October 2024
3,667 CVEs published, +41% on September 2024 and +33% on October 2023. CISA added 17 to KEV.
2024 month by month
- Critical
- 36410% of the 3,576 with a CVSS score
- Added to CISA KEV
- 1717 of this month's CVEs are in KEV, listed a median 3 days after publication
- Vendors
- 2,0245,630 products
- Top weakness
- XSSCWE-79 · 735 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1Сообщество Свободного Программного ОбеспеченияLinux, Debian Gnu/linux, Ollama542192new
- 2LinuxLinux, Linux Kernel4151nonenew
- 3Ооо «русбитех-астра»Astra Linux Special Edition, Astra Linux Common Edition, Astra Linux Special Edition Для «эльбрус»31271new
- 4Ао "нппкт"Осон Основа Оnyx30671new
- 5Ооо «ред Софт»Ред Ос30261new
- 6CanonicalUbuntu, Juju, Authd2340nonenew
- 7Red HatRed Hat Enterprise Linux, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 92125nonenew
- 8MicrosoftWindows Server 2022, 23h2 Edition (Server Core Installation), Windows Server 2022 23h2, Windows Server 2019 (Server Core Installation)15223new
- 9Ао «ивк»Альт 8 Сп, Альт Сп 1013021new
- 10Novell Inc.Opensuse Leap, Suse Linux Enterprise Desktop, Suse Linux Enterprise Server For Sap Applications1001nonenew
- 11CiscoCisco Firepower Threat Defense Software, Secure Firewall Management Center, Firepower Threat Defense9441new
- 12OracleMySQL, MySQL Server, E-business Suite882nonenew
- 13ApplemacOS, iOS and iPadOS, iPhone OS843nonenew
- 14GoogleAndroid, Google Chrome, Chrome785nonenew
- 15PackagistMagento/community-edition, Funadmin/funadmin, Librenms/librenms724nonenew
- 16GoGithub.com/rancher/rancher, Github.com/juju/juju, Github.com/mattermost/mattermost/server/v8654nonenew
- 17DlinkDir-605l, Dir-605l Firmware, Dir-619l552nonenew
- 18AdobeMagento, Commerce, Adobe Commerce541nonenew
- 19npm@saltcorn/server, Dompurify, @openc3/tool-common539nonenew
- 20PyPIGradio, Lollms, Open-webui458nonenew
- 21MavenCom.liferay.portal:release.dxp.bom, Com.liferay.portal:release.portal.bom, Org.openrefine:openrefine447nonenew
- 22code-projectsPharmacy Management System, Blood Bank Management System, Blood Bank System420nonenew
- 23D-LinkDir-605l, Dir-619l B1, Dsl-2750u400nonenew
- 24PhpgurukulBoat Booking System, Medical Card Generation System, User Registration \& Login and User Management System404nonenew
- 25SiemensTecnomatix Plant Simulation, Teamcenter Visualization V14.3, Teamcenter Visualization V14.2353nonenew
Severity
How this month's CVEs score on CVSS; 91 have no score yet. Severity is not exploitation.
