Month report
July 2024
Rolled up 2026-08-09 20:45 from 376,106 CVE records
3,113 CVEs published, +35.6% on the same month last year. 273 rated critical, 14 listed by CISA as exploited. linux led with 439; the most common weakness class was CWE-79 (448). jetbrains climbed 39 places, the largest move. 11 vendors ranked for the first time.
Published
3,113
Critical / high
273 / 1,127
Medium / low
1,310 / 126
Added to CISA KEV
14
Public exploit
104
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
19
Listed within 7 days
33.3%
Listed within 30 days
66.7%
Detection gap
Listed as exploited, no public template
Listed this month
14
With a template
7
No template
7
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 439 | 15 | linux (439) · simatic s7 1500 tm mfp gnu linux subsystem (39) · ruggedcom rst2428p (33) | — | |||
| 2 | microsoft | 143 | 6 | 3 | 4 | windows server 2022 (79) · windows server 2022 23h2 edition server core installation (78) · windows server 2019 (76) | ↑2 | |
| 3 | apple | 79 | 1 | 1 | macos (78) · ios and ipados (43) · watchos (33) | ↑6 | ||
| 4 | siemens | 78 | 5 | 2 | linux (40) · simatic s7 1500 tm mfp gnu linux subsystem (39) · ruggedcom rst2428p (34) | ↑2 | ||
| 5 | sourcecodester | 74 | 1 | record management system (14) · establishment billing management system (9) · lot reservation management system (9) | ↑8 | |||
| 6 | 66 | 4 | 3 | android (39) · chrome (26) · powervr gpu (8) | ↓3 | |||
| 7 | oracle | 63 | 1 | 1 | 1 | mysql server (22) · java se jdk and jre (6) · database enterprise edition (4) | · | |
| 8 | apache | 46 | 10 | 1 | 7 | apache http server (11) · apache streampark (4) · streampark (4) | ↑32 | |
| 9 | juniper networks | 46 | junos os evolved (33) · junos os (28) · junos (5) | · | ||||
| 10 | totolink | 38 | 2 | 1 | a3600r (18) · a3600r firmware (16) · a6000r firmware (7) | ↑23 | ||
| 11 | ibm | 36 | datacap navigator (12) · aspera orchestrator (3) · security directory integrator (3) | ↓6 | ||||
| 12 | itsourcecode | 34 | 1 | tailoring management system (7) · alton management system (6) · society management system (5) | ↓5 | |||
| 13 | samsung mobile | 33 | samsung mobile devices (28) · android (7) · galaxystore (1) | ↑5 | ||||
| 14 | juniper | 29 | junos os evolved (19) · junos os (18) · junos (5) | · | ||||
| 15 | tenda | 27 | 6 | 1 | fh1201 firmware (7) · o3 (6) · ax1806 firmware (4) | · | ||
| 16 | realtek | 22 | 1 | 1 | rtl819x software development kit (20) · wbr 6013 (20) · rtl819x jungle sdk (19) | · | ||
| 17 | dell | 21 | powerscale onefs (7) · dell peripheral manager (3) · peripheral manager (3) | ↓6 | ||||
| 18 | levelone | 21 | 1 | wbr 6013 (21) · rtl819x software development kit (20) · rtl819x jungle sdk (19) | new | |||
| 19 | idccms project | 19 | idccms (19) | ↑7 | ||||
| 20 | level one | 18 | 1 | wbr6013 (18) · wbr 6013 (18) · rtl819x software development kit (17) | new | |||
| 21 | sap se | 18 | sap crm webclient ui (4) · sap business warehouse business planning and simulation (2) · sap enable now (2) | ↑16 | ||||
| 22 | netbox | 17 | netbox (17) | new | ||||
| 23 | mozilla | 16 | 2 | firefox (16) · thunderbird (15) · firefox esr (5) | ↓7 | |||
| 24 | redhat | 16 | 1 | red hat enterprise linux 7 (11) · red hat enterprise linux 8 (11) · red hat enterprise linux 9 (11) | ↓1 | |||
