April 2024
3,769 CVEs published, +12% on March 2024 and +60% on April 2023. CISA added 10 to KEV.
2024 month by month
- Critical
- 2808% of the 3,628 with a CVSS score
- Added to CISA KEV
- 108 of this month's CVEs are in KEV, listed a median 4.5 days after publication
- Vendors
- 1,4864,455 products
- Top weakness
- XSSCWE-79 · 619 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1Сообщество Свободного Программного ОбеспеченияLinux, Debian Gnu/linux, Xwiki Platform47416nonenew
- 2LinuxLinux Kernel, Linux3580nonenew
- 3Ооо «ред Софт»Ред Ос33310nonenew
- 4Ао "нппкт"Осон Основа Оnyx2797nonenew
- 5Ооо «русбитех-астра»Astra Linux Special Edition, Astra Linux Common Edition, Astra Linux Special Edition Для «эльбрус»2137nonenew
- 6Red HatRed Hat Enterprise Linux, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 82102nonenew
- 7MicrosoftWindows Server 2022, 23h2 Edition (Server Core Installation), Windows Server 2022 (Server Core Installation), Windows Server 2022 23h217521new
- 8OracleE-business Suite, Complex Maintenance Repair and Overhaul, Oracle Complex Maintenance, Repair, and Overhaul1355nonenew
- 9DebianDebian Linux, Debian Based Gnu Grub1240nonenew
- 10CanonicalUbuntu, Pebble1132nonenew
- 11TendaW30E Firmware, W15E, W15E Firmware1027nonenew
- 12SourcecodesterOnline Courseware, Aplaya Beach Resort Online Reservation System, Computer Laboratory Management System870nonenew
- 13Ао «ивк»Альт Сп 10, Альт 8 Сп818nonenew
- 14GoogleAndroid, Google Chrome, Chrome7942new
- 15FedoraprojectFedora, Sssd7710nonenew
- 16UnknownSalon Booking System, Smart Forms , Woocommerce Customers Manager760nonenew
- 17Ао «нтц Ит Роса»Rosa Virtualization 3.0, Роса Кобальт, Роса Хром680nonenew
- 18PyPIMlflow, Vyper, Scrapy6612nonenew
- 19GoGithub.com/mattermost/mattermost-server, Github.com/mattermost/mattermost/server/v8, Github.com/alexxit/go2rtc643nonenew
- 20Fedora ProjectFedora623nonenew
- 21Shenzhen Tenda Technology Co., Ltd.Tenda W15E, Tenda AC500, Tenda W30E543nonenew
- 22FoxitsoftwarePdf Reader, Pdf Editor, Foxit Reader510nonenew
- 23MavenOrg.keycloak:keycloak-services, Org.apache.zeppelin:zeppelin-server, Org.xwiki.platform:xwiki-platform-oldcore50141new
- 24NetappActive Iq Unified Manager, Oncommand Workflow Automation, Oncommand Insight450nonenew
- 25Foxit Software Inc.Pdf Reader, Pdf Editor420nonenew
Severity
How this month's CVEs score on CVSS; 141 have no score yet. Severity is not exploitation.
- Critical280
- High1,221
- Medium1,949
- Low178
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS619
- CWE-352CSRF223
- CWE-89SQL Injection218
- CWE-787Out-of-bounds Write180
- CWE-121134
- CWE-125Out-of-bounds Read121
- CWE-862Missing Authorization120
- CWE-416Use After Free115
- CWE-476NULL Pointer Dereference109
- CWE-22Path Traversal99
- CWE-200Information Exposure89
- CWE-284Improper Access Control78
- CWE-94Code Injection77
- CWE-20Improper Input Validation68
- CWE-122Heap Buffer Overflow63
- CWE-120Buffer Overflow54
- CWE-434Unrestricted File Upload53
- CWE-78OS Command Injection50
- CWE-918SSRF49
- CWE-77Command Injection44
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 352CSRF | 89SQL Injection | 787Out-of-bounds Write | 121 | 125Out-of-bounds Read | 862Missing Authorization | 416Use After Free | 476NULL Pointer Dereference | 22Path Traversal |
|---|---|---|---|---|---|---|---|---|---|---|
| Сообщество Свободного Программного Обеспечения | 5 | 2 | 29 | 1 | 21 | 2 | 48 | 74 | 1 | |
| Linux | 29 | 12 | 2 | 39 | 70 | |||||
| Ооо «ред Софт» | 3 | 20 | 1 | 21 | 1 | 29 | 43 | |||
| Ао «нппкт» | 2 | 17 | 1 | 18 | 1 | 39 | 45 | |||
| Ооо «русбитех-астра» | 3 | 14 | 2 | 17 | 30 | 28 | ||||
| Red Hat Inc. | 2 | 13 | 11 | 13 | 37 | |||||
| Microsoft Corp | 4 | 4 | 10 | 14 | 17 | 2 | 1 | |||
| Microsoft | 2 | 2 | 9 | 11 | 12 | 2 | 1 | |||
| Oracle Corp. | 7 | 4 | 4 | 1 | ||||||
| Oracle | 7 | 4 | 4 | 1 | ||||||
| Oracle Corporation | 7 | 4 | 4 | 1 | ||||||
| Debian | 11 | 4 | 1 | 14 | 19 |