CVE Tools
Sign in
month report

August 2024

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

August 2024 closed with 3,024 published CVEs. 331 criticals, 19 added to CISA KEV (1 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via linux. Top weakness class — CWE-79 (517 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
3,024
— MoM— YoY
Severity mix
331 / 1,035
critical / high
KEV added
19
1 ransomware-linked
Nuclei coverage
18.0%
545 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
565.3
n=545
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
17
n=21
Detection gap

KEV pressure, no Nuclei coverage

August 2024 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in August 2024

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS89SQL Injection787Out-of-bounds Write352CSRF476NULL Pointer Dereference22Path Traversal284CWE-284416Use After Free125Out-of-bounds Read200Information Exposureсообщество свободного программного обеспечения8126873238121ооо «ред софт»41963340121linux984339ооо «русбитех-астра»3125502256ао «нппкт»317402297canonical ltd.436165microsoft corp6113723121sourcecodester326552red hat inc.12362microsoft443814101adobe14153521819oretnom2394951

Most discussed CVEs — August 2024

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    410 CVE12 critCVSS 6.0
    NEWKEV 2Nuclei 5PoC 12
    linux (303) · debian gnu/linux (268) · ofono (7)
  • 2ооо «ред софт»—
    338 CVE9 critCVSS 6.2
    NEWKEV 3Nuclei 1PoC 8
    ред ос (338)
  • 3linux—
    302 CVE1 critCVSS 5.8
    NEWPoC 1
    linux (302) · linux kernel (302)
  • 4ооо «русбитех-астра»—
    258 CVE5 critCVSS 6.4
    NEWKEV 2PoC 6
    astra linux special edition (249) · astra linux common edition (58) · astra linux special edition для «эльбрус» (10)
  • 5ао "нппкт"—
    230 CVE3 critCVSS 6.3
    NEWKEV 2PoC 3
    осон основа оnyx (230)
  • 6canonical—
    146 CVE2 critCVSS 5.9
    NEWPoC 1
    ubuntu (146) · wpa_supplicant (1)
  • 7microsoft—
    144 CVE10 critCVSS 7.7
    NEWKEV 8PoC 4
    windows server 2022 (59) · windows server 2022, 23h2 edition (server core installation) (57) · windows server 2022 (server core installation) (56)
  • 8redhat—
    121 CVECVSS 6.3
    NEWPoC 1
    red hat enterprise linux (108) · red hat enterprise linux 9 (7) · red hat enterprise linux 8 (7)
  • 9sourcecodester—
    114 CVECVSS 5.4
    NEWPoC 114
    simple realtime quiz system (12) · car driving school management system (12) · clinics patient management system (10)
  • 10adobe—
    90 CVE1 critCVSS 6.4
    NEW
    magento (23) · magento open source (23) · commerce (23)
  • 11oretnom23—
    68 CVE2 critCVSS 6.0
    NEWPoC 67
    simple realtime quiz system (12) · car driving school management system (12) · clinic\'s patient management system (10)
  • 12google—
    65 CVE3 critCVSS 7.4
    NEWKEV 2PoC 1
    google chrome (48) · chrome (46) · android (14)
  • 13go—
    62 CVE4 critCVSS 6.3
    NEWNuclei 4PoC 2
    github.com/mattermost/mattermost/server/v8 (17) · github.com/mattermost/mattermost (3) · github.com/cosmwasm/wasmd (3)
  • 14tenda—
    59 CVE14 critCVSS 8.5
    NEWPoC 32
    fh1206 firmware (23) · ax1806 firmware (11) · fh1201 firmware (11)
  • 15ао «ивк»—
    58 CVE5 critCVSS 6.6
    NEWPoC 1
    альт сп 10 (55) · альт 8 сп (15)
  • 16intel—
    55 CVECVSS 6.0
    NEWPoC 1
    intel oneapi base toolkit (9) · oneapi base toolkit (8) · intel 600 series chipset (5)
  • 17packagist—
    49 CVE1 critCVSS 5.9
    NEWNuclei 2PoC 5
    magento/community-edition (22) · magento/project-community-edition (17) · shopware/platform (4)
  • 18ао «нтц ит роса»—
    49 CVE5 critCVSS 7.1
    NEWPoC 2
    rosa virtualization 3.0 (36) · роса кобальт (12) · rosa virtualization (7)
