| | CVE-2024-29060 |  Microsoft | medium | 6.7 | 0.9%
| | Visual Studio Elevation of Privilege Vulnerability | Jun 11, 2024 | Jul 20, 2026 |
| | CVE-2024-30088 | Microsoft | high | 7.0 | 68.2%
| ⚠ KEV | Windows Kernel Elevation of Privilege Vulnerability | Jun 11, 2024 | Aug 4, 2026 |
| | CVE-2024-29855 |  Veeam | critical | 9.0 | — | | Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator | Jun 11, 2024 | Jul 14, 2025 |
| | CVE-2024-23669 |  Fortinet | medium | 6.5 | 0.5%
| | An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, Fo… | Jun 5, 2024 | Jul 8, 2026 |
| | CVE-2024-23670 | Fortinet | high | 7.8 | 0.4%
| | An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, Fo… | Jun 3, 2024 | Jul 8, 2026 |
| | CVE-2024-23668 | Fortinet | high | 8.8 | 0.7%
| | An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, Fo… | Jun 3, 2024 | Jul 8, 2026 |
| | CVE-2024-23667 | Fortinet | high | 7.8 | 0.4%
| | An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, Fo… | Jun 3, 2024 | Jul 8, 2026 |
| | CVE-2024-24919 |  Check Point | high | 8.6 | 100.0%
| ⚠ KEV | Potentially allowing an attacker to read certain information on Check Point Security Gateways once c… | May 28, 2024 | Aug 5, 2026 |
| | CVE-2024-29853 | Veeam | high | 7.8 | — | | An authentication bypass vulnerability in Veeam Agent for Microsoft Windows allows for local privile… | May 22, 2024 | Jul 3, 2025 |
| | CVE-2024-29852 | Veeam | low | 2.7 | — | | Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs. | May 22, 2024 | Jul 3, 2025 |
| | CVE-2024-29851 | Veeam | high | 7.2 | — | | Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manage… | May 22, 2024 | Jul 3, 2025 |
| | CVE-2024-29850 | Veeam | high | 8.8 | — | | Veeam Backup Enterprise Manager allows account takeover via NTLM relay. | May 22, 2024 | Jul 3, 2025 |
| | CVE-2024-29849 | Veeam | critical | 9.8 | — | | Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise man… | May 22, 2024 | Jul 3, 2025 |
| | CVE-2024-20363 |  Cisco | medium | 5.8 | 0.4%
| | Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IP… | May 22, 2024 | Aug 11, 2026 |
| | CVE-2024-20355 | Cisco | medium | 5.0 | 0.3%
| | A vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN service… | May 22, 2024 | Aug 11, 2026 |
| | CVE-2024-20293 | Cisco | medium | 5.8 | 0.4%
| | A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Applian… | May 22, 2024 | Aug 11, 2026 |
| | CVE-2024-20261 | Cisco | medium | 5.8 | 0.4%
| | A vulnerability in the file policy feature that is used to inspect encrypted archive files of Cisco … | May 22, 2024 | Aug 11, 2026 |
| | CVE-2024-31491 | Fortinet | high | 8.8 | 1.1%
| | A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox 4.4.0 throu… | May 14, 2024 | Jan 14, 2026 |
| | CVE-2023-45583 | Fortinet | medium | 6.7 | 0.2%
| | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 … | May 14, 2024 | Jun 12, 2026 |
| | CVE-2023-36640 | Fortinet | medium | 6.7 | 0.1%
| | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 … | May 14, 2024 | Jun 12, 2026 |
| | CVE-2024-29212 | Veeam | critical | 9.9 | — | | Due to an unsafe de-serialization method used by the Veeam Service Provider Console(VSPC) server in… | May 14, 2024 | Jun 30, 2025 |
| | CVE-2024-27460 |  HPE | medium | 6.7 | 2.5%
| | A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below. | May 14, 2024 | Jan 21, 2026 |
| | CVE-2024-32761 |  F5 | medium | 6.5 | 0.3%
| | Under certain conditions, a data leak may occur in the Traffic Management Microkernels (TMMs) of BIG… | May 8, 2024 | Feb 4, 2026 |
| | CVE-2024-28893 | HPE | high | 7.7 | 0.4%
| | Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when … | May 1, 2024 | Jan 14, 2026 |
| | CVE-2024-20358 | Cisco | medium | 6.0 | 0.7%
| | A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is availab… | Apr 24, 2024 | Aug 11, 2026 |
