Month report
June 2024
Rolled up 2026-08-09 20:45 from 370,662 CVE records
3,080 CVEs published, +28.6% on the same month last year. 304 rated critical, 9 listed by CISA as exploited. linux led with 285; the most common weakness class was CWE-79 (588). parisneo climbed 52 places, the largest move. 6 vendors ranked for the first time.
Published
3,080
Critical / high
304 / 953
Medium / low
1,554 / 117
Added to CISA KEV
9
Public exploit
107
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
58
Listed within 7 days
23.1%
Listed within 30 days
23.1%
Weakness × vendor
Where the two overlap
| Vendor | CWE-79 | CWE-862 | CWE-89 | CWE-22 | CWE-352 | CWE-787 | CWE-284 | CWE-94 |
|---|---|---|---|---|---|---|---|---|
| linux | ||||||||
| adobe | 142 | 1 | 1 | 3 | ||||
| 9 | 1 | 2 | ||||||
| microsoft | 1 | |||||||
| ibm | 8 | 1 | 1 | |||||
| siemens | 1 | |||||||
| itsourcecode | 35 | 1 | ||||||
| toshiba tec | 1 | 7 |
Detection gap
Listed as exploited, no public template
Listed this month
9
With a template
4
No template
5
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 285 | 8 | 1 | 1 | linux (285) · simatic s7 1500 tm mfp gnu linux subsystem (34) · ruggedcom rst2428p (24) | — | |
| 2 | adobe | 167 | 4 | 1 | 1 | adobe experience manager (145) · experience manager (46) · experience manager cloud service (38) | ↑11 | |
| 3 | 76 | 4 | 1 | 1 | android (46) · chrome (26) · fedora (7) | ↑11 | ||
| 4 | microsoft | 55 | 1 | 2 | 5 | windows server 2019 (30) · windows server 2019 server core installation (30) · windows server 2022 (29) | ↑7 | |
| 5 | ibm | 51 | infosphere information server (12) · mq (5) · security access manager docker (5) | ↑7 | ||||
| 6 | siemens | 51 | 5 | 1 | simatic s7 1500 tm mfp gnu linux subsystem (35) · linux (34) · ruggedcom rst2428p (25) | ↓3 | ||
| 7 | itsourcecode | 44 | 2 | bakery online ordering system (4) · online book store (4) · pool of bethesda online reservation system (4) | ↑46 | |||
| 8 | toshiba tec | 43 | 6 | 1 | toshiba tec e studio multi function peripheral mfp (43) · e studio 2010 ac (35) · e studio 2015 nc (35) | new | ||
| 9 | apple | 41 | 3 | 1 | macos (33) · ios and ipados (29) · visionos (21) | ↑10 | ||
| 10 | toshibatec | 35 | 5 | e studio 2010 ac (35) · e studio 2015 nc (35) · e studio 2020 ac (35) | new | |||
| 11 | dell | 34 | powerprotect dd (10) · cpg bios (8) · secure connect gateway appliance (7) | ↑35 | ||||
| 12 | autodesk | 29 | advance steel (29) · autocad (29) · autocad architecture (29) | · | ||||
| 13 | sourcecodester | 29 | 3 | 2 | food ordering management system (5) · employee and visitor gate pass logging system (4) · employee visitor gatepass logging system (3) | ↓4 | ||
| 14 | parisneo | 27 | 8 | 2 | lollms webui (18) · parisneo lollms webui (18) · parisneo lollms (9) | ↑52 | ||
| 15 | lunary ai | 18 | 3 | lunary ai lunary (18) · lunary (16) | · | |||
| 16 | mozilla | 18 | 3 | firefox (16) · firefox esr (8) · thunderbird (8) | ↑27 | |||
| 17 | progress | 18 | 5 | 1 | 5 | whatsup gold (15) · moveit gateway (1) · moveit transfer (1) | · | |
| 18 | samsung mobile | 18 | samsung mobile devices (13) · android (5) · exynos (3) | ↑14 | ||||
| 19 | samsung | 17 | exynos 1280 (6) · exynos 1330 (6) · exynos 1380 (6) | ↑29 | ||||
| 20 | fortinet | 16 | 1 | fortios (5) · fortiweb manager (4) · fortiwebmanager (4) | ↑45 | |||
| 21 | gitlab | 16 | 1 | gitlab (16) | ↑31 | |||
| 22 | progress software | 15 | 3 | 1 | 3 | whatsup gold (15) · whatsupgold (1) | ↑45 | |
