Month report
April 2018
Rolled up 2026-08-09 20:45 from 370,877 CVE records
1,667 CVEs published, +6.3% on the same month last year. 25 rated critical, 0 listed by CISA as exploited. qualcomm led with 285; the most common weakness class was CWE-20 (13). symantec climbed 59 places, the largest move. 16 vendors ranked for the first time.
Published
1,667
+24.7%on the previous month
Critical / high
25 / 98
of the 172 scored
Medium / low
43 / 6
the rest of the scored bands
Added to CISA KEV
0
listed as exploited this month
Public exploit
142
exploit code indexed publicly
Scanner template
0
0% of the month
Publication to KEV
How long before CISA listed them
3 published this month and listed since — not the 0 listed during it.
Median days to listing
1603
from publication to CISA's date added
Listed within 7 days
0%
of the 3
Listed within 30 days
0%
of the 3
Vendors
Ranked by distinct CVEs this month
Δ is the move against last month's rank.
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | qualcomm | 285 | 1 | snapdragon mobile snapdragon wear (88) · snapdragon automobile snapdragon mobile snapdragon wear (65) · snapdragon mobile (63) | ↑5 | |||
| 2 | oracle | 136 | 1 | 1 | 4 | mysql server (30) · java (13) · peoplesoft enterprise pt peopletools (9) | · | |
| 3 | 97 | 6 | android (97) | · | ||||
| 4 | microsoft | 66 | 13 | windows 10 (26) · windows 10 servers (24) · windows server 2016 (24) | ↓3 | |||
| 5 | talos | 35 | 15 | 1 | allen bradley (16) · computerinsel photoline (7) · foxit (4) | · | ||
| 6 | ibm | 33 | 1 | 1 | security qradar siem (7) · rational doors next generation (4) · rational team concert (4) | ↓3 | ||
| 7 | blender | 21 | 1 | blender (21) | new | |||
| 8 | huawei technologies co | 19 | ar120 s ar1200 ar1200 s ar150 ar150 s ar160 ar200 ar200 s ar2200 ar2200 s ar3200 ar3600 ar510 dp300 ips module ngfw module nip6300 nip6600 nip6800 netengine16ex rse6500 srg1300 srg2300 srg3300 svn5600 svn5800 svn5800 c semg9811 secospace usg6300 secospace usg6500 secospace usg6600 te30 te40 te50 te60 tp3106 tp3206 usg6000v usg9500 usg9520 usg9560 usg9580 vp9660 viewpoint 8660 viewpoint 9030 (7) · dp300 rp200 te30 te40 te50 te60 (3) · alp al00b bla al00b (1) | ↓6 | ||||
| 9 | apache | 14 | 1 | apache fineract (4) · apache hive (3) · apache tika (3) | ↓2 | |||
| 10 | schneider electric se | 12 | 66074 mge network management card transverse installed in mge ups and mge sts (4) · modicon premium modicon quantum modicon m340 bmxnor0200 (2) · micom p540d range with legacy ethernet board (1) | ↓1 | ||||
| 11 | f5 networks | 11 | 1 | big ip ltm aam afm analytics apm asm dns edge gateway gtm link controller pem webaccelerator websafe (5) · big ip afm asm (1) · big ip analytics ltm aam afm apm asm dns edge gateway gtm link controller pem webaccelerator websafe (1) | ↑4 | |||
| 12 | mcafee | 11 | network security management nsm (7) · epolicy orchestrator epo (2) · mcafee anti virus plus avp (1) | · | ||||
| 13 | mediawiki | 11 | 1 | mediawiki (10) · mediawiki syntaxhighlight extension (1) | new | |||
| 14 | redhat | 11 | 1 | etcd (2) · moodle (2) · atomic openshift (1) | ↓1 | |||
| 15 | ics cert | 10 | advantech webaccess hmi designer (3) · omron cx one (3) · lcds le 195 163 o consultoria e desenvolvimento de sistemas ltda me laquis scada (1) | ↑3 | ||||
| 16 | sap se | 9 | sap disclosure management (4) · sap business objects (1) · sap business one (1) | ↑1 | ||||
| 17 | atlassian | 8 | jira (3) · atlassian application links (2) · atlassian renderer (1) | ↑7 | ||||
| 18 | cybozu | 8 | cybozu garoon (8) | · | ||||
| 19 | juniper networks | 8 | 1 | junos os (7) · junos snapshot administrator jsnapy (1) | · | |||
| 20 | nvidia | 7 | gpu display driver (7) | ↓9 | ||||
| 21 | sam lantinga and mattias engdeg rd | 7 | simple directmedia layer (7) | new | ||||