| 25 | samsung | 16 | samsung mobile devices (9) · android (7) · exynos 1380 (2) | ↓6 | ||||
| 26 | qualcomm | 15 | snapdragon (15) · fastconnect 7800 firmware (12) · qam8255p firmware (11) | ↑6 | ||||
| 27 | splunk | 15 | 2 | splunk enterprise (15) · splunk cloud platform (12) · splunk (4) | · | |||
| 28 | ni | 13 | 3 | veristand (6) · labview (4) · flexlogger (2) | · | |||
| 29 | solarwinds | 13 | 8 | access rights manager (13) | · | |||
| 30 | adobe | 12 | indesign desktop (5) · indesign (4) · acrobat for edge (2) | ↓28 | ||||
| 31 | cisco | 12 | 2 | 1 | 2 | cisco secure email (2) · cisco webex teams (2) · secure email (2) | · | |
| 32 | gitlab | 12 | 1 | gitlab (12) | ↓11 | |||
| 33 | wpweb | 12 | 1 | social auto poster (7) · woocommerce social login (4) · woocommerce pdf vouchers (1) | new | |||
| 34 | fortinet | 11 | fortiaiops (4) · fortiadc (3) · fortiextender (1) | ↓14 | ||||
| 35 | seacms | 11 | 1 | seacms (11) | new | |||
| 36 | broadcom | 10 | 3 | symantec privileged access management (10) | · | |||
| 37 | kiloview | 10 | 5 | p1 p2 (10) · p1 4g video encoder firmware (8) · p2 4g video encoder firmware (8) | new | |||
| 38 | lenovo | 10 | thinkagile hx1021 edg firmware (5) · thinkagile hx1320 firmware (5) · thinkagile hx1321 firmware (5) | · | ||||
| 39 | publiccms | 10 | publiccms (10) | new | ||||
| 40 | arubanetworks | 9 | edgeconnect sd wan orchestrator (8) · hpe aruba networking edgeconnect sd wan (5) · hpe aruba networking edgeconnect sd wan orchestrator (3) | · | ||||
| 41 | discourse | 9 | discourse (9) | · | ||||
| 42 | hewlett packard enterprise hpe | 9 | 1 | edgeconnect sd wan orchestrator (5) · hpe aruba networking edgeconnect sd wan (5) · clearpass policy manager cppm (3) | · | |||
| 43 | opengeos | 9 | 8 | streamlit geospatial (9) | new | |||
| 44 | syrotech | 9 | syrotech sy gpon 1110 wdont router (9) · sy gpon 1110 wdont firmware (5) | new | ||||
| 45 | citrix | 8 | 1 | citrix workspace app for html5 (2) · citrix provisioning (1) · citrix workspace app for windows (1) | · | |||
| 46 | imaginationtech | 8 | android (8) · powervr gpu (8) | new | ||||
| 47 | jetbrains | 8 | teamcity (8) | ↑39 | ||||
| 48 | johnson controls | 8 | 1 | american dynamics illustra essentials gen 4 (4) · illustra essential gen 4 firmware (4) · software house c cure 9000 (2) | · | |||
| 49 | mattermost | 8 | mattermost (8) | · | ||||
| 50 | zoom communications | 8 | rooms (3) · workplace desktop (3) · virtual desktop infrastructure (2) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2024-07 that are on the CISA KEV catalog today. The 14 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-794481 critical—
- 2CWE-8917326 critical↑1
- 3CWE-2001013 critical↑6
- 4CWE-352741 critical↑1
- 5CWE-227310 critical↓1
- 6CWE-862663 critical↓4
- 7CWE-205911 critical↑4
- 8CWE-121584 critical↑7
- 9CWE-122573 critical↑17
- 10CWE-945422 critical↓2
- 1CWE-269535 critical↑10
- 2CWE-400530 critical↑7
- 3CWE-4345113 critical↓1
- 4CWE-284467 critical↓7
- 5CWE-78465 critical↑1
- 6CWE-120436 critical↑6
- 7CWE-918392 critical↓3
- 8CWE-125370 critical↓8
- 9CWE-787343 critical↓13
- 10CWE-416331 critical↓7
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.