  • 19unknown—
    44 CVE5 critCVSS 6.2
    NEWNuclei 43PoC 44
    wp-cart-for-digital-products (3) · woocommerce customers manager (3) · chatbot with chatgpt wordpress (2)
  • 20janobe—
    42 CVE18 critCVSS 8.8
    NEWPoC 4
    school event management system (28) · school attendence monitoring system (22) · credit card (18)
  • 21totolink—
    42 CVE11 critCVSS 8.6
    NEWNuclei 3PoC 26
    x5000r firmware (12) · ex1200l (5) · ac1200 t8 (5)
  • 22pypi—
    40 CVE1 critCVSS 6.8
    NEWPoC 4
    mage-ai (5) · django (4) · ckan (3)
  • 23itsourcecode—
    38 CVECVSS 6.2
    NEWPoC 34
    tailoring management system (5) · airline reservation system (5) · project expense monitoring system (5)
  • 24lopalopa—
    38 CVE8 critCVSS 7.2
    NEWPoC 15
    music management system (17) · responsive school management system (17) · live membership system (4)
  • 25samsung—
    34 CVECVSS 5.7
    NEWKEV 1Nuclei 1
    android (16) · notes (15) · wear os (1)
  • 26dlink—
    33 CVE7 critCVSS 7.3
    NEWNuclei 1PoC 31
    dnr-202l firmware (18) · dns-726-4 firmware (18) · dns-345 firmware (18)
  • 27samsung mobile—
    33 CVECVSS 5.6
    NEW
    samsung mobile devices (17) · samsung notes (15) · samsung email (1)
  • 28npm—
    32 CVE4 critCVSS 6.9
    NEWNuclei 3PoC 2
    directus (3) · elliptic (3) · flowise (2)
  • 29qualcomm—
    32 CVECVSS 7.6
    NEW
    wcd9380 firmware (31) · qca6698aq firmware (31) · fastconnect 6900 firmware (31)
  • 30qualcomm, inc.—
    32 CVECVSS 7.7
    NEW
    snapdragon (32)
  • 31ibm—
    31 CVECVSS 6.0
    NEW
    qradar suite software (4) · db2 (4) · db2 for linux, unix and windows (4)
  • 32amd—
    30 CVECVSS 6.3
    NEW
    amd radeon™ pro w6000 series graphics cards (9) · amd radeon™ rx 6000 series graphics cards (9) · amd ryzen™ embedded r1000 series processors (8)
  • 33novell inc.—
    28 CVE2 critCVSS 6.4
    NEWKEV 2
    opensuse leap (24) · opensuse tumbleweed (23) · suse package hub (16)
  • 34maven—
    27 CVE8 critCVSS 7.5
    NEWNuclei 1PoC 2
    org.openhab.ui.bundles:org.openhab.ui.cometvisu (4) · org.apache.dolphinscheduler:dolphinscheduler (2) · org.apache.linkis:linkis (2)
  • 35shenzhen tenda technology co., ltd.—
    25 CVE1 critCVSS 8.4
    NEWPoC 16
    tenda fh1206 (9) · tenda fh1201 (4) · tenda o6 (3)
  • 36d-link—
    24 CVECVSS 7.0
    NEWPoC 24
    dns-726-4 (21) · dns-343 (21) · dns-345 (21)
  • 37siemens—
    24 CVE2 critCVSS 7.0
    NEWNuclei 1PoC 1
    sinec traffic analyzer (5) · sinec nms (5) · omnivise t3000 application server (4)
  • 38ооо «неткэт»—
    23 CVE5 critCVSS 8.6
    NEW
    cms netcat extra (23)
  • 39cisco—
    21 CVE3 critCVSS 7.5
    NEWPoC 19
    nx-os (7) · cisco nx-os software (7) · cisco small business spa300 series ip phones (5)
  • 40mattermost—
    21 CVECVSS 5.0
    NEW
    mattermost (21) · mattermost server (8) · mattermost channel export (1)
  • 41apache—
    20 CVE4 critCVSS 7.5
    NEWKEV 1Nuclei 2PoC 1
    dolphinscheduler (3) · linkis (2) · hertzbeat (2)
  • 42dell—
    20 CVECVSS 6.4
    NEWPoC 2
    emc idrac service module (5) · idrac service module (ism) (5) · poweredge t440 firmware (2)
  • 43manageengine—
    20 CVECVSS 7.9
    NEW
    adaudit plus (13) · endpoint central (2) · exchange reporter plus (1)
  • 44opentext—
    20 CVE1 critCVSS 7.2
    NEW
    netiq advance authentication (6) · arcsight intelligence (3) · performance center (2)
  • 45zohocorp—
    20 CVECVSS 8.0
    NEW
    manageengine adaudit plus (13) · manageengine supportcenter plus (2) · manageengine servicedesk plus (2)
  • 46apache software foundation—
    18 CVE4 critCVSS 7.3
    NEWKEV 1Nuclei 2PoC 1
