Month report
March 2024
Rolled up 2026-08-09 20:45 from 371,001 CVE records
3,299 CVEs published, +32.6% on the same month last year. 293 rated critical, 10 listed by CISA as exploited. linux led with 235; the most common weakness class was CWE-79 (785). phpgurukul climbed 67 places, the largest move. 12 vendors ranked for the first time.
Published
3,299
Critical / high
293 / 1,122
Medium / low
1,623 / 139
Added to CISA KEV
10
Public exploit
136
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
53
Listed within 7 days
37.5%
Listed within 30 days
50%
Detection gap
Listed as exploited, no public template
Listed this month
10
With a template
5
No template
5
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 235 | 6 | linux (235) · simatic s7 1500 tm mfp gnu linux subsystem (7) · linux kernel (5) | — | |||
| 2 | tenda | 134 | 15 | fh1202 firmware (18) · ac15 (17) · fh1203 firmware (17) | ↑43 | |||
| 3 | sourcecodester | 97 | 6 | 24 | customer support system (14) · employee task management system (12) · online mobile management store (9) | ↑14 | ||
| 4 | apple | 86 | 3 | 2 | 4 | macos (75) · ios and ipados (50) · tvos (28) | ↑10 | |
| 5 | 76 | 5 | 3 | android (61) · chrome (15) · fedora (8) | ↓1 | |||
| 6 | microsoft | 69 | 2 | 2 | 5 | windows 11 version 22h2 (37) · windows 11 version 22h3 (37) · windows 11 version 23h2 (37) | ↓3 | |
| 7 | ibm | 62 | 1 | secure proxy (6) · ds8900f (4) · security verify directory (4) | ↓5 | |||
| 8 | adobe | 56 | 1 | 2 | adobe experience manager (44) · experience manager (17) · experience manager cloud service (15) | ↑3 | ||
| 9 | campcodes | 54 | online job finder system (20) · complete online dj booking system (9) · online examination system (8) | · | ||||
| 10 | dell | 39 | powerscale onefs (10) · secure connect gateway scg policy manager (6) · poweredge platform (5) | ↓5 | ||||
| 11 | cisco | 34 | 1 | cisco ios xe software (13) · cisco ios xr software (8) · ios xe (8) | ↑22 | |||
| 12 | dedecms | 29 | 1 | dedecms (29) | new | |||
| 13 | apache | 28 | 5 | 2 | apache pulsar (5) · apache airflow (3) · apache archiva (3) | ↓5 | ||
| 14 | magesh k21 | 22 | online college event hall reservation system (22) | new | ||||
| 15 | qualcomm | 22 | 4 | 1 | snapdragon (22) · fastconnect 6900 firmware (19) · fastconnect 7800 firmware (19) | ↑1 | ||
| 16 | freeimage project | 21 | freeimage (21) | new | ||||
| 17 | mediatek | 21 | 2 | 1 | mt6761 (6) · mt6765 (6) · mt6768 (6) | ↑8 | ||
| 18 | redhat | 21 | 1 | 2 | red hat enterprise linux 8 (15) · red hat enterprise linux 7 (14) · red hat enterprise linux 9 (14) | ↓5 | ||
| 19 | siemens | 18 | 3 | 1 | simatic s7 1500 tm mfp gnu linux subsystem (8) · linux (7) · cerberus pro en engineering tool (3) | ↓12 | ||
| 20 | amssplus | 16 | 1 | amss (16) · amss plus (9) | new | |||
| 21 | jenkins project | 16 | 1 | jenkins html publisher plugin (3) · jenkins delphix plugin (2) · jenkins docker build step plugin (2) | · | |||
| 22 | metagauss | 16 | 1 | eventprime events calendar bookings and tickets (7) · eventprime (4) · profilegrid (4) | · | |||
| 23 | mozilla | 16 | 2 | 1 | firefox (14) · firefox esr (11) · thunderbird (11) | ↓3 | ||
| 24 | jetbrains | 15 | 1 | 2 | 1 | teamcity (12) · youtrack (3) | ↑16 | |
| 25 | synology | 15 | 1 | surveillance station (15) | · | |||
| 26 | opentext | 14 | 3 | exceed turbo x (3) · asset management x amx (2) · pvcs version manager (2) | · | |||
