Month report
November 2024
Rolled up 2026-09-03 01:20 from 365,918 CVE records
4,054 CVEs published, +65.9% on the same month last year. 361 rated critical, 22 listed by CISA as exploited. linux led with 274; the most common weakness class was CWE-79 (799). netgear climbed 88 places, the largest move. 6 vendors ranked for the first time.
Published
4,054
Critical / high
361 / 1,510
Medium / low
1,941 / 215
Added to CISA KEV
22
Public exploit
135
Scanner template
38
Publication to KEV
How long before CISA listed them
Median days to listing
4.5
Listed within 7 days
62.5%
Listed within 30 days
62.5%
Detection gap
Listed as exploited, no public template
Listed this month
22
With a template
10
No template
12
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 274 | 12 | 1 | 1 | linux (274) · simatic s7 1500 tm mfp gnu linux subsystem (22) · ruggedcom rst2428p (10) | — | |
| 2 | 135 | 9 | 1 | 3 | android (119) · mt6765 (15) · mt6768 (15) | ↑5 | ||
| 3 | cisco | 103 | 3 | 1 | cisco catalyst sd wan manager (18) · cisco identity services engine software (13) · cisco telepresence endpoint software tc ce (8) | — | ||
| 4 | microsoft | 96 | 4 | 3 | 4 | windows server 2022 (34) · windows server 2022 23h2 edition server core installation (32) · windows server 2025 (32) | ↓2 | |
| 5 | irfanview | 87 | irfanview (87) | · | ||||
| 6 | siemens | 59 | 3 | 1 | 1 | linux (25) · simatic s7 1500 tm mfp gnu linux subsystem (22) · ruggedcom rst2428p (10) | ↓2 | |
| 7 | adobe | 57 | substance3d painter (23) · substance 3d painter (23) · illustrator (9) | ↑1 | ||||
| 8 | ivanti | 49 | 9 | 1 | connect secure (18) · endpoint manager (16) · policy secure (15) | ↑19 | ||
| 9 | netgear | 48 | r7000p firmware (27) · r8500 firmware (25) · xr300 firmware (25) | ↑88 | ||||
| 10 | code projects | 47 | 2 | e health care system (10) · farmacia (10) · job recruitment (6) | ↓1 | |||
| 11 | intel | 43 | 4th generation intel xeon processor scalable family (4) · 5th generation intel xeon processor scalable family (4) · intel r neural compressor software (3) | · | ||||
| 12 | pdf xchange | 39 | pdf xchange editor (39) | · | ||||
| 13 | qualcomm | 36 | 1 | snapdragon (36) · wsa8830 firmware (21) · wsa8835 firmware (21) | ↑8 | |||
| 14 | redhat | 36 | 1 | 1 | red hat enterprise linux 8 (17) · red hat enterprise linux 9 (17) · red hat enterprise linux 7 (15) | ↑5 | ||
| 15 | ibm | 33 | 4 | concert software (5) · security verify access (4) · cics tx standard (2) | ↑25 | |||
| 16 | tungsten automation | 32 | power pdf (32) | new | ||||
| 17 | phpgurukul | 29 | 2 | online shopping portal (11) · complaint management system (4) · covid19 testing management system (3) | ↓5 | |||
| 18 | qnap systems | 29 | 3 | 1 | qts (16) · quts hero (16) · notes station 3 (4) | · | ||
| 19 | apache | 25 | 6 | 3 | apache nimble (4) · apache tomcat (4) · apache hertzbeat (3) | ↑4 | ||
| 20 | trimble | 25 | 1 | sketchup viewer (19) · sketchup (4) · sketchup pro (2) | · | |||
| 21 | mozilla | 24 | 4 | 1 | firefox (18) · thunderbird (17) · firefox esr (10) | ↓6 | ||
| 22 | 1000 projects | 23 | beauty parlour management system (11) · bookstore management system (9) · portfolio management system mca (3) | new | ||||
