CVE Tools
Sign in
month report

October 2024

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

October 2024 closed with 3,667 published CVEs — +32.7% YoY . 364 criticals, 17 added to CISA KEV (4 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via linux. Biggest breakout: cisco at ×4.5 their 12-month median. Top weakness class — CWE-79 (735 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
3,667
— MoM+32.7% YoY
Severity mix
364 / 1,290
critical / high
KEV added
17
4 ransomware-linked
Nuclei coverage
25.3%
926 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
505.3
n=926
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
3
n=17
Detection gap

KEV pressure, no Nuclei coverage

October 2024 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in October 2024

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS89SQL Injection416Use After Free862Missing Authorization476NULL Pointer Dereference787Out-of-bounds Write22Path Traversal434Unrestricted File Upload863Incorrect Authorization125Out-of-bounds Readсообщество свободного программного обеспечения11279298169217linux699811110ооо «русбитех-астра»24715414310ао «нппкт»250491238ооо «ред софт»24143144111canonical ltd.2151817red hat inc.227197412microsoft corp31192212microsoft41122212ао «ивк»18186217novell inc.7121112cisco184421122

Most discussed CVEs — October 2024

No CVE mentions in the news this month yet.

Breakout vendors

CVE count ≥3× their own 12-period median.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    542 CVE19 critCVSS 6.3
    KEV 2Nuclei 5PoC 30
    linux (419) · debian gnu/linux (365) · ollama (4)
  • 2linux—
    415 CVE1 critCVSS 6.1
    linux (415) · linux kernel (415)
  • 3ооо «русбитех-астра»—
    312 CVE7 critCVSS 6.4
    KEV 1PoC 7
    astra linux special edition (308) · astra linux common edition (52) · astra linux special edition для «эльбрус» (5)
  • 4ао "нппкт"—
    306 CVE7 critCVSS 6.3
    KEV 1PoC 9
    осон основа оnyx (306)
  • 5ооо «ред софт»—
    302 CVE6 critCVSS 6.2
    KEV 1Nuclei 2PoC 16
    ред ос (302)
  • 6canonical—
    234 CVECVSS 6.1
    PoC 4
    ubuntu (229) · juju (3) · authd (2)
  • 7redhat—
    212 CVE5 critCVSS 6.4
    Nuclei 1PoC 5
    red hat enterprise linux (181) · red hat enterprise linux 8 (11) · red hat enterprise linux 9 (11)
  • 8microsoft—
    152 CVE2 critCVSS 7.4
    KEV 3PoC 5
    windows server 2022, 23h2 edition (server core installation) (87) · windows server 2022 23h2 (87) · windows server 2019 (server core installation) (80)
  • 9ао «ивк»—
    130 CVE2 critCVSS 5.9
    KEV 1PoC 2
    альт 8 сп (109) · альт сп 10 (45)
  • 10novell inc.—
    100 CVE1 critCVSS 5.7
    ×3.7PoC 1
    opensuse leap (82) · suse linux enterprise desktop (76) · suse linux enterprise server for sap applications (76)
  • 11cisco—
    94 CVE4 critCVSS 6.7
    ×4.5KEV 1PoC 94
    cisco firepower threat defense software (25) · secure firewall management center (25) · firepower threat defense (25)
  • 12oracle—
    88 CVE2 critCVSS 5.9
    mysql (28) · mysql server (25) · e-business suite (17)
  • 13apple—
    84 CVE3 critCVSS 6.0
    macos (67) · ios and ipados (41) · iphone os (40)
  • 14google—
    78 CVE5 critCVSS 7.2
    PoC 3
    android (49) · google chrome (22) · chrome (21)
  • 15packagist—
    72 CVE4 critCVSS 5.9
    Nuclei 1PoC 9
    magento/community-edition (20) · funadmin/funadmin (11) · librenms/librenms (6)
  • 16go—
    65 CVE4 critCVSS 6.5
    Nuclei 3PoC 4
    github.com/rancher/rancher (6) · github.com/juju/juju (6) · github.com/mattermost/mattermost/server/v8 (5)
  • 17dlink—
    55 CVE2 critCVSS 8.4
