Month report
August 2018
Rolled up 2026-08-09 20:45 from 376,493 CVE records
1,013 CVEs published, -34.2% on the same month last year. 27 rated critical, 0 listed by CISA as exploited. microsoft led with 59; the most common weakness class was CWE-20 (19). ics cert climbed 49 places, the largest move. 7 vendors ranked for the first time.
Published
1,013
-53.3%on the previous month
Critical / high
27 / 69
of the 193 scored
Medium / low
84 / 13
the rest of the scored bands
Added to CISA KEV
0
listed as exploited this month
Public exploit
91
exploit code indexed publicly
Scanner template
0
0% of the month
Publication to KEV
How long before CISA listed them
8 published this month and listed since — not the 0 listed during it.
Median days to listing
1319.5
from publication to CISA's date added
Listed within 7 days
0%
of the 8
Listed within 30 days
0%
of the 8
Weakness × vendor
Where the two overlap
CVEs carrying both. Each row is shaded against its own worst class.
| Vendor | CWE-20 | CWE-79 | CWE-798 | CWE-200 | CWE-22 | CWE-400 | CWE-284 | CWE-285 |
|---|---|---|---|---|---|---|---|---|
| microsoft | 1 | |||||||
| hewlett packard enterprise | ||||||||
| ibm | ||||||||
| insteon | ||||||||
| samsung | ||||||||
| apache | ||||||||
| kaspersky lab | ||||||||
| ics cert | 1 | 1 | 1 | 1 |
Vendors
Ranked by distinct CVEs this month
Δ is the move against last month's rank.
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 59 | 4 | 5 | windows 10 (22) · windows 10 servers (22) · windows server 2016 (19) | ↑4 | ||
| 2 | hewlett packard enterprise | 47 | 2 | hpe 3par service processors (6) · hpe centralview fraud risk management (5) · aruba clearpass (4) | · | |||
| 3 | ibm | 33 | 1 | security identity governance and intelligence (7) · maximo asset management (5) · rational doors next generation (3) | — | |||
| 4 | insteon | 22 | 1 | insteon (17) · insteon hub 2245 222 (4) · sap (1) | · | |||
| 5 | samsung | 21 | 10 | samsung (11) · smartthings hub sth eth 250 (10) | · | |||
| 6 | apache | 18 | 1 | 4 | apache traffic server (5) · apache tomcat (3) · apache airflow (1) | ↑2 | ||
| 7 | kaspersky lab | 14 | kraftway (6) · eltex esp 200 (5) · zipato zipabox smart home controller (3) | · | ||||
| 8 | ics cert | 12 | 1 | netcomm wireless g lte light industrial m2m router nwl 25 with firmware 2 0 29 11 and prior (4) · cncsoft with screeneditor (2) · deltav (2) | ↑49 | |||
| 9 | intel | 12 | saffron memorybase (3) · smart sound technology (3) · intel distribution for python (1) | ↑1 | ||||
| 10 | cisco | 11 | small business 100 series wireless access points (2) · small business 300 series wireless access points (2) · asr 9000 series aggregation services router software (1) | · | ||||
| 11 | ca technologies | 10 | 1 | ppm (5) · unified infrastructure management (3) · ca api developer portal (1) | · | |||
| 12 | redhat | 10 | ansible tower (2) · keycloak (2) · brms (1) | ↓6 | ||||
| 13 | sap | 10 | sap businessobjects business intelligence (3) · sap businessobjects business intelligence platform (1) · sap businessobjects financial consolidation (1) | — | ||||
| 14 | talos | 8 | 5 | samsung (4) · insteon (2) · sony (2) | · | |||
| 15 | tenable | 8 | asustor data master (6) · securitycenter (2) | · | ||||
| 16 | trend micro | 7 | trend micro control manager (3) · trend micro security consumer (3) · trend micro officescan (1) | · | ||||
| 17 | atlassian | 6 | confluence questions (2) · jira (2) · cloudtoken (1) | ↓2 | ||||
| 18 | hackerone | 6 | nextcloud server (2) · active support ruby gem (1) · aedes (1) | ↑38 | ||||
| 19 | the curl project | 6 | curl (6) | ↑11 | ||||
