Month report
August 2024
Rolled up 2026-08-09 20:45 from 376,493 CVE records
2,896 CVEs published, +16.8% on the same month last year. 301 rated critical, 19 listed by CISA as exploited. linux led with 302; the most common weakness class was CWE-79 (454). code projects climbed 75 places, the largest move. 8 vendors ranked for the first time.
Published
2,896
Critical / high
301 / 1,034
Medium / low
1,245 / 112
Added to CISA KEV
19
Public exploit
94
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
17
Listed within 7 days
47.6%
Listed within 30 days
66.7%
Detection gap
Listed as exploited, no public template
Listed this month
19
With a template
6
No template
13
- 1microsoft8of 8 listed
- 2google2of 2 listed
- 3linux2of 2 listed
- 4versa1of 1 listed
- 5versa networks1of 1 listed
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 302 | 5 | 1 | linux (302) · simatic s7 1500 tm mfp gnu linux subsystem (25) · ruggedcom rst2428p (8) | — | ||
| 2 | sourcecodester | 123 | 2 | car driving school management system (12) · simple realtime quiz system (12) · clinics patient management system (10) | ↑3 | |||
| 3 | microsoft | 97 | 8 | 6 | 7 | windows server 2022 (58) · windows server 2022 23h2 edition server core installation (56) · windows server 2019 (54) | ↓1 | |
| 4 | adobe | 90 | 1 | adobe commerce (23) · commerce (23) · indesign desktop (15) | ↑26 | |||
| 5 | tenda | 64 | 5 | fh1206 firmware (23) · fh1201 firmware (16) · ax1806 firmware (11) | ↑10 | |||
| 6 | 61 | 2 | 8 | chrome (46) · android (13) · grpc (1) | — | |||
| 7 | kashipara | 54 | 12 | music management system (16) · responsive school management system (16) · hotel management system (8) | · | |||
| 8 | siemens | 52 | 2 | simatic s7 1500 tm mfp gnu linux subsystem (26) · linux (25) · ruggedcom rst2428p (12) | ↓4 | |||
| 9 | intel | 42 | ethernet complete driver pack (7) · intel r ethernet network controllers and adapters (5) · distribution for gdb software (2) | · | ||||
| 10 | totolink | 41 | 12 | x5000r firmware (10) · ac1200 t8 (5) · ex1200l (5) | — | |||
| 11 | itsourcecode | 38 | airline reservation system (5) · project expense monitoring system (5) · tailoring management system (5) | ↑1 | ||||
| 12 | janobe | 38 | 18 | school event management system (19) · school attendance monitoring system (15) · janobe paypal (11) | new | |||
| 13 | samsung mobile | 33 | samsung mobile devices (17) · samsung notes (15) · android (2) | — | ||||
| 14 | qualcomm | 32 | snapdragon (32) · fastconnect 6900 firmware (30) · fastconnect 7800 firmware (30) | ↑12 | ||||
| 15 | ibm | 31 | 1 | cloud pak for security (4) · db2 for linux unix and windows (4) · qradar suite software (4) | ↓4 | |||
| 16 | amd | 30 | 3 | amd athlon 3000 series mobile processors with radeon graphics (10) · amd radeon pro w6000 series graphics cards (9) · amd radeon rx 6000 series graphics cards (9) | · | |||
| 17 | dlink | 30 | 1 | dnr 202l (20) · dnr 322l (20) · dnr 326 (20) | ↑61 | |||
| 18 | d link | 24 | dnr 202l (21) · dnr 322l (21) · dnr 326 (21) | · | ||||
| 19 | opentext | 22 | netiq advance authentication (6) · access manager (3) · arcsight intelligence (3) | · | ||||
| 20 | mattermost | 21 | mattermost (21) | ↑29 | ||||
| 21 | apache | 20 | 2 | 1 | 2 | apache dolphinscheduler (3) · apache answer (2) · apache cloudstack (2) | ↓13 | |
| 22 | manageengine | 20 | adaudit plus (13) · endpoint central (2) · applications manager (1) | ↑45 | ||||