    ×4.2PoC 40
    dir-605l (21) · dir-605l firmware (21) · dir-619l (18)
  • 18adobe—
    54 CVE1 critCVSS 6.1
    magento (22) · commerce (22) · adobe commerce (22)
  • 19npm—
    53 CVE9 critCVSS 6.9
    Nuclei 2PoC 10
    @saltcorn/server (5) · dompurify (2) · @openc3/tool-common (2)
  • 20pypi—
    45 CVE8 critCVSS 6.9
    PoC 11
    gradio (13) · lollms (3) · open-webui (3)
  • 21maven—
    44 CVE7 critCVSS 7.0
    Nuclei 3PoC 4
    com.liferay.portal:release.dxp.bom (5) · com.liferay.portal:release.portal.bom (5) · org.openrefine:openrefine (4)
  • 22code-projects—
    42 CVECVSS 5.6
    PoC 42
    pharmacy management system (14) · blood bank management system (10) · blood bank system (9)
  • 23d-link—
    40 CVECVSS 8.6
    PoC 37
    dir-605l (21) · dir-619l b1 (18) · dsl-2750u (1)
  • 24phpgurukul—
    40 CVE4 critCVSS 5.9
    ×3.1PoC 28
    boat booking system (11) · medical card generation system (6) · user registration \& login and user management system (5)
  • 25siemens—
    35 CVE3 critCVSS 5.8
    PoC 1
    tecnomatix plant simulation (14) · teamcenter visualization v14.3 (14) · teamcenter visualization v14.2 (14)
  • 26sourcecodester—
    30 CVECVSS 5.7
    PoC 27
    online eyewear shop (7) · petrol pump management software (5) · online hotel reservation system (3)
  • 27draytek—
    29 CVE6 critCVSS 7.4
    NEWPoC 3
    vigor 2866 (14) · vigor 2620 (14) · vigor 2865 (14)
  • 28ооо «открытая мобильная платформа»—
    29 CVE1 critCVSS 7.8
    ос аврора (29)
  • 29juniper—
    28 CVECVSS 6.6
    PoC 28
    junos os evolved (17) · junos (16) · junos containerized routing protocol daemon (1)
  • 30juniper networks—
    28 CVECVSS 6.7
    PoC 28
    junos os evolved (18) · junos os (17) · junos (17)
  • 31mozilla—
    28 CVE5 critCVSS 7.4
    KEV 1
    firefox (27) · thunderbird (23) · firefox esr (21)
  • 32autodesk—
    24 CVECVSS 7.8
    autocad electrical (22) · advance steel (22) · autocad (22)
  • 33esafenet—
    24 CVECVSS 6.2
    NEWPoC 23
    cdg (24)
  • 34ао «нтц ит роса»—
    23 CVECVSS 6.3
    PoC 3
    роса хром (10) · роса кобальт (10) · rosa virtualization 3.0 (5)
  • 35fedora project—
    22 CVECVSS 5.9
    fedora (22)
  • 36codezips—
    21 CVECVSS 6.9
    NEWPoC 20
    pet shop management system (6) · sales management system (6) · tourist management system (2)
  • 37autodesk inc.—
    20 CVECVSS 7.8
    autocad plant 3d (20) · autodesk civil 3d (20) · autocad (20)
  • 38qualcomm—
    20 CVE1 critCVSS 7.8
    KEV 1
    wsa8835 firmware (14) · wsa8830 firmware (14) · fastconnect 7800 firmware (12)
  • 39qualcomm, inc.—
    20 CVE1 critCVSS 7.5
    KEV 1
    snapdragon (20)
  • 40jetbrains—
    18 CVECVSS 4.8
    youtrack (11) · teamcity (5) · hub (1)
  • 41mitel—
    17 CVE5 critCVSS 7.7
    NEWKEV 1Nuclei 2PoC 1
    micollab (16) · mivoice business solution virtual instance (3) · micontact center business (1)
  • 42nuget—
    17 CVECVSS 6.6
    PoC 1
    umbraco.cms (4) · opcfoundation.netstandard.opc.ua (2) · opcfoundation.netstandard.opc.ua.core (2)
  • 43debian—
    16 CVE2 critCVSS 7.8
    KEV 1
    debian linux (16)
  • 44apache—
    15 CVE1 critCVSS 7.1
    Nuclei 1
    cloudstack (4) · solr (2) · syncope (1)
  • 45apache software foundation—
    15 CVE1 critCVSS 7.2
    Nuclei 1
    apache cloudstack (3) · apache solr (2) · apache avro java sdk (1)
  • 46fabian—
    15 CVECVSS 5.7
    PoC 15
    blood bank management system (12) · hospital management system (3)
  • 47mitel networks corp.—
    15 CVE5 critCVSS 7.7
    NEW×3.0KEV 1Nuclei 2PoC 1
    mitel micollab (15) · mivoice business solution virtual instance (mivb svi) (3)
