Month report
March 2018
Rolled up 2026-08-09 20:45 from 370,662 CVE records
1,337 CVEs published, +2.7% on the same month last year. 8 rated critical, 0 listed by CISA as exploited. microsoft led with 74; the most common weakness class was CWE-79 (32). nvidia climbed 14 places, the largest move. 18 vendors ranked for the first time.
Published
1,337
Critical / high
8 / 32
Medium / low
64 / 15
Added to CISA KEV
0
Public exploit
133
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
1436
Listed within 7 days
0%
Listed within 30 days
0%
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 74 | 13 | microsoft sharepoint (13) · windows kernel (13) · chakracore microsoft edge (10) | ↑2 | |||
| 2 | huawei technologies co | 67 | 1 | dp300 rp200 te30 te40 te50 te60 (12) · mate 9 pro (5) · dp300 ips module ngfw module nip6300 nip6600 rp200 s12700 s1700 s2700 s5700 s6700 s7700 s9700 secospace usg6300 secospace usg6500 secospace usg6600 te30 te40 te50 te60 tp3106 tp3206 usg9500 viewpoint 9030 (4) | — | |||
| 3 | ibm | 36 | 1 | db2 for linux unix and windows (6) · business process manager (5) · rational collaborative lifecycle management (5) | ↑1 | |||
| 4 | netiq | 30 | identity manager (9) · access manager (6) · imanager (4) | · | ||||
| 5 | dell emc | 28 | 10 | isilon onefs (9) · scaleio (3) · rsa authentication agent for web for iis rsa authentication agent for web for apache web server (2) | · | |||
| 6 | qualcomm | 28 | android for msm firefox os for msm qrd android (22) · snapdragon iot snapdragon mobile (4) · snapdragon iot snapdragon mobile snapdragon automobile (1) | ↑4 | ||||
| 7 | apache | 17 | 4 | apache http server (7) · apache syncope (2) · apache allura (1) | ↓1 | |||
| 8 | gitlab | 13 | gitlab community and enterprise editions (13) | new | ||||
| 9 | schneider electric se | 13 | pelco sarix professional (12) · somove (1) | · | ||||
| 10 | trend micro | 13 | 12 | trend micro email encryption gateway (12) · trend micro smart protection server standalone (1) | ↑1 | |||
| 11 | nvidia | 12 | android (6) · shield tv (5) · nvidia tegra (1) | ↑14 | ||||
| 12 | philips | 11 | philips intellispace portal (9) · philips alice 6 system (2) | new | ||||
| 13 | redhat | 11 | 389 ds base (2) · keycloak (2) · curl (1) | — | ||||
| 14 | suse | 11 | 1 | 1 | libzypp (3) · open build service (2) · build (1) | · | ||
| 15 | f5 networks | 10 | big ip ltm aam afm analytics apm asm dns edge gateway gtm link controller pem webaccelerator websafe (4) · big ip asm (1) · big ip asm and analytics (1) | ↑14 | ||||
| 16 | hanwha techwin | 10 | hanwha techwin smartcams (10) | new | ||||
| 17 | sap se | 10 | 1 | 1 | sap business process automation bpa by redwood (2) · sap basis abap file interface (1) · sap business client (1) | ↓12 | ||
| 18 | ics cert | 8 | omron cx supervisor (6) · beaconmed 195 166 s totalalert scroll medical air systems web application (1) · beckhoff twincat plc products (1) | new | ||||
| 19 | drupal org | 7 | drupal core (7) | new | ||||
| 20 | elastic | 6 | kibana (4) · logstash (1) · x pack security (1) | · | ||||
| 21 | geutebr 195 188 ck | 6 | geutebr 195 188 ck g cam efd 2250 part n 194 176 5 02024 firmware and topline topfd 2125 part n 194 176 5 02820 firmware (6) | new | ||||
| 22 | siemens | 6 | en100 ethernet module dnp3 variant (3) · en100 ethernet module iec 104 variant (3) · en100 ethernet module iec 61850 variant (3) | · | ||||
| 23 | qnap | 5 | qnap media streaming add on (4) · qfinder pro (1) | · | ||||
| 24 | atlassian | 4 | fisheye and crucible (2) · bamboo (1) · bitbucket server (1) | ↓16 | ||||
| 25 | ge healthcare | 4 | ge centricity pacs ra1000 (1) · ge gemnet license server aka echoserver (1) · ge infinia (1) | new | ||||
| 26 | gundam cult qqq | 4 | qqq systems (4) | new | ||||
| 27 | ubiquiti networks | 4 | edgerouter x (4) | new | ||||
| 28 | buffalo | 3 | wxr 1900dhp2 (3) | · | ||||
| 29 | ca technologies | 3 | ca api developer portal (3) | · | ||||
| 30 | corega | 3 | cg wgr1200 (3) | · | ||||
| 31 | samba | 3 | 1 | samba (3) | · | |||
| 32 | docutrac | 2 | 1 | dtisqlinstaller exe (2) | new | |||
| 33 | gemalto | 2 | gemalto s sentinel ldk rte (2) | · | ||||
| 34 | intel | 2 | sgx sdk (1) · software guard extensions platform software component (1) | ↓1 | ||||
| 35 | jubatus community | 2 | jubatus (2) | new | ||||
| 36 | kubernetes | 2 | 1 | kubernetes (2) | · | |||
| 37 | micro focus | 2 | netiq privileged account manager pam 3 1 and 3 2 (1) · operations orchestration software (1) | ↓19 | ||||
| 38 | novell | 2 | edirectory (2) | new | ||||
| 39 | openssl | 2 | openssl (2) | · | ||||
| 40 | opensuse | 2 | open build service (1) · openbuildservice (1) | · | ||||
| 41 | soflyy | 2 | wp all import (2) | new | ||||
| 42 | spring by pivotal | 2 | spring batch admin (2) | new | ||||
| 43 | synology | 2 | photo station (2) | ↓24 | ||||
| 44 | tenable | 2 | nessus (1) · tenable appliance (1) | · | ||||
| 45 | the dovecot project | 2 | dovecot (2) | · | ||||
| 46 | woodybells | 2 | jtrim (1) · winshot (1) | new | ||||
| 47 | zsh | 2 | zsh (2) | new | ||||
| 48 | amazon | 1 | amazon music player (1) | new | ||||
| 49 | blackberry | 1 | uem management console (1) | · | ||||
| 50 | cloud foundry | 1 | garden runc (1) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2018-03 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-79320 critical↑1
- 2CWE-20202 critical↑1
- 3CWE-287110 critical↑5
- 4CWE-26490 critical↑16
- 5CWE-39980 critical↑23
- 6CWE-7881 critical·
- 7CWE-11962 critical↓2
- 8CWE-12160 critical↓2
- 9CWE-35260 critical↑3
- 10CWE-20050 critical↓6
- 1CWE-28450 critical↓4
- 2CWE-31040 critical·
- 3CWE-40040 critical·
- 4CWE-41640 critical↓1
- 5CWE-43440 critical·
- 6CWE-7740 critical↑23
- 7CWE-12030 critical↓8
- 8CWE-2231 critical↓7
- 9CWE-26930 critical·
- 10CWE-28530 critical·
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.