CVE Tools
Sign in
month report

July 2024

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

July 2024 closed with 3,248 published CVEs. 275 criticals, 14 added to CISA KEV (1 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via linux. Top weakness class — CWE-79 (528 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
3,248
— MoM— YoY
Severity mix
275 / 1,082
critical / high
KEV added
14
1 ransomware-linked
Nuclei coverage
19.3%
628 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
597.5
n=628
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
19
n=12
Weakness × Vendor

What's spreading where in July 2024

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS89SQL Injection787Out-of-bounds Write352CSRF416Use After Free200Information Exposure22Path Traversal476NULL Pointer Dereference125Out-of-bounds Read20Improper Input Validationсообщество свободного программного обеспечения6316704167222linux11636516ооо «ред софт»41171543238157ооо «русбитех-астра»117451349182ао «нппкт»113403243141red hat inc.628123372canonical ltd.92212752microsoft36105188microsoft corp3912511118ао «ивк»71021051novell inc.51411281ао «нтц ит роса»9821081

Most discussed CVEs — July 2024

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    537 CVE19 critCVSS 6.2
    NEWNuclei 4PoC 29
    linux (442) · debian gnu/linux (326) · openvpn (5)
  • 2linux—
    440 CVECVSS 6.0
    NEWPoC 3
    linux kernel (440) · linux (439)
  • 3ооо «ред софт»—
    410 CVE11 critCVSS 6.3
    NEWNuclei 3PoC 27
    ред ос (410)
  • 4ооо «русбитех-астра»—
    370 CVE8 critCVSS 6.2
    NEWKEV 1Nuclei 3PoC 25
    astra linux special edition (365) · astra linux common edition (29) · astra linux special edition для «эльбрус» (3)
  • 5ао "нппкт"—
    334 CVE7 critCVSS 6.2
    NEWKEV 1Nuclei 4PoC 22
    осон основа оnyx (334)
  • 6redhat—
    220 CVECVSS 6.3
    NEWPoC 9
    red hat enterprise linux (210) · red hat enterprise linux 9 (11) · red hat enterprise linux 8 (11)
  • 7canonical—
    179 CVE1 critCVSS 6.1
    NEWPoC 8
    ubuntu (173) · snapd (3) · snap (1)
  • 8microsoft—
    159 CVE9 critCVSS 7.6
    NEWKEV 3Nuclei 1PoC 11
    windows server 2022, 23h2 edition (server core installation) (84) · windows server 2022 (server core installation) (84) · windows server 2022 (84)
  • 9unknown—
    131 CVE8 critCVSS 6.3
    NEWNuclei 127PoC 131
    wp-affiliate-platform (8) · wp-emember (8) · himer (5)
  • 10ао «ивк»—
    128 CVE5 critCVSS 6.3
    NEWKEV 1Nuclei 3PoC 16
    альт сп 10 (123) · альт 8 сп (50)
  • 11novell inc.—
    127 CVE3 critCVSS 5.9
    NEWPoC 11
    opensuse leap (123) · suse linux enterprise desktop (114) · suse linux enterprise server for sap applications (114)
  • 12ао «нтц ит роса»—
    98 CVE4 critCVSS 6.9
    NEWKEV 1Nuclei 3PoC 12
    rosa virtualization 3.0 (88) · rosa virtualization (14) · роса кобальт (13)
  • 13apple—
    80 CVECVSS 5.7
    NEWPoC 1
    macos (79) · ios and ipados (43) · ipados (43)
  • 14google—
    75 CVE6 critCVSS 7.8
    NEWPoC 11
    android (44) · chrome (26) · google chrome (25)
  • 15sourcecodester—
    69 CVECVSS 5.7
    NEWPoC 69
    record management system (14) · lot reservation management system (9) · establishment billing management system (9)
  • 16oracle—
    63 CVE1 critCVSS 5.6
    NEWKEV 1Nuclei 1
    mysql server (22) · mysql (18) · e-business suite (9)
  • 17pypi—
    59 CVE3 critCVSS 6.5
    NEWNuclei 6PoC 3
    django (4) · anki (3) · roundup (3)
  • 18oretnom23—
    51 CVE2 critCVSS 6.1
