 1Nuclei 1PoC 1
    experience manager (145) · adobe experience manager (145) · commerce webhooks (10)
  • 7packagist—
    165 CVE2 critCVSS 6.4
    NEWKEV 1Nuclei 3PoC 10
    typo3/cms (62) · zendframework/zendframework1 (20) · zendframework/zendframework (12)
  • 8redhat—
    120 CVE5 critCVSS 6.9
    NEWPoC 4
    red hat enterprise linux (108) · red hat enterprise linux 8 (8) · red hat enterprise linux 9 (8)
  • 9canonical—
    94 CVE4 critCVSS 6.4
    NEWKEV 1PoC 4
    ubuntu (82) · ubuntu linux (9) · apport (8)
  • 10microsoft—
    85 CVE2 critCVSS 7.4
    NEWKEV 3Nuclei 1PoC 4
    microsoft edge (31) · windows server 2019 (30) · windows server 2019 (server core installation) (30)
  • 11pypi—
    83 CVE15 critCVSS 7.5
    NEWNuclei 8PoC 15
    mlflow (13) · lollms (8) · zenml (8)
  • 12google—
    82 CVE6 critCVSS 7.5
    NEWKEV 1PoC 3
    android (49) · google chrome (26) · chrome (26)
  • 13unknown—
    82 CVE3 critCVSS 5.6
    NEWNuclei 79PoC 81
    arforms - premium wordpress form builder plugin (3) · widget bundle (3) · wp logs book (3)
  • 14ао «ивк»—
    53 CVE7 critCVSS 7.2
    NEWKEV 1PoC 2
    альт сп 10 (49) · альт 8 сп (10)
  • 15ibm—
    51 CVECVSS 5.9
    NEW
    infosphere information server (12) · security access manager (7) · security access manager docker (5)
  • 16ао «нтц ит роса»—
    45 CVE6 critCVSS 7.0
    NEWKEV 1PoC 2
    rosa virtualization 3.0 (44) · rosa virtualization (7) · роса хром (2)
  • 17itsourcecode—
    44 CVE2 critCVSS 7.0
    NEWPoC 41
    pool of bethesda online reservation system (4) · tailoring management system (4) · bakery online ordering system (4)
  • 18toshiba tec corporation—
    43 CVE6 critCVSS 8.0
    NEWPoC 43
    toshiba tec e-studio multi-function peripheral (mfp) (43) · toshiba e-studio 5008lp series (3) · toshiba e-studio 5018a series (3)
  • 19apple—
    41 CVECVSS 7.0
    NEW
    macos (33) · ios and ipados (29) · iphone os (29)
  • 20samsung—
    40 CVECVSS 6.3
    NEW
    exynos 1330 firmware (22) · exynos 1280 firmware (22) · exynos 1380 firmware (22)
  • 21dell—
    34 CVECVSS 5.9
    NEW
    powerprotect dd (10) · data domain operating system (10) · cpg bios (8)
  • 22go—
    33 CVE3 critCVSS 5.9
    NEWNuclei 1PoC 3
    github.com/evmos/evmos/v14 (3) · github.com/evmos/evmos/v16 (3) · github.com/evmos/evmos/v17 (3)
  • 23npm—
    33 CVE6 critCVSS 6.8
    NEWNuclei 3PoC 9
    @janhq/core (3) · lunary (3) · tinymce (2)
  • 24maven—
    31 CVE8 critCVSS 6.9
    NEWNuclei 3PoC 6
    com.reposilite:reposilite-backend (3) · org.keycloak:keycloak-services (2) · org.apache.submarine:submarine-server-core (2)
  • 25fedoraproject—
    30 CVE1 critCVSS 8.0
    NEWKEV 1Nuclei 1PoC 3
    fedora (30)
  • 26autodesk—
    29 CVECVSS 7.8
    NEW
    autocad map 3d (29) · autocad mechanical (29) · autocad mep (29)
  • 27fedora project—
    28 CVECVSS 8.0
    NEWPoC 2
    fedora (28)