| 23 | redhat | 15 | 1 | red hat enterprise linux 8 (8) · red hat enterprise linux 9 (8) · red hat enterprise linux 7 (6) | ↑33 | |||
| 24 | mintplex labs | 14 | 4 | mintplex labs anything llm (14) · anythingllm (9) · anything llm (1) | · | |||
| 25 | salesagility | 14 | 6 | 1 | suitecrm (14) · suitecrm core (1) | · | ||
| 26 | idccms project | 13 | idccms (13) | ↑7 | ||||
| 27 | mlflow | 13 | 1 | 3 | mlflow (12) · mlflow mlflow (3) | · | ||
| 28 | schneider electric | 13 | 1 | sage 1410 (6) · sage 1430 (6) · sage 1450 (6) | · | |||
| 29 | canonical | 12 | 1 | 1 | apport (8) · netplan (1) · snapd (1) | · | ||
| 30 | nextcloud | 12 | security advisories (12) · server (1) · user oidc (1) | · | ||||
| 31 | nvidia | 12 | vgpu software and cloud gaming (6) · gpu display driver vgpu software and cloud gaming (4) · geforce (3) | · | ||||
| 32 | qualcomm | 12 | 3 | snapdragon (12) · fastconnect 7800 firmware (9) · wsa8830 firmware (8) | ↑4 | |||
| 33 | totolink | 12 | 5 | a3700r firmware (7) · a3100r (1) · a3700r (1) | ↓18 | |||
| 34 | fedoraproject | 11 | 1 | fedora (11) · chrome (7) · composer (2) | · | |||
| 35 | lfprojects | 11 | 2 | mlflow (11) · mlflow mlflow (2) | new | |||
| 36 | mediatek | 11 | 1 | mt6833 (3) · mt6835 (3) · mt6853 (3) | ↑44 | |||
| 37 | sap se | 11 | netweaver (2) · sap financial consolidation (2) · sap netweaver as java (2) | ↑20 | ||||
| 38 | trend micro | 11 | trend micro apex one (7) · trend micro apex one as a service (7) · apex one (5) | · | ||||
| 39 | absolute software | 10 | secure access (10) | new | ||||
| 40 | apache | 10 | 4 | 3 | apache allura (2) · apache submarine server core (2) · allura (1) | ↑43 | ||
| 41 | hcl software | 10 | dryice aex (4) · connections (2) · dryice optibot reset station (2) | ↑47 | ||||
| 42 | hitachi energy | 10 | 2 | foxman un (9) · unem (9) · fox61x (2) | · | |||
| 43 | mintplexlabs | 10 | 4 | mintplex labs anything llm (10) · anythingllm (9) · anything llm (1) | · | |||
| 44 | woo | 10 | woocommerce warranty requests (3) · woocommerce product vendors (2) · woocommerce ship to multiple addresses (2) | new | ||||
| 45 | asus | 9 | 3 | 1 | download master (5) · rt ax88u firmware (3) · rt ac68u (2) | ↑30 | ||
| 46 | brainstorm force | 9 | spectra (4) · astra bulk edit (1) · convert pro (1) | ↑38 | ||||
| 47 | codepeople | 9 | wp time slots booking form (3) · contact form email (2) · calculated fields form (1) | · | ||||
| 48 | gaizhenbiao | 9 | 1 | 1 | gaizhenbiao chuanhuchatgpt (9) · chuanhuchatgpt (8) | new | ||
| 49 | prestashop | 9 | 6 | 1 | helpdesk (2) · ask for a quote (1) · channable (1) | · | ||
| 50 | synology | 9 | 1 | camera firmware (7) · synology router manager srm (2) · bc500 (1) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2024-06 that are on the CISA KEV catalog today. The 9 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-795883 critical—
- 2CWE-8623257 critical↑5
- 3CWE-8915641 critical↓1
- 4CWE-229026 critical↑5
- 5CWE-352621 critical↑5
- 6CWE-787619 critical—
- 7CWE-284555 critical↑8
- 8CWE-945523 critical↑11
- 9CWE-200532 critical↑7
- 10CWE-125463 critical↓5
- 1CWE-20465 critical—
- 2CWE-4344519 critical↑2
- 3CWE-416431 critical↓9
- 4CWE-918373 critical↑10
- 5CWE-121352 critical↓12
- 6CWE-783514 critical↓8
- 7CWE-2873310 critical↑20
- 8CWE-502325 critical↑3
- 9CWE-400312 critical↑1
- 10CWE-863306 critical↑9
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.