Month report
February 2018
Rolled up 2026-08-09 20:45 from 370,745 CVE records
1,325 CVEs published, +27.3% on the same month last year. 5 rated critical, 0 listed by CISA as exploited. hewlett packard enterprise led with 186; the most common weakness class was CWE-89 (22). sap se climbed 14 places, the largest move. 18 vendors ranked for the first time.
Published
1,325
Critical / high
5 / 9
Medium / low
2 / 1
Added to CISA KEV
0
Public exploit
158
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
1366
Listed within 7 days
0%
Listed within 30 days
0%
Weakness × vendor
Where the two overlap
| Vendor | CWE-89 | CWE-79 | CWE-20 | CWE-200 | CWE-119 | CWE-121 | CWE-284 | CWE-287 |
|---|---|---|---|---|---|---|---|---|
| hewlett packard enterprise | ||||||||
| huawei technologies co | ||||||||
| microsoft | ||||||||
| ibm | ||||||||
| sap se | ||||||||
| apache | ||||||||
| quest | 21 | 1 | 1 | |||||
| atlassian | 1 |
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | hewlett packard enterprise | 186 | 12 | intelligent management center imc plat (95) · matrix operating environment (15) · system management homepage for windows and linux (9) | new | |||
| 2 | huawei technologies co | 71 | dp300 rp200 te30 te40 te50 te60 (11) · ips module ngfw module nip6300 nip6600 secospace usg6300 secospace usg6500 secospace usg6600 usg9500 (7) · dp300 ips module ngfw module nip6300 nip6600 nip6800 rp200 svn5600 svn5800 svn5800 c semg9811 secospace usg6300 secospace usg6500 secospace usg6600 te30 te40 te50 te60 usg9500 usg9520 usg9560 usg9580 vp9660 viewpoint 8660 viewpoint 9030 espace u1981 (6) | · | ||||
| 3 | microsoft | 49 | 13 | windows (12) · microsoft edge chakracore (9) · microsoft edge (4) | ↓1 | |||
| 4 | ibm | 31 | client application access (6) · notes (6) · security guardium big data intelligence (4) | — | ||||
| 5 | sap se | 26 | 2 | sap internet graphics server (13) · sap hana extended application services (8) · s4fnd (1) | ↑14 | |||
| 6 | apache | 24 | 4 | apache geode (3) · apache cloudstack (2) · apache jmeter (2) | ↑1 | |||
| 7 | quest | 24 | 1 | quest netvault backup (24) | new | |||
| 8 | atlassian | 23 | bamboo (6) · fisheye and crucible (5) · bitbucket server (4) | ↑3 | ||||
| 9 | 20 | 1 | android (20) | ↓6 | ||||
| 10 | qualcomm | 11 | android for msm firefox os for msm qrd android (10) · snapdragon automobile snapdragon iot snapdragon mobile (1) | ↓4 | ||||
| 11 | trend micro | 10 | trend micro control manager (8) · trend micro interscan messaging security virtual appliance (1) · trend micro user mode hooking umh module (1) | ↑5 | ||||
| 12 | puppet | 6 | puppet enterprise (6) · puppet agent (2) · puppetlabs apache (1) | · | ||||
| 13 | redhat | 5 | 2 | cloudforms (1) · jboss remoting (1) · keycloak (1) | ↓1 | |||
| 14 | brocade communications systems | 4 | brocade fabric os (2) · ruckus networks solo aps and sz managed aps (1) · ruckus networks unleashed aps and zone director (1) | · | ||||
| 15 | kaspersky labs | 4 | kaspersky secure mail gateway (4) | · | ||||
| 16 | quagga | 4 | bgpd (4) | new | ||||
| 17 | kkcal | 3 | epg search result viewer kkcald (3) | new | ||||
| 18 | micro focus | 3 | 1 | fortify audit workbench awb and micro focus fortify software security center ssc (1) · micro focus universal cmdb (1) · universal cmdb foundation software (1) | ↑9 | |||
| 19 | synology | 3 | surveillance station (2) · synology photo station (1) | · | ||||
| 20 | fasterxml | 2 | 1 | jackson databind (2) | new | |||
| 21 | fuji soft incorporated | 2 | fs010w (2) | new | ||||
| 22 | insteon | 2 | insteon for hub (1) · insteon hub firmware (1) | new | ||||
| 23 | joyent | 2 | joyent smartos (2) | · | ||||
| 24 | kofax | 2 | saperion web client (2) | new | ||||
| 25 | nvidia | 2 | android (2) | · | ||||
| 26 | the postgresql global development group | 2 | postgresql (2) | · | ||||
| 27 | abb | 1 | abb microscada (1) | new | ||||
| 28 | epson | 1 | epson airprint (1) | new | ||||
| 29 | f5 networks | 1 | big ip pem (1) | ↓1 | ||||
| 30 | futomi co | 1 | mp form mail cgi ecommerce edition (1) | new | ||||
| 31 | i o data device | 1 | ip address setting tool magicalfinder (1) | · | ||||
| 32 | infinispan | 1 | infinispan (1) | new | ||||
| 33 | intel | 1 | intel graphics driver (1) | ↓18 | ||||
| 34 | jordy meow | 1 | wp retina 2x (1) | new | ||||
| 35 | juniper networks | 1 | 1 | appformix (1) | ↓26 | |||
| 36 | kddi | 1 | anshin net security for windows (1) | · | ||||
| 37 | line | 1 | line for ios (1) | new | ||||
| 38 | mt systems co | 1 | mts simple booking business (1) · mts simple booking c (1) | new | ||||
| 39 | netapp | 1 | oncommand api services and netapp service level manager (1) | · | ||||
| 40 | nippon telegraph and telephone east | 1 | flet s azukeru backup tool (1) | ↓6 | ||||
| 41 | nippon telegraph and telephone west | 1 | flet s v4 v6 address selection tool (1) | · | ||||
| 42 | privatevpn | 1 | privatevpn (1) | new | ||||
| 43 | 1 | twitter kit for ios (1) | new | |||||
| 44 | wink labs | 1 | wink smart home (1) | new | ||||
| 45 | zyxel | 1 | zyxel p 870h 51 dsl router (1) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2018-02 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 45 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-89220 critical↑12
- 2CWE-79100 critical↑4
- 3CWE-2071 critical—
- 4CWE-20050 critical—
- 5CWE-11940 critical↑5
- 6CWE-12140 critical↑8
- 7CWE-28440 critical↑9
- 8CWE-28740 critical—
- 9CWE-12021 critical↑17
- 10CWE-18420 critical·
- 1CWE-2220 critical↓10
- 2CWE-35220 critical↑23
- 3CWE-41620 critical↑28
- 4CWE-92220 criticalnew
- 5CWE-12210 critical↑12
- 6CWE-12510 critical·
- 7CWE-1910 criticalnew
- 8CWE-19010 critical·
- 9CWE-22810 criticalnew
- 10CWE-26410 critical↓13
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.