| 22 | symantec | 7 | 2 | advanced secure gateway asg (3) · proxysg (3) · endpoint protection (2) | ↑59 | |||
| 23 | freerdp | 6 | freerdp (6) | new | ||||
| 24 | intel | 6 | intel remote keyboard (3) · guard extensions platform software component for linux (1) · intel 6th generation intel core processors intel 7th generation processors intel xeon scalable processors intel xeon processor e3 v5 family intel xeon processor e3 v6 family and intel atom processor c series (1) | ↑10 | ||||
| 25 | spring by pivotal | 6 | 1 | 1 | 2 | spring framework (6) | ↑17 | |
| 26 | natus medical incorporated | 5 | 4 | natus (5) | new | |||
| 27 | belkin | 4 | n750 db wi fi dual band n gigabit router f9k1103 (4) | new | ||||
| 28 | corel | 4 | photo paint (2) · corel photo paint (1) · coreldraw (1) | new | ||||
| 29 | freebsd | 4 | freebsd (4) | ↑28 | ||||
| 30 | hyland software | 4 | perceptive document filters (4) | new | ||||
| 31 | philips | 4 | dosewise portal (2) · intellivue mx40 patient worn monitor (2) | ↓19 | ||||
| 32 | abbott laboratories | 3 | accent anthem accent mri assurity allure and assurity mri (2) · accent and anthem (1) | new | ||||
| 33 | antenna house | 3 | antennahouse (3) | · | ||||
| 34 | buffalo | 3 | wzr 1750dhp2 (3) | ↓6 | ||||
| 35 | cisco | 3 | simple directmedia (2) · simple direct media (1) | · | ||||
| 36 | dell emc | 3 | 1 | avamar integrated data protection appliance (1) · dell emc unisphere for vmax virtual appliance dell emc solutions enabler virtual appliance dell emc vasa provider virtual appliance dell emc smis dell emc vmax embedded management emanagement dell emc vnx2 operating environment oe for file dell emc vnx2 operating environment oe for block dell emc vnx1 operating environment oe for file dell emc vnx1 operating environment oe for block dell emc vnxe3200 operating environment oe dell emc vnxe1600 operating environment oe dell emc vnxe 3100 3150 3300 operating environment oe dell emc vipr srm dell emc vipr srm dell emc xtremio dell emc vmax enas dell emc unity operating environment oe (1) · vipr controller (1) | ↓31 | |||
| 37 | ikiwiki | 3 | ikiwiki (3) | new | ||||
| 38 | mitsubishi electric europe b v | 3 | e designer (3) | new | ||||
| 39 | phoenix contact | 3 | 3 | phoenix contact ilc plcs (3) | · | |||
| 40 | tibco software | 3 | 1 | 1 | tibco jasperreports server (3) · tibco jasperreports server community edition (3) · tibco jasperreports server for activematrix bpm (3) | · | ||
| 41 | vmware | 3 | vrealize automation (2) · horizon daas (1) | ↑42 | ||||
| 42 | alessandro furieri | 2 | freexl (2) | new | ||||
| 43 | artifex software | 2 | mupdf (2) | new | ||||
| 44 | ca technologies | 2 | workload automation ae (1) · workload control center (1) | ↓15 | ||||
| 45 | check point software technologies | 2 | eclipse (1) · linux kernel (1) | new | ||||
| 46 | cloud foundry | 2 | cloud controller (1) · garden runc (1) | ↑4 | ||||
| 47 | foreman project | 2 | foreman (2) | · | ||||
| 48 | foscam | 2 | indoor ip camera (2) | · | ||||
| 49 | invincea | 2 | dell protected workspace (1) · x (1) | new | ||||
| 50 | kakadu software | 2 | kakadu sdk (2) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2018-04 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-20130 critical↑1
- 2CWE-20080 critical↑8
- 3CWE-7960 critical↓2
- 4CWE-12150 critical↑4
- 5CWE-12250 critical↑34
- 6CWE-28750 critical↓3
- 7CWE-39950 critical↓2
- 8CWE-35230 critical↑1
- 9CWE-69330 critical↑15
- 10CWE-9431 critical·
- 1CWE-19020 critical·
- 2CWE-2220 critical↑6
- 3CWE-28420 critical↓2
- 4CWE-31220 critical·
- 5CWE-40020 critical↓2
- 6CWE-46020 critical·
- 7CWE-7820 critical↓11
- 8CWE-78720 critical↑7
- 9CWE-78920 criticalnew
- 10CWE-12010 critical↓3
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.