  • 28autodesk inc.—
    27 CVECVSS 7.8
    NEW
    autocad map 3d (27) · autocad (27) · autocad architecture (27)
  • 29novell inc.—
    27 CVE3 critCVSS 6.8
    NEWNuclei 1PoC 2
    opensuse leap (26) · suse linux enterprise server for sap applications (25) · suse linux enterprise server (25)
  • 30parisneo—
    27 CVE11 critCVSS 7.9
    NEWNuclei 2PoC 13
    parisneo/lollms-webui (18) · parisneo/lollms (9) · lollms web ui (1)
  • 31sourcecodester—
    24 CVECVSS 6.1
    NEWPoC 24
    food ordering management system (5) · employee and visitor gate pass logging system (4) · medicine tracker system (2)
  • 32ibm corp.—
    22 CVECVSS 5.8
    NEW
    infosphere information server (12) · ibm db2 connect server (3) · ibm i (3)
  • 33oretnom23—
    22 CVE2 critCVSS 6.3
    NEWPoC 21
    food ordering management system (5) · employee and visitor gate pass logging system (4) · simple online bidding system (2)
  • 34lollms—
    21 CVE9 critCVSS 7.8
    NEWNuclei 2PoC 12
    lollms web ui (14) · lollms (4) · lollms-webui (3)
  • 35lunary-ai—
    18 CVE2 critCVSS 7.2
    NEWPoC 4
    lunary (18) · lunary-ai/lunary (18)
  • 36mozilla—
    18 CVE3 critCVSS 6.6
    NEWPoC 2
    firefox (18) · firefox esr (8) · thunderbird (8)
  • 37progress—
    18 CVE5 critCVSS 7.9
    NEWKEV 1Nuclei 1PoC 3
    whatsup gold (15) · sitefinity (1) · moveit gateway (1)
  • 38fortinet—
    16 CVECVSS 6.3
    NEW
    fortios (5) · fortiwebmanager (4) · fortiproxy (3)
  • 39gitlab—
    16 CVE1 critCVSS 6.1
    NEWNuclei 1PoC 4
    gitlab (16)
  • 40progress software corporation—
    16 CVE4 critCVSS 7.8
    NEWKEV 1Nuclei 1PoC 2
    whatsup gold (15) · moveit transfer (1)
  • 41samsung mobile—
    15 CVECVSS 5.9
    NEW
    samsung mobile devices (13) · galaxybudsmanager pc (1) · samsung live wallpaper pc (1)
  • 42fortinet inc.—
    14 CVECVSS 6.3
    NEW
    fortios (5) · fortiweb manager (4) · fortiproxy (3)
  • 43gitlab inc.—
    14 CVE1 critCVSS 6.4
    NEWNuclei 1PoC 3
    gitlab (14)
  • 44mintplexlabs—
    14 CVE3 critCVSS 8.0
    NEWPoC 7
    mintplex-labs/anything-llm (14) · anythingllm (13) · anythingllm webapp (1)
  • 45salesagility—
    14 CVE6 critCVSS 7.9
    NEWNuclei 1PoC 1
    suitecrm (14) · suitecrm-core (1)
  • 46siemens—
    14 CVE1 critCVSS 6.8
    NEW
    sinec traffic analyzer (7) · tim 1531 irc (2) · siplus tim 1531 irc (2)
  • 47debian—
    13 CVE2 critCVSS 6.5
    NEWKEV 2PoC 2
    debian linux (13)
  • 48lfprojects—
    13 CVECVSS 8.4
    NEWNuclei 2PoC 5
    mlflow (13)
  • 49schneider electric—
    13 CVE1 critCVSS 6.8
    NEW
    sage 1410 (6) · sage 1450 (6) · sage 2400 (6)
  • 50schneider-electric—
    13 CVE1 critCVSS 6.6
    NEW
    sage rtu firmware (6) · spacelogic as-b firmware (2) · spacelogic as-p firmware (2)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79643—
2CWE-862311—
3CWE-89164—
4CWE-787118—
5CWE-22104—