    apache dolphinscheduler (3) · apache cloudstack (2) · apache answer (2)
  • 47mozilla—
    18 CVE2 critCVSS 7.9
    NEW
    firefox (18) · firefox esr (12) · thunderbird (10)
  • 48angeljudesuarez—
    17 CVECVSS 6.5
    NEWPoC 17
    airline reservation system (5) · placement management system (4) · tailoring management system (4)
  • 49code-projects—
    17 CVECVSS 6.7
    NEWNuclei 1PoC 16
    pharmacy management system (4) · job portal (3) · online quiz site (2)
  • 50sap—
    17 CVE1 critCVSS 5.5
    NEW
    sap business objects business intelligence platform (4) · business objects business intelligence platform (4) · sap netweaver as abap (2)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79517—
2CWE-89286—
3CWE-787158—
4CWE-352121—
5CWE-476106—
6CWE-2296—
7CWE-28491—
8CWE-41685—
9CWE-12583—
10CWE-20081—
11CWE-7869—
12CWE-12168—
13CWE-86266—
14CWE-43461—
15CWE-2057—
16CWE-9454—
17CWE-12051—
18CWE-7750—
19CWE-12239—
20CWE-26937—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins842 CVE
    118 crit3 KEV469 vendorsCVSS 7.7
    cms netcat extra (23) · pligg cms (16) · car driving school management system (12)
  • Operating Systems726 CVE
    268 crit280 KEV34 vendorsCVSS 7.8
    linux (605) · ред ос (338) · linux kernel (302)
  • Enterprise Software601 CVE
    196 crit8 KEV114 vendorsCVSS 8.1
    zabbix (16) · adaudit plus (13) · manageengine adaudit plus (13)
  • OSS Libraries313 CVE
    27 crit70 vendorsCVSS 7.5
    github.com/mattermost/mattermost/server/v8 (17) · github.com/casdoor/casdoor (3) · github.com/cilium/cilium (3)
  • Networking Infrastructure249 CVE
    286 crit3 KEV56 vendorsCVSS 7.8
    fh1206 firmware (23) · dnr-202l firmware (18) · dnr-322l firmware (18)
  • Hardware Firmware182 CVE
    43 crit37 vendorsCVSS 7.6
    amd radeon™ pro w6000 series graphics cards (9) · amd radeon™ rx 6000 series graphics cards (9) · intel oneapi base toolkit (9)
  • Consumer Software155 CVE
    19 crit2 KEV37 vendorsCVSS 8.6
    adobe commerce (46) · adobe experience manager (26) · commerce (23)
  • Security Products126 CVE
    21 crit4 KEV49 vendorsCVSS 8.1
    netiq advanced authentication (6) · vynamic security suite (6) · casdoor (5)
  • Mobile Apps114 CVE
    8 crit5 KEV8 vendorsCVSS 9.6
    google chrome (48) · chrome (46) · android (30)
  • ICS / OT / IoT93 CVE
    33 crit2 KEV50 vendorsCVSS 8.1
    guardlogix 5580 (5) · microscada x sys600 (5) · twincat/bsd (5)
  • Communications77 CVE
    5 crit22 KEV30 vendorsCVSS 8.1
    mattermost (21) · mattermost server (8) · olm (3)
  • Cloud & SaaS64 CVE
    16 crit37 vendorsCVSS 7.2
    caterease (11) · bus ticket reservation system (6) · meetinghub paperless meetings (4)
  • DevTools & CI49 CVE
    7 crit26 vendorsCVSS 8.3
    gitlab (26) · github enterprise server (6) · enterprise server (3)
  • Databases32 CVE
    1 crit19 vendorsCVSS 6.9
    ckan (3) · dream report (2) · dream report 2023 (2)
  • AI / ML26 CVE
    5 crit19 vendorsCVSS 8.3
    llama.cpp (6) · open webui (4) · anythingllm (1)
  • Unclassified201 CVE
    32 crit118 vendorsCVSS 6.9
    dnr-202l (21) · dnr-322l (21) · dnr-326 (21)
Weakness × Sector

Which weaknesses hit which solution categories in August 2024

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS89SQL Injection787Out-of-bounds Write352CSRF476NULL Pointer Dereference22Path Traversal284CWE-284416Use After Free125Out-of-bounds Read200Information ExposureWeb & CMS Plugins32514618039734Operating Systems824519121064254Enterprise Software1361672862211OSS Libraries4889831527517Consumer Software151137459629365Networking Infrastructure9668246412Hardware Firmware1201289213ICS / OT / IoT868110425Security Products943510319Communications92122216226