| | CVE-2024-20359 | Cisco | medium | 6.0 | 19.4%
| ⚠ KEV | A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins a… | Apr 24, 2024 | Aug 11, 2026 |
| | CVE-2024-20353 | Cisco | high | 8.6 | 70.7%
| ⚠ KEV | A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) So… | Apr 24, 2024 | Aug 11, 2026 |
| | CVE-2024-24910 | Check Point | high | 7.3 | 0.1%
| | A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen,… | Apr 18, 2024 | Jan 15, 2026 |
| | CVE-2024-1249 |  Apache | high | 7.4 | 0.4%
| | A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cr… | Apr 17, 2024 | Aug 4, 2026 |
| | CVE-2024-26257 | Microsoft | high | 7.8 | 0.5%
| | Microsoft Excel Remote Code Execution Vulnerability | Apr 9, 2024 | May 19, 2026 |
| | CVE-2024-31487 | Fortinet | medium | 5.9 | 0.5%
| | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fo… | Apr 9, 2024 | Jan 14, 2026 |
| | CVE-2024-23671 | Fortinet | high | 8.1 | 0.8%
| | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fo… | Apr 9, 2024 | Jan 14, 2026 |
| | CVE-2024-21756 | Fortinet | high | 8.8 | 1.0%
| | A improper neutralization of special elements used in an os command ('os command injection') vulnera… | Apr 9, 2024 | Jan 14, 2026 |
| | CVE-2024-21755 | Fortinet | high | 8.8 | 1.0%
| | A improper neutralization of special elements used in an os command ('os command injection') vulnera… | Apr 9, 2024 | Jan 14, 2026 |
| | CVE-2023-47541 | Fortinet | medium | 6.7 | 0.1%
| | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in F… | Apr 9, 2024 | Jan 14, 2026 |
| | CVE-2023-47540 | Fortinet | medium | 6.7 | 0.1%
| | An improper neutralization of special elements used in an os command ('os command injection') vulner… | Apr 9, 2024 | Jan 14, 2026 |
| | CVE-2024-2700 | Apache | high | 7.0 | 0.3%
| | A vulnerability was found in the quarkus-core component. Quarkus captures local environment variable… | Apr 4, 2024 | Aug 4, 2026 |
| | CVE-2023-0582 |  ForgeRock | high | 8.1 | — | | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Forg… | Mar 27, 2024 | Apr 14, 2025 |
| | CVE-2024-26196 | Microsoft | medium | 4.3 | 1.2%
| | Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability | Mar 21, 2024 | Aug 10, 2026 |
| | CVE-2023-42790 | Fortinet | high | 8.1 | 1.1%
| | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 t… | Mar 12, 2024 | Jul 8, 2026 |
| | CVE-2023-42789 | Fortinet | critical | 9.8 | 3.3%
| | A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7… | Mar 12, 2024 | Jul 8, 2026 |
| | CVE-2023-41842 | Fortinet | medium | 6.7 | 0.1%
| | A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allo… | Mar 12, 2024 | Jan 14, 2026 |
| | CVE-2024-0590 | Microsoft | medium | 6.1 | 24.8%
| | The Microsoft Clarity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versio… | Feb 29, 2024 | Apr 8, 2026 |
| | CVE-2024-26192 | Microsoft | high | 8.2 | 1.5%
| | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | Feb 23, 2024 | Aug 10, 2026 |
| | CVE-2024-26188 | Microsoft | medium | 4.3 | 0.8%
| | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Feb 23, 2024 | Aug 10, 2026 |
| | CVE-2024-21423 | Microsoft | medium | 4.8 | 0.6%
| | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | Feb 23, 2024 | Aug 10, 2026 |
| | CVE-2024-1635 | Apache | high | 7.5 | 4.6%
| | A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly… | Feb 19, 2024 | Aug 4, 2026 |
| | CVE-2024-21413 | Microsoft | critical | 9.8 | 94.7%
| ⚠ KEV | Microsoft Outlook Remote Code Execution Vulnerability | Feb 13, 2024 | Aug 10, 2026 |
| | CVE-2024-21404 | Microsoft | high | 7.5 | 2.7%
| | .NET Denial of Service Vulnerability | Feb 13, 2024 | Aug 10, 2026 |
| | CVE-2024-21403 | Microsoft | critical | 9.0 | 1.3%
| | Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability | Feb 13, 2024 | Aug 10, 2026 |