| 23 | tungstenautomation | 23 | power pdf (23) | new | ||||
| 24 | advantech | 21 | 6 | eki 6333ac 1gpo (20) · eki 6333ac 2g (20) · eki 6333ac 2gd (20) | · | |||
| 25 | huawei | 21 | harmonyos (21) · emui (3) | · | ||||
| 26 | fujielectric | 20 | monitouch v sft (12) · tellus lite (7) · tellus (2) | · | ||||
| 27 | hewlett packard enterprise hpe | 20 | 3 | hpe athonet core (7) · hpe aruba networking access points instant aos 8 and aos 10 (6) · arubaos (5) | · | |||
| 28 | d link | 19 | 1 | 2 | 2 | dsl6740c (7) · dsl6740c firmware (7) · di 8003 (3) | ↓18 | |
| 29 | kashipara | 19 | e learning management system project (19) | · | ||||
| 30 | mediatek | 19 | android (18) · mt6765 (15) · mt6768 (15) | ↓4 | ||||
| 31 | samsung mobile | 19 | samsung mobile devices (14) · galaxy s24 firmware (2) · blockchain keystore (1) | ↑5 | ||||
| 32 | tenda | 19 | ac10 (3) · ac10 firmware (3) · ac6 firmware (3) | ↓2 | ||||
| 33 | 1000projects | 18 | beauty parlour management system (9) · bookstore management system (6) · portfolio management system mca (3) | new | ||||
| 34 | allegra | 18 | 6 | allegra (18) | new | |||
| 35 | alltena | 18 | 6 | allegra (18) | new | |||
| 36 | draytek | 18 | vigor3900 firmware (18) | ↓20 | ||||
| 37 | fortinet | 17 | 1 | fortimanager (9) · fortianalyzer (8) · forticlientwindows (3) | · | |||
| 38 | fuji electric | 17 | monitouch v sft (12) · tellus lite (5) | · | ||||
| 39 | nextcloud | 17 | 1 | security advisories (17) · nextcloud mail (1) | · | |||
| 40 | dlink | 16 | 1 | 3 | 2 | dsl6740c (7) · dsl6740c firmware (7) · dns 320 (3) | ↓29 | |
| 41 | sourcecodester | 16 | 2 | best employee management system (3) · best house rental management system (3) · student record management system (3) | ↓28 | |||
| 42 | codezips | 15 | free exam hall seating management system (4) · hospital appointment system (4) · online institute management system (4) | ↓22 | ||||
| 43 | dell | 15 | 3 | smartfabric os10 software (5) · smartfabric os10 (4) · enterprise sonic os (3) | ↑4 | |||
| 44 | moodle | 15 | 1 | 1 | moodle (15) | · | ||
| 45 | combodo | 14 | 1 | 2 | itop (14) | · | ||
| 46 | foxit | 14 | pdf reader (14) | · | ||||
| 47 | opentext | 14 | 1 | imanager (10) · accurev (1) · accurev for ldap integration (1) | ↑4 | |||
| 48 | sharp | 14 | 4 | 2 | multiple mfps multifunction printers (14) · bp 30c25 (1) · bp 30c25t (1) | ↓5 | ||
| 49 | toshiba tec | 14 | 4 | 2 | multiple mfps multifunction printers (14) · bp 30c25 (1) · bp 30c25t (1) | ↓4 | ||
| 50 | zabbix | 14 | 2 | 1 | zabbix (14) · frontend (1) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2024-11 that are on the CISA KEV catalog today. The 22 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-797999 critical—
- 2CWE-8622499 critical↑1
- 3CWE-8924328 critical↓1
- 4CWE-1251892 critical↑5
- 5CWE-7871358 critical↑9
- 6CWE-7813232 critical↑6
- 7CWE-1201069 critical↑1
- 8CWE-741030 critical↑53
- 9CWE-229717 critical↓3
- 10CWE-416965 critical↑3
- 1CWE-352933 critical↓6
- 2CWE-948918 critical↓2
- 3CWE-4348757 critical↓9
- 4CWE-20680 critical↑2
- 5CWE-122642 critical↑2
- 6CWE-476641 critical↑15
- 7CWE-276635 critical↑7
- 8CWE-284572 critical—
- 9CWE-200542 critical↓8
- 10CWE-775311 critical↓5
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.