| 20 | micro focus | 5 | 1 | data center automation containerized suite (2) · hybrid cloud management containerized suite (2) · network operations management nom suite cdf (2) | · | |||
| 21 | schneider electric se | 5 | 2 | modicon m221 all references all versions prior to firmware v1 6 2 0 (4) · powerlogic pm5560 prior to fw version 2 5 4 (1) | ↓14 | |||
| 22 | the samba team | 5 | samba (5) | new | ||||
| 23 | dell emc | 4 | 1 | data protection advisor (1) · integrated data protection appliance (1) · networker (1) | ↓6 | |||
| 24 | medtronic | 4 | 24950 mycarelink monitor (2) · 24952 mycarelink monitor (2) · mmt 508 minimed pump (2) | ↑9 | ||||
| 25 | oracle | 4 | fusion middleware (1) · fusion middleware mapviewer (1) · oracle database (1) | ↓24 | ||||
| 26 | philips | 4 | intellispace cardiovascular iscv products (2) · pagewriter tc10 tc20 tc30 tc50 tc70 cardiographs (2) | · | ||||
| 27 | rsa | 4 | bsafe micro edition suite (4) · bsafe crypto c micro edition (1) | ↑16 | ||||
| 28 | siemens | 4 | simatic step 7 tia portal and wincc tia portal v10 v11 v12 simatic step 7 tia portal and wincc tia portal v13 simatic step 7 tia portal and wincc tia portal v14 simatic step 7 tia portal and wincc tia portal v15 (2) · automation license manager 5 (1) · automation license manager 5 automation license manager 6 (1) | ↓14 | ||||
| 29 | symantec | 4 | norton identity safe for android (1) · norton power eraser (1) · norton utilities (1) | ↑37 | ||||
| 30 | the openjpeg project | 4 | openjpeg (2) · openjpeg2 (2) | new | ||||
| 31 | computerinsel | 3 | computerinsel photoline (3) | · | ||||
| 32 | foxit | 3 | foxit (2) · foxit reader (1) | ↓30 | ||||
| 33 | huawei technologies co | 3 | usg2205bsr usg2220bsr usg5120bsr usg5150bsr (3) | ↓21 | ||||
| 34 | nvidia | 3 | nvidia geforce experience (3) | · | ||||
| 35 | the foreman project | 3 | foreman (2) · foreman katello plugin (1) | new | ||||
| 36 | emerson | 2 | deltav dcs (2) | · | ||||
| 37 | f5 networks | 2 | big ip apm client for linux (1) · big ip apm client for macos (1) · big ip apm client for windows (1) | ↓28 | ||||
| 38 | 2 | chrome (2) | · | |||||
| 39 | hp | 2 | hp inkjet printers (2) | · | ||||
| 40 | linux | 2 | linux (1) · linux kernel (1) | ↓16 | ||||
| 41 | netapp | 2 | 7 mode transition tool (1) · clustered data ontap (1) | · | ||||
| 42 | nextcloud | 2 | nextcloud server (1) · nextcloud talk (1) | ↓8 | ||||
| 43 | opensuse | 2 | openbuildservice (2) | · | ||||
| 44 | palo alto networks | 2 | pan os (2) | new | ||||
| 45 | postgresql global development group | 2 | postgresql (2) | new | ||||
| 46 | qnap | 2 | 1 | helpdesk in qts (1) · photo station (1) | ↓18 | |||
| 47 | the cobbler project | 2 | 1 | cobbler (2) | new | |||
| 48 | the eclipse foundation | 2 | 1 | eclipse openj9 (1) · eclipse vert x (1) | · | |||
| 49 | the jasper project | 2 | jasper (2) | new | ||||
| 50 | the node js project | 2 | node js (2) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2018-08 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-20190 critical↑2
- 2CWE-79140 critical↑2
- 3CWE-79880 critical↑15
- 4CWE-20070 critical↑4
- 5CWE-2261 critical↑1
- 6CWE-40050 critical↑11
- 7CWE-28441 critical↑3
- 8CWE-28540 critical↑7
- 9CWE-28740 critical↑12
- 10CWE-41640 critical↓8
- 1CWE-7741 critical↑1
- 2CWE-12230 critical↑1
- 3CWE-12530 critical↑1
- 4CWE-20330 critical·
- 5CWE-29530 critical↓4
- 6CWE-35230 critical↑3
- 7CWE-38530 critical↑66
- 8CWE-47630 critical↑5
- 9CWE-50230 critical↑29
- 10CWE-5930 critical↑67
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.