Month report
January 2018
Rolled up 2026-08-09 20:45 from 381,136 CVE records
1,273 CVEs published, +17.5% on the same month last year. 5 rated critical, 0 listed by CISA as exploited. oracle led with 167; the most common weakness class was CWE-22 (18). redhat climbed 44 places, the largest move. 12 vendors ranked for the first time.
Published
1,273
Critical / high
5 / 16
Medium / low
21 / 1
Added to CISA KEV
0
Public exploit
163
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
1430.5
Listed within 7 days
0%
Listed within 30 days
0%
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 167 | 3 | mysql server (19) · java (18) · vm virtualbox (9) | · | |||
| 2 | microsoft | 60 | 2 | 19 | microsoft edge (16) · equation editor (12) · windows kernel (6) | ↑3 | ||
| 3 | 51 | 3 | android (51) | ↑1 | ||||
| 4 | ibm | 46 | 1 | security key lifecycle manager (10) · rational doors (7) · security access manager (4) | ↓3 | |||
| 5 | netgain systems | 23 | netgain systems enterprise manager (23) | new | ||||
| 6 | qualcomm | 20 | android for msm firefox os for msm qrd android (20) | ↓3 | ||||
| 7 | apache | 17 | apache geode (3) · apache nifi (3) · apache hadoop (2) | ↑4 | ||||
| 8 | talos | 13 | cpp ethereum (9) · delayed job web rails gem (1) · parity (1) | · | ||||
| 9 | juniper networks | 12 | 1 | junos os (8) · junos space (3) · screenos (1) | · | |||
| 10 | the x org foundation | 11 | xorg x11 server (11) | new | ||||
| 11 | atlassian | 10 | jira (5) · activity streams (1) · atlassian jira (1) | ↑4 | ||||
| 12 | redhat | 10 | 1 | 389 ds base (1) · hibernate validator (1) · libpam4j (1) | ↑44 | |||
| 13 | hp | 9 | 1 | hp jetadvantage security manager (2) · hp designjet printers hp latex printers (1) · hp enterprise laserjet printers and mfps hp officejet enterprise color printers and mfp hp pagewide color printers and mps (1) | · | |||
| 14 | vmware | 7 | fusion (3) · workstation (2) · workstation pro player (2) | — | ||||
| 15 | intel | 6 | 3 | most modern operating systems (2) · intel driver and support assistant (1) · intel graphics driver (1) | ↑26 | |||
| 16 | trend micro | 6 | 5 | trend micro smart protection server standalone (5) · trend micro mobile security enterprise (1) | ↑1 | |||
| 17 | powerdns | 5 | powerdns recursor (3) · powerdns (1) · powerdns authoritative (1) | new | ||||
| 18 | flexera software | 4 | linux kernel (4) | · | ||||
| 19 | sap se | 4 | sap hana (1) · sap netweaver (1) · sap solution manager (1) | new | ||||
| 20 | siemens | 4 | 1 | telecontrol server basic (3) · desigo pxc001 e d v4 10 (1) · desigo pxc001 e d v5 00 (1) | ↑11 | |||
| 21 | lenovo group | 3 | enterprise network operating system affecting lenovo and ibm rackswitch and bladecenter products (1) · integrated management module 2 imm2 (1) · lenovo fingerprint manager pro (1) | · | ||||
| 22 | schneider electric se | 3 | pelco videoxpert enterprise (3) | · | ||||
| 23 | symantec | 3 | proxysg (2) · asg (1) · reporter (1) | ↑3 | ||||
| 24 | yandex n v | 3 | yandex browser (1) · yandex browser for android (1) · yandex browser for desktop (1) | · | ||||
| 25 | jdennis | 2 | keycloak httpd client install (2) | new | ||||
| 26 | malwarebytes | 2 | malwarebytes (2) | new | ||||
| 27 | micro focus | 2 | netiq access manager (1) · netiq access manager administrative console (1) | ↓4 | ||||
| 28 | f5 networks | 1 | big ip afm (1) | ↓21 | ||||
| 29 | fortinet | 1 | fortios (1) | ↓7 | ||||
| 30 | freeipa | 1 | ipa (1) | · | ||||
| 31 | hancom | 1 | hancom office hword neo (1) | · | ||||
| 32 | japan total system co | 1 | groupsession (1) | · | ||||
| 33 | miek gieben | 1 | miekg dns (1) | new | ||||
| 34 | nippon telegraph and telephone east | 1 | flet s virus clear easy setup application tool (1) · flet s virus clear v6 easy setup application tool (1) | ↑15 | ||||
| 35 | nlnet labs | 1 | unbound (1) | new | ||||
| 36 | pivotal | 1 | 1 | pivotal spring data rest and spring boot (1) | · | |||
| 37 | qemu | 1 | qemu (1) | · | ||||
| 38 | schezo | 1 | lhaplus (1) | new | ||||
| 39 | seelook | 1 | nootka (1) | new | ||||
| 40 | simon kelley | 1 | dnsmasq (1) | new | ||||
| 41 | the dovecot project | 1 | dovecot (1) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2018-01 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 41 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-22180 critical↑7
- 2CWE-391120 critical·
- 3CWE-20100 critical↑3
- 4CWE-20090 critical↑3
- 5CWE-7870 critical↑5
- 6CWE-7960 critical↓2
- 7CWE-26440 critical·
- 8CWE-28740 critical↑15
- 9CWE-40040 critical↑18
- 10CWE-11930 critical↓5
- 1CWE-50232 critical·
- 2CWE-86330 critical·
- 3CWE-8930 critical↑25
- 4CWE-12120 critical↓3
- 5CWE-20320 critical↓2
- 6CWE-28420 critical↓7
- 7CWE-28520 critical·
- 8CWE-34720 critical·
- 9CWE-35820 critical·
- 10CWE-36220 critical·
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.