CVE Intelligence
Skip to main content

Month report

October 2016

Rolled up 2026-08-09 20:45 from 370,690 CVE records

687 CVEs published, -5.4% on the same month last year. 2 rated critical, 0 listed by CISA as exploited. yandex n v led with 5; the most common weakness class was CWE-307 (1). 6 vendors ranked for the first time.

Published

687

+15.5%on the previous month

Critical / high

2 / 7

of the 12 scored

Medium / low

3 / 0

the rest of the scored bands

Added to CISA KEV

0

listed as exploited this month

Public exploit

41

exploit code indexed publicly

Scanner template

0

0% of the month

Publication to KEV

How long before CISA listed them

3 published this month and listed since — not the 0 listed during it.

Median days to listing

2048

from publication to CISA's date added

Listed within 7 days

0%

of the 3

Listed within 30 days

0%

of the 3

Weakness × vendor

Where the two overlap

CVEs carrying both. Each row is shaded against its own worst class.
VendorCWE-307CWE-327CWE-749CWE-89
yandex n v
hpe
beckhoff11
moodle1
openjpeg
redis

Vendors

Ranked by distinct CVEs this month

Δ is the move against last month's rank.
Vendors ranked by distinct CVEs published in 2016-10, sorted by CVEs descending
#VendorTop products
1yandex n v5yandex browser for desktop (5)new
2hpe4hpe system management homepage before v7 6 (4)new
3beckhoff22embedded pc images (2) · twincat components featuring automation device specification ads communication (2)new
4moodle1moodle (1)new
5openjpeg1openjpeg (1)new
6redis1redis (1)new

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2016-10 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 6 ranked vendors are listed; a zero count renders as a dot.

Weaknesses

CWE classes by distinct CVEs

  • 1CWE-30711 criticalnew
  • 2CWE-32710 critical·
  • 3CWE-74911 critical·
  • 4CWE-8910 critical·

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.