- Critical364
- High1,290
- Medium1,795
- Low127
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS735
- CWE-89SQL Injection273
- CWE-416Use After Free121
- CWE-862Missing Authorization120
- CWE-476NULL Pointer Dereference118
- CWE-787Out-of-bounds Write117
- CWE-22Path Traversal107
- CWE-434Unrestricted File Upload96
- CWE-863Incorrect Authorization90
- CWE-125Out-of-bounds Read89
- CWE-352CSRF88
- CWE-120Buffer Overflow83
- CWE-94Code Injection68
- CWE-200Information Exposure67
- CWE-78OS Command Injection67
- CWE-77Command Injection59
- CWE-306Missing Auth for Critical Function49
- CWE-20Improper Input Validation46
- CWE-284Improper Access Control44
- CWE-122Heap Buffer Overflow41
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins97823% of sector-tagged CVEs
- Operating Systems89121% of sector-tagged CVEs
- OSS Libraries43210% of sector-tagged CVEs
- Enterprise Software3408% of sector-tagged CVEs
- Networking Infrastructure3137% of sector-tagged CVEs
- Mobile Apps1794% of sector-tagged CVEs
- Security Products1654% of sector-tagged CVEs
- 8 smaller sectors734
- Not yet classified312
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 89SQL Injection | 416Use After Free | 476NULL Pointer Dereference | 787Out-of-bounds Write | 862Missing Authorization | 22Path Traversal | 434Unrestricted File Upload | 125Out-of-bounds Read | 352CSRF |
|---|---|---|---|---|---|---|---|---|---|---|
| Сообщество Свободного Программного Обеспечения | 11 | 2 | 79 | 98 | 16 | 2 | 9 | 2 | 17 | |
| Linux | 69 | 98 | 11 | 1 | 10 | |||||
| Ооо «русбитех-астра» | 2 | 47 | 54 | 14 | 1 | 3 | 10 | |||
| Ао «нппкт» | 2 | 50 | 49 | 12 | 3 | 8 | ||||
| Ооо «ред Софт» | 2 | 41 | 43 | 14 | 4 | 11 | ||||
| Canonical Ltd. | 21 | 51 | 8 | 1 | 7 | |||||
| Red Hat Inc. | 2 | 27 | 19 | 7 | 4 | 2 | ||||
| Microsoft Corp | 3 | 1 | 19 | 2 | 2 | 12 | ||||
| Microsoft | 4 | 1 | 12 | 2 | 2 | 12 | ||||
| Ао «ивк» | 18 | 18 | 6 | 2 | 7 | |||||
| Novell Inc. | 7 | 21 | 1 | 1 | 1 | 2 | ||||
| Cisco | 18 | 4 | 2 | 11 | 4 | 2 | 1 |
CVEs published in October 2024
68 vulnerabilities from this month that were exploited in the wild (CISA KEV), covered in the news, explained on cve.tools or searched for. Known-exploited first, then by CVSS.
- CVE-2024-45519The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute com...KEV10.0
- CVE-2024-51378getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatu...KEV10.0
- CVE-2024-51567upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlst...KEV10.0
- CVE-2024-43468Microsoft Configuration Manager Remote Code Execution VulnerabilityKEV9.8
- CVE-2024-47575A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 throu...KEV9.8
- CVE-2024-50623In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.KEV9.8
- CVE-2024-9537ScienceLogic SL1 unspecified vulnerabilityKEV9.8
- CVE-2024-9680An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. T...KEV9.8
- CVE-2024-41713A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to...KEV9.1
- CVE-2024-9465Expedition: SQL Injection Leads to Firewall Admin Credential DisclosureKEV9.1
- CVE-2024-43047Use After Free in DSP ServiceKEV7.8
- CVE-2024-43572Microsoft Management Console Remote Code Execution VulnerabilityKEV7.8
- CVE-2024-9463Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential DisclosureKEV7.5
- CVE-2024-9380An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.KEV7.2
- CVE-2024-43573Windows MSHTML Platform Spoofing VulnerabilityKEV6.5
- CVE-2024-9379SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.KEV6.5
- CVE-2024-20481A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote...KEV5.8
- CVE-2024-51478Use of a Broken or Risky Cryptographic Algorithm in YesWiki9.9
- CVE-2016-15042Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload9.8
- CVE-2024-10525Eclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback9.8
- CVE-2024-47823Livewire Remote Code Execution (RCE) on File Uploads9.8
- CVE-2024-47832XML Signature Bypass via differential XML parsing in ssoready9.8
- CVE-2024-48307JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData.9.8
- CVE-2024-48784An Incorrect Access Control issue in SAMPMAX com.sampmax.homemax 2.1.2.7 allows a remote attacker to obtain sensitive information via the firmware update process.9.8
- CVE-2024-50483WordPress Meetup plugin <= 0.1 - Broken Authentication vulnerability9.8
- CVE-2024-9047WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php9.8
- CVE-2024-9265Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalation9.8