| 23 | cisco | 19 | 2 | cisco nx os software (7) · cisco identity services engine software (5) · cisco small business ip phones (3) | ↑8 | |||
| 24 | dell | 19 | idrac service module ism (5) · emc idrac service module (3) · dell client platform bios (2) | ↓7 | ||||
| 25 | code projects | 17 | 1 | pharmacy management system (4) · job portal (3) · blood bank system (2) | ↑75 | |||
| 26 | mozilla | 17 | 6 | firefox (14) · firefox esr (12) · thunderbird (10) | ↓3 | |||
| 27 | sap se | 17 | 1 | sap businessobjects business intelligence platform (4) · commerce cloud (2) · sap shared service framework (2) | ↓6 | |||
| 28 | redhat | 16 | red hat enterprise linux 8 (7) · red hat enterprise linux 9 (7) · red hat enterprise linux 7 (6) | ↓4 | ||||
| 29 | gitlab | 15 | gitlab (15) | ↑3 | ||||
| 30 | ivanti | 13 | 3 | 1 | 1 | avalanche (5) · epmm (4) · endpoint manager mobile (3) | · | |
| 31 | zoom communications | 13 | zoom workplace apps sdks rooms clients and rooms controllers (8) · workplace desktop (5) · rooms (4) | ↑19 | ||||
| 32 | pligg | 12 | pligg cms (12) | new | ||||
| 33 | rockwell automation | 12 | 1 | controllogix 5580 1756 l8z (3) · controllogix 5580 firmware (3) · guardlogix 5580 firmware (3) | · | |||
| 34 | horizoncloud | 11 | 6 | caterease (11) | new | |||
| 35 | ofono | 11 | ofono (11) | new | ||||
| 36 | f5 | 10 | big ip (4) · big ip next central manager (3) · nginx plus (2) | · | ||||
| 37 | huawei | 10 | 1 | emui (10) · harmonyos (10) | ↑28 | |||
| 38 | nvidia | 10 | mellanox os (3) · metrox 2 (3) · metrox 3 xc (3) | · | ||||
| 39 | bdthemes | 9 | 2 | element pack widgets templates addons for elementor (4) · ultimate store kit addon for woocommerce edd and elementor (2) · element pack elementor addons (1) | · | |||
| 40 | frogcms project | 9 | frogcms (9) | new | ||||
| 41 | rockwellautomation | 9 | 1 | controllogix 5580 firmware (3) · guardlogix 5580 firmware (3) · compact guardlogix 5380 5069 l3zs2 (2) | · | |||
| 42 | sportsnet | 9 | 9 | sportsnet (9) · sportsnetcms (9) | new | |||
| 43 | crocoblock | 8 | jetelements (3) · jetblocks for elementor (1) · jetformbuilder dynamic blocks form builder (1) | · | ||||
| 44 | lenovo | 8 | printers (5) · accessories and display manager (2) · display control center (2) | ↓6 | ||||
| 45 | zabbix | 8 | 2 | zabbix (8) | · | |||
| 46 | zzcms | 8 | zzcms (7) · zzmcms (1) | · | ||||
| 47 | centreon | 7 | 4 | centreon web (4) · centreon (3) | · | |||
| 48 | siamonhasan | 7 | warehouse inventory system (7) | new | ||||
| 49 | swissphone | 7 | 2 | dical red 4009 (5) · dical red (2) | new | |||
| 50 | themeum | 7 | 1 | tutor lms (3) · droip (2) · tutor lms elementor addons (1) | ↑44 |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2024-08 that are on the CISA KEV catalog today. The 19 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-7945411 critical—
- 2CWE-8927277 critical—
- 3CWE-3521063 critical↑1
- 4CWE-2848910 critical↑10
- 5CWE-228510 critical—
- 6CWE-200773 critical↓3
- 7CWE-121643 critical↑1
- 8CWE-862603 critical↓2
- 9CWE-434599 critical↑4
- 10CWE-20569 critical↓3
- 1CWE-416525 critical↑9
- 2CWE-785011 critical↑3
- 3CWE-1204813 critical↑3
- 4CWE-944819 critical↓4
- 5CWE-77476 critical↑6
- 6CWE-125452 critical↑2
- 7CWE-787393 critical↑2
- 8CWE-122381 critical↓9
- 9CWE-269359 critical↓8
- 10CWE-400342 critical↓8
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.