6CWE-35277—
7CWE-47672—
8CWE-12570—
9CWE-41669—
10CWE-9458—
11CWE-20057—
12CWE-28453—
13CWE-43447—
14CWE-2046—
15CWE-28746—
16CWE-7838—
17CWE-91837—
18CWE-12135—
19CWE-50235—
20CWE-86335—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins952 CVE
    100 crit633 vendorsCVSS 7.0
    custom field template (8) · awesome support (7) · arforms (6)
  • Operating Systems591 CVE
    236 crit111 KEV35 vendorsCVSS 9.2
    linux (567) · ред ос (286) · linux kernel (285)
  • OSS Libraries437 CVE
    56 crit5 KEV78 vendorsCVSS 8.2
    typo3/cms (62) · zendframework/zendframework1 (20) · zendframework/zendframework (12)
  • Enterprise Software414 CVE
    65 crit5 KEV100 vendorsCVSS 7.2
    whatsup gold (15) · infosphere information server (12) · checkmk (10)
  • Consumer Software252 CVE
    31 crit7 KEV30 vendorsCVSS 7.6
    adobe experience manager (290) · experience manager (145) · autocad (56)
  • Mobile Apps177 CVE
    8 crit2 KEV9 vendorsCVSS 9.8
    android (63) · chrome (26) · google chrome (26)
  • AI / ML171 CVE
    59 crit44 vendorsCVSS 9.1
    lollms web ui (14) · mintplex-labs/anything-llm (14) · anythingllm (13)
  • Networking Infrastructure134 CVE
    69 crit59 vendorsCVSS 8.4
    a3700r firmware (8) · wnr614 firmware (6) · wnr614 n300 (6)
  • Hardware Firmware119 CVE
    500 crit2 KEV27 vendorsCVSS 8.9
    toshiba tec e-studio multi-function peripheral (mfp) (43) · toshiba e-studio 2500ac series (3) · toshiba e-studio 2510ac series (3)
  • Cloud & SaaS94 CVE
    18 crit8 KEV56 vendorsCVSS 9.1
    security-advisories (12) · nextcloud server (11) · emias os (2)
  • ICS / OT / IoT90 CVE
    146 crit57 KEV41 vendorsCVSS 9.0
    foxman-un (7) · unem (7) · sage 1410 (6)
  • Security Products86 CVE
    7 crit2 KEV39 vendorsCVSS 7.8
    secure access (20) · apex one (14) · apex one as a service (7)
  • DevTools & CI50 CVE
    18 crit25 vendorsCVSS 8.3
    gitlab (30) · github enterprise server (2) · enterprise server (1)
  • Databases43 CVE
    2 crit14 vendorsCVSS 7.3
    infosphere information server (12) · ibm db2 (3) · ibm db2 connect server (3)
  • Communications28 CVE
    13 crit2 KEV23 vendorsCVSS 7.5
    megabip (4) · mattermost (2) · mattermost desktop (2)
  • Unclassified214 CVE
    26 crit156 vendorsCVSS 6.7
    мсвсфера (9) · dse855 (6) · dse855 firmware (6)
Weakness × Sector

Which weaknesses hit which solution categories in June 2024

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS862Missing Authorization89SQL Injection787Out-of-bounds Write22Path Traversal352CSRF476NULL Pointer Dereference125Out-of-bounds Read416Use After Free94Code InjectionWeb & CMS Plugins44625268345417Operating Systems81151616342537Enterprise Software19813851527OSS Libraries671114627745317Consumer Software2342354114234Hardware Firmware912372942AI / ML91242497Networking Infrastructure27982213ICS / OT / IoT839323Security Products19363115