- CVE-2024-49681WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.0.9 - SQL Injection vulnerability9.3
- CVE-2024-47821pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API9.1
- CVE-2024-46626OS4ED openSIS-Classic v9.1 was discovered to contain a SQL injection vulnerability via a crafted payload.8.8
- CVE-2024-9859Type confusion in WebAssembly in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)8.8
- CVE-2024-9981FormosaSoft ee-class - Local File Inclusion8.8
- CVE-2024-49623WordPress Duplicate Title Validate plugin <= 1.0 - SQL Injection vulnerability8.5
- CVE-2024-43497DeepSpeed Remote Code Execution Vulnerability8.4
- CVE-2024-48544Incorrect access control in the firmware update and download processes of Sylvania Smart Home v3.0.3 allows attackers to access sensitive information by analyzing the code and data within the APK f...8.4
- CVE-2017-20192Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting8.3
- CVE-2024-10006Consul L7 Intentions Vulnerable To Headers Bypass8.3
- CVE-2024-50492WordPress ScottCart plugin <= 1.1 - Remote Code Execution (RCE) vulnerability8.3
- CVE-2024-20458Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities8.2
- CVE-2024-6519Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability8.2
- CVE-2024-47881OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE)8.1
- CVE-2024-48074An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin...8.0
- CVE-2024-35288Nitro PDF Pro before 13.70.8.82 and 14.x before 14.26.1.0 allows Local Privilege Escalation in the MSI Installer because custom actions occur unsafely in repair mode. CertUtil is run in a conhost.e...7.8
- CVE-2024-45470A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All ve...7.8
- CVE-2024-49299WordPress Surfer plugin <= 1.5.0.502 - SQL Injection vulnerability7.6
- CVE-2024-44018WordPress Instant Chat WP plugin <= 1.0.5 - Local File Inclusion vulnerability7.5
- CVE-2024-46304A NULL pointer dereference in libcoap v4.3.5-rc2 and below allows a remote attacker to cause a denial of service via the coap_handle_request_put_block function in src/coap_block.c.7.5
- CVE-2024-49769Waitress has a denial of service leading to high CPU usage/resource exhaustion7.5
- CVE-2024-7783Improper Storage of Sensitive Information in Bearer Token in mintplex-labs/anything-llm7.5
- CVE-2019-25214ShopWP <= 2.0.4 - Missing Authorization to Stored Cross-Site Scripting7.2
- CVE-2024-45330A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5 allows attacker to escalate its privileges via specially crafted requests.7.2
- CVE-2024-45933OnlineNewsSite v1.0 is vulnerable to Cross Site Scripting (XSS) which allows attackers to execute arbitrary code via the Title and summary fields in the /admin/post/edit/ endpoint.6.6
- CVE-2024-48987Snipe-IT before 7.0.10 allows remote code execution (associated with cookie serialization) when an attacker knows the APP_KEY. This is exacerbated by .env files, available from the product's reposi...6.6
- CVE-2024-6657BLE peripheral DoS after few cycles of connect/disconnects6.5
- CVE-2024-9793Tenda AC1206 ate ate_ifconfig_set command injection6.3
- CVE-2024-28709Cross Site Scripting vulnerability in LimeSurvey before 6.5.12+240611 allows a remote attacker to execute arbitrary code via a crafted script to the title and comment fields.6.1
- CVE-2024-43795OpenC3 COSMOS vulnerable to cross-site scripting in Login functionality (`GHSL-2024-128`)6.1
- CVE-2024-8719Flexmls® IDX Plugin <= 3.14.22 - Reflected Cross-Site Scripting6.1
- CVE-2024-47491Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash5.9
- CVE-2024-31228Denial-of-service due to unbounded pattern matching in Redis5.5
- CVE-2024-47635WordPress TinyPNG plugin <= 3.4.3 - Cross Site Request Forgery (CSRF) vulnerability5.4
- CVE-2024-10544Woo Manage Fraud Orders <= 2.6.1 - Unauthenticated Information Exposure via Log Files5.3
- CVE-2024-49580In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure5.3
- CVE-2024-50334Semicolon Path Injection on API /api;/config5.3
- CVE-2024-47313WordPress Catch Base theme <= 3.4.6 - Cross Site Scripting (XSS) vulnerability5.1
- CVE-2024-9649WP ULike <= 4.7.4 - Cross-Site Request Forgery to Statistic Deletion4.3
- CVE-2024-8925Erroneous parsing of multipart form data3.1
- CVE-2024-41156Profile files from TRO600 series radios are extracted in plain-text and encrypted file formats. Profile files provide potential attackers valuable configuration information about the Tropos network...2.7