  • 48suse—
    15 CVE1 critCVSS 7.0
    rancher (6) · opensuse tumbleweed (4) · opensuse leap 15.5 (3)
  • 49mediatek, inc.—
    14 CVE3 critCVSS 6.5
    mt6761, mt6765, mt6768, mt6779, mt6785, mt6853, mt6873, mt6885, mt8385, mt8666, mt8667, mt8766, mt8768, mt8781, mt8788, mt8789 (4) · mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8666, mt8667, mt8673, mt8675, mt8678 (2) · mt3605, mt6985, mt6989, mt6990, mt7927, mt8183, mt8512, mt8676, mt8678, mt8695, mt8698, mt8755, mt8775, mt8792, mt8796 (1)
  • 50ivanti—
    13 CVECVSS 7.6
    KEV 2
    avalanche (5) · csa (cloud services appliance) (3) · ivanti cloud services appliance (3)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79735—
2CWE-89273—
3CWE-416121—
4CWE-862120—
5CWE-476118—
6CWE-787117—
7CWE-22107—
8CWE-43496—
9CWE-86390—
10CWE-12589—
11CWE-35288—
12CWE-12083—
13CWE-9468—
14CWE-20067—
15CWE-7867—
16CWE-7759—
17CWE-30649—
18CWE-2046—
19CWE-28444—
20CWE-12241—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins978 CVE
    128 crit2 KEV869 vendorsCVSS 6.9
    seopress (6) · wp easy post types (6) · bold page builder (4)
  • Operating Systems891 CVE
    103 crit121 KEV35 vendorsCVSS 7.8
    linux (834) · linux kernel (415) · debian gnu/linux (365)
  • OSS Libraries432 CVE
    53 crit94 vendorsCVSS 7.0
    magento/community-edition (20) · funadmin/funadmin (11) · librenms/librenms (6)
  • Enterprise Software340 CVE
    71 crit5 KEV106 vendorsCVSS 8.7
    cacti (8) · checkmk (6) · librenms (6)
  • Networking Infrastructure313 CVE
    91 crit8 KEV53 vendorsCVSS 7.4
    junos os evolved (53) · cisco firepower management center (44) · firepower threat defense (38)
  • Mobile Apps179 CVE
    25 crit10 vendorsCVSS 8.1
    android (55) · google chrome (22) · chrome (21)
  • Security Products165 CVE
    28 crit14 KEV60 vendorsCVSS 7.5
    passwork (6) · application automation tools (5) · avanpost idm (5)
  • Consumer Software136 CVE
    35 crit5 KEV28 vendorsCVSS 7.5
    adobe commerce (44) · autocad (42) · autocad architecture (42)
  • Hardware Firmware118 CVE
    405 crit128 KEV33 vendorsCVSS 7.8
    vgpu (8) · timeprovider 4100 (7) · timeprovider 4100 firmware (7)
  • Databases111 CVE
    35 crit16 vendorsCVSS 9.8
    mysql server (50) · e-business suite (30) · mysql (29)
  • ICS / OT / IoT95 CVE
    127 crit55 vendorsCVSS 9.3
    mbnet.mini (5) · rex 100 firmware (5) · rex100 (5)
  • Cloud & SaaS82 CVE
    17 crit61 vendorsCVSS 7.0
    lylme spage (5) · namaste! lms (4) · elabftw (3)
  • AI / ML72 CVE
    26 crit30 vendorsCVSS 8.8
    chuanhuchatgpt (5) · gaizhenbiao/chuanhuchatgpt (5) · open webui (5)
  • DevTools & CI66 CVE
    7 crit26 vendorsCVSS 6.8
    jetty (4) · anka build (3) · anka build cloud (3)
  • Communications54 CVE
    20 crit4 KEV33 vendorsCVSS 8.6
    mattermost (6) · mattermost server (4) · team\+ pro (3)
  • Unclassified312 CVE
    39 crit259 vendorsCVSS 7.1
    dir-605l (21) · dir-619l b1 (18) · cute png (8)
Weakness × Sector

Which weaknesses hit which solution categories in October 2024

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS89SQL Injection416Use After Free862Missing Authorization476NULL Pointer Dereference787Out-of-bounds Write22Path Traversal434Unrestricted File Upload863Incorrect Authorization125Out-of-bounds ReadWeb & CMS Plugins48114080365411Operating Systems14199111044791454OSS Libraries6912738245146Enterprise Software896712719201Networking Infrastructure286157206143Consumer Software22624313037510Security Products1332434714ICS / OT / IoT6721210428Hardware Firmware5292106421Cloud & SaaS219111514