| 27 | realmag777 | 14 | wordpress meta data and taxonomies filter mdtf (4) · bear (3) · husky products filter professional for woocommerce (3) | ↑28 | ||||
| 28 | samsung mobile | 14 | samsung mobile devices (8) · samsung internet (3) · android (2) | ↓7 | ||||
| 29 | bdtask | 13 | 1 | g prescription gynaecology obs consultation software (4) · multi store inventory management system (4) · hospita automanager (2) | new | |||
| 30 | phoenix contact | 13 | 1 | charx sec 3000 (13) · charx sec 3050 (13) · charx sec 3100 (13) | · | |||
| 31 | phpgurukul | 13 | 2 | 2 | emergency ambulance hiring portal (8) · hotel booking management system (2) · online marriage registration system (2) | ↑67 | ||
| 32 | ailux | 12 | imx6 bundle (12) | new | ||||
| 33 | nec | 12 | 8 | cr2500p (12) · mr01ln (12) · mr02ln (12) | · | |||
| 34 | code projects | 11 | 3 | online book system (5) · scholars tracking system (3) · exam form submission (1) | ↓7 | |||
| 35 | netentsec | 11 | ns asg application security gateway (11) · application security gateway (7) · ns asg firmware (1) | · | ||||
| 36 | delta electronics | 10 | diaenergie (9) · cncsoft b (1) | · | ||||
| 37 | fedoraproject | 10 | 1 | 1 | fedora (10) · chrome (8) · bluexp (1) | ↓9 | ||
| 38 | geoserver | 10 | 1 | geoserver (10) | new | |||
| 39 | keerti1924 | 10 | online book store website (6) · online bookstore (4) · php mysql user login system (2) | new | ||||
| 40 | phoenixcontact | 10 | 1 | charx sec 3000 (10) · charx sec 3050 (10) · charx sec 3100 (10) | · | |||
| 41 | rockwell automation | 10 | arena simulation (6) · powerflex 527 (3) · arena simulation software (2) | · | ||||
| 42 | sentrifugo | 10 | 7 | sentrifugo (10) | new | |||
| 43 | fortinet | 9 | 2 | 1 | 2 | fortios (4) · fortiproxy (3) · forticlientems (2) | ↓14 | |
| 44 | hewlett packard enterprise hpe | 9 | arubaos wi fi controllers and campus remote access points (7) · arubaos (5) · sd wan (5) | ↓5 | ||||
| 45 | wpdevteam | 9 | embedpress pdf embedder embed youtube videos 3d flipbook social feeds docs more (4) · essential addons for elementor popular elementor templates widgets (3) · gutenberg essential blocks page builder for gutenberg blocks patterns (2) | ↓9 | ||||
| 46 | bdthemes | 8 | prime slider addons for elementor (5) · element pack elementor addons (3) · prime slider (1) | new | ||||
| 47 | devolutions | 8 | 1 | server (6) · devolutions server (2) · remote desktop manager (1) | · | |||
| 48 | rockwellautomation | 8 | arena simulation (5) · arena simulation software (2) · powerflex 527 (2) | · | ||||
| 49 | rt thread | 8 | 1 | rt thread (7) · at server (1) | new | |||
| 50 | szlbt | 8 | 1 | lbt t300 t390 firmware (5) · lbt t300 mini firmware (3) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2024-03 that are on the CISA KEV catalog today. The 10 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-797855 critical—
- 2CWE-8925647 critical—
- 3CWE-12114410 critical↑20
- 4CWE-3521331 critical↓1
- 5CWE-8621203 critical—
- 6CWE-200754 critical↑2
- 7CWE-4347028 critical—
- 8CWE-7876512 critical↓2
- 9CWE-284599 critical↓5
- 10CWE-20575 critical↑1
- 1CWE-125535 critical↑4
- 2CWE-22526 critical↓3
- 3CWE-5024714 critical↑7
- 4CWE-269468 critical↑10
- 5CWE-78439 critical↓5
- 6CWE-416425 critical↓3
- 7CWE-943910 critical↓3
- 8CWE-1203511 critical↑1
- 9CWE-400351 critical↓7
- 10CWE-476322 critical↓3
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.