    NEWPoC 50
    establishment billing management system (9) · lot reservation management system (9) · school fees payment system (6)
  • 19go—
    49 CVE9 critCVSS 7.5
    NEWNuclei 1PoC 5
    github.com/gogs/gogs (4) · gogs.io/gogs (4) · github.com/snapcore/snapd (3)
  • 20maven—
    48 CVE8 critCVSS 7.3
    NEWKEV 1Nuclei 3PoC 7
    org.apache.streampark:streampark (4) · org.geoserver.web:gs-web-app (3) · org.apache.linkis:linkis-datasource (3)
  • 21npm—
    47 CVE7 critCVSS 7.1
    NEWNuclei 1PoC 7
    flowise (6) · bootstrap (3) · directus (2)
  • 22samsung—
    47 CVE1 critCVSS 6.6
    NEW
    android (28) · exynos 1380 firmware (9) · exynos 2200 firmware (8)
  • 23apache—
    46 CVE9 critCVSS 7.4
    NEWKEV 1Nuclei 5PoC 9
    http server (11) · streampark (7) · streampipes (3)
  • 24apache software foundation—
    46 CVE9 critCVSS 7.4
    NEWKEV 1Nuclei 5PoC 9
    apache http server (11) · http server (11) · apache streampark (4)
  • 25juniper—
    46 CVECVSS 6.8
    NEWPoC 46
    junos os evolved (33) · junos (28) · j-web (1)
  • 26juniper networks—
    46 CVECVSS 6.7
    NEWPoC 46
    junos os evolved (33) · junos (30) · junos os (27)
  • 27siemens—
    41 CVE2 critCVSS 7.0
    NEWPoC 1
    sinema remote connect server (15) · sinema remote connect (10) · ruggedcom rst2228 (4)
  • 28totolink—
    38 CVE3 critCVSS 7.5
    NEWNuclei 1PoC 36
    a3600r (18) · a3600r firmware (18) · a6000r (7)
  • 29ibm—
    36 CVECVSS 5.4
    NEW
    datacap navigator (12) · datacap (12) · security verify directory integrator (3)
  • 30packagist—
    35 CVE5 critCVSS 6.3
    NEWNuclei 1PoC 10
    icecoder/icecoder (3) · auth0/wordpress (2) · admidio/admidio (2)
  • 31itsourcecode—
    33 CVE2 critCVSS 6.2
    NEWPoC 29
    tailoring management system (7) · alton management system (6) · society management system (5)
  • 32samsung mobile—
    33 CVECVSS 5.6
    NEW
    samsung mobile devices (28) · samsung health (1) · samsung flow (1)
  • 33realtek—
    23 CVECVSS 7.1
    NEWPoC 4
    rtl819x jungle sdk (19) · rtl819x jungle software development kit (19) · rtsper (4)
  • 34dell—
    21 CVECVSS 5.2
    NEW
    powerscale onefs (7) · edge gateway 3200 firmware (4) · dell peripheral manager (3)
  • 35level1—
    21 CVE1 critCVSS 7.4
    NEWPoC 4
    wbr-6013 firmware (21)
  • 36levelone—
    21 CVE1 critCVSS 7.4
    NEWPoC 4
    wbr-6013 (21)
  • 37tipsandtricks-hq—
    21 CVECVSS 6.5
    NEWNuclei 21PoC 21
    wp affiliate platform (8) · wp emember (8) · wp estore (5)
  • 38ibm corp.—
    20 CVE2 critCVSS 5.7
    NEW
    ibm datacap (12) · datacap navigator (12) · ibm cloud pak for security (2)
  • 39netapp—
    20 CVE3 critCVSS 6.7
    NEWKEV 1Nuclei 3PoC 9
    oncommand workflow automation (6) · active iq unified manager (5) · bluexp (5)
  • 40tenda—
    19 CVE5 critCVSS 8.5
    NEWPoC 10
    o3 (6) · ax1806 firmware (5) · o3 firmware1.0.0.10\(2478\) (4)
  • 41angeljudesuarez—
    18 CVE2 critCVSS 6.8
    NEWPoC 17
    society management system (5) · tailoring management system (5) · university management system (4)
  • 42dell technologies—
    18 CVECVSS 6.2
    NEW
    powerscale onefs (7) · peripheral manager (3) · edge gateway 5200 (3)
  • 43netbox—
    18 CVECVSS 6.1
    NEWPoC 8
    netbox (18)
  • 44sap_se—
    18 CVECVSS 5.4
    NEW
    sap crm webclient ui (4) · sap enable now (2) · sap netweaver application server for abap and abap platform (2)
  • 45almalinux os foundation—
    17 CVECVSS 5.8
    NEW
    almalinux (17)
  • 46sap—
    17 CVECVSS 5.3
    NEW
    customer relationship management webclient ui (4) · customer relationship management s4fnd (4) · sap basis (3)
  • 47idccms—
    16 CVECVSS 7.3
    NEWPoC 6
    idccms (16)
  • 48mozilla—
    16 CVE2 critCVSS 7.0
    NEW
    firefox (16) · thunderbird (15) · firefox esr (5)
  • 49nuget—
    16 CVE1 critCVSS 7.3
    NEWPoC 2
    bootstrap (2) · identityserver4 (2) · sixlabors.imagesharp (2)
  • 50qualcomm—
    15 CVECVSS 7.6
    NEW
    fastconnect 7800 firmware (14) · qca6574a firmware (12) · qca6595 firmware (12)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79528—
2CWE-89179—
3CWE-787115—
4CWE-35295—
5CWE-41695—
6CWE-20094—
7CWE-2283—
8CWE-47677—
9CWE-12561—
10CWE-2060—
11CWE-12159—
12CWE-9459—
13CWE-43458—
14CWE-12257—
15CWE-40054—
16CWE-86253—
17CWE-7852—
18CWE-26951—
19CWE-12049—
20CWE-28448—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems903 CVE
    198 crit80 KEV43 vendorsCVSS 7.8
    linux (881) · linux kernel (440) · ред ос (410)
  • Web & CMS Plugins844 CVE
    82 crit4 KEV494 vendorsCVSS 7.5
    easyappointments (14) · social auto poster (14) · wp affiliate platform (8)
  • Enterprise Software434 CVE
    351 crit7 KEV106 vendorsCVSS 7.7
    access rights manager (25) · checkmk (12) · datacap (12)
  • OSS Libraries394 CVE
    68 crit6 KEV91 vendorsCVSS 9.2
    ghostscript (9) · axiom axiomjdk (6) · ffmpeg (6)
  • Networking Infrastructure286 CVE
    99 crit8 KEV59 vendorsCVSS 7.8
    junos os evolved (94) · junos (58) · junos os (28)
  • Mobile Apps214 CVE
    12 crit9 vendorsCVSS 7.1
    android (74) · chrome (26) · google chrome (25)
  • Cloud & SaaS122 CVE
    21 crit64 vendorsCVSS 7.8
    symantec privileged access management (10) · smartos (3) · workspace (3)
  • ICS / OT / IoT117 CVE
    172 crit40 vendorsCVSS 8.8
    genesis64 (18) · cpu module logging configuration tool (12) · cw configurator (12)
  • Hardware Firmware113 CVE
    10 crit25 vendorsCVSS 8.2
    rtl819x jungle sdk (19) · rtl819x jungle software development kit (19) · rtsper (4)
  • Databases106 CVE
    6 crit3 KEV19 vendorsCVSS 6.0
    mysql server (47) · mysql (18) · datacap navigator (12)
  • Security Products101 CVE
    16 crit6 KEV53 vendorsCVSS 7.0
    pingfederate (5) · jumpserver (4) · controller 6000 and controller 7000 (3)
  • DevTools & CI77 CVE
    10 crit26 vendorsCVSS 6.8
    gitlab (24) · enterprise server (7) · github enterprise server (7)
  • Consumer Software57 CVE
    15 crit19 vendorsCVSS 8.4
    firefox (30) · thunderbird (28) · firefox esr (10)
  • Communications56 CVE
    5 crit2 KEV30 vendorsCVSS 9.8
    mattermost (8) · tafnit v8 (4) · librechat (2)
  • AI / ML43 CVE
    16 crit26 vendorsCVSS 8.4
    flowise (6) · stitionai/devika (4) · devika (3)
  • Unclassified167 CVE
    30 crit119 vendorsCVSS 6.9
    мсвсфера (8) · cooked (5) · 14finger (4)
Weakness × Sector

Which weaknesses hit which solution categories in July 2024

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS89SQL Injection787Out-of-bounds Write352CSRF416Use After Free200Information Exposure22Path Traversal476NULL Pointer Dereference125Out-of-bounds Read20Improper Input ValidationOperating Systems5348291186694216Web & CMS Plugins35510137230317OSS Libraries481884416111917Enterprise Software6410427141122Networking Infrastructure29242213316ICS / OT / IoT919183249Hardware Firmware2261333376Databases72144111Cloud & SaaS246131123Security Products14112516224