Month report
October 2018
Rolled up 2026-08-09 20:45 from 370,708 CVE records
1,468 CVEs published, +5% on the same month last year. 17 rated critical, 0 listed by CISA as exploited. oracle led with 182; the most common weakness class was CWE-20 (39). trend micro climbed 54 places, the largest move. 8 vendors ranked for the first time.
Published
1,468
Critical / high
17 / 79
Medium / low
93 / 7
Added to CISA KEV
0
Public exploit
88
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
1149.5
Listed within 7 days
0%
Listed within 30 days
0%
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 182 | 4 | mysql server (32) · peoplesoft enterprise pt peopletools (21) · outside in technology (20) | · | |||
| 2 | cisco | 127 | 4 | cisco webex wrf player (14) · cisco ios xe software (11) · cisco ios software (10) | · | |||
| 3 | adobe | 102 | 1 | adobe acrobat and reader (86) · adobe digital editions (9) · adobe experience manager (5) | ↑5 | |||
| 4 | qualcomm | 62 | snapdragon mobile (28) · snapdragon automobile snapdragon mobile snapdragon wear (15) · snapdragon mobile snapdragon wear (13) | ↓3 | ||||
| 5 | ibm | 61 | 1 | rational quality manager (16) · security key lifecycle manager (10) · websphere application server (7) | ↓2 | |||
| 6 | microsoft | 50 | 1 | 7 | windows 10 (22) · windows 10 servers (21) · windows server 2016 (19) | ↓4 | ||
| 7 | mozilla | 32 | 1 | firefox (29) · firefox esr (23) · thunderbird (22) | · | |||
| 8 | 25 | 2 | android (25) | ↓3 | ||||
| 9 | juniper networks | 21 | 1 | junos os (18) · junos space (1) · junos space security director (1) | · | |||
| 10 | foxit | 19 | foxit reader (10) · foxit pdf reader (8) · foxit phantompdf (1) | · | ||||
| 11 | f5 networks | 18 | big ip ltm aam afm analytics apm asm dns edge gateway fps gtm link controller pem webaccelerator (8) · big ip apm (3) · big ip afm (2) | ↑16 | ||||
| 12 | foxit software | 15 | foxit pdf reader (15) | · | ||||
| 13 | apache | 10 | 2 | apache impala (2) · apache activemq (1) · apache pdfbox (1) | ↓4 | |||
| 14 | advantech | 9 | 2 | advantech webaccess (9) | · | |||
| 15 | intel | 9 | intel graphics driver (3) · intel nuc firmware kits (1) · intel nvme and intel rste (1) | ↓8 | ||||
| 16 | sap | 9 | sap adaptive server enterprise ase (2) · sap businessobjects business intelligence platform (2) · project gardener (1) | ↓4 | ||||
| 17 | moxa | 7 | thingspro iiot gateway and device management software solutions (7) | · | ||||
| 18 | the atlantis word processor team | 7 | atlantis word processor (7) | new | ||||
| 19 | fuji electric | 6 | frenic loader of frenic mini c1 frenic mini c2 frenic eco frenic multi frenic mega frenic ace (3) · alpha5 smart loader (2) · energy savings estimator (1) | — | ||||
| 20 | dell emc | 5 | esrs virtual edition (3) · dell digital delivery (1) · dell emc unity (1) | ↓7 | ||||
| 21 | huawei technologies co | 5 | alp al00b alp al00b rsc bla tl00b charlotte al00a emily al00a (1) · anne al00 (1) · mate 10 pro (1) | ↓10 | ||||
| 22 | lcds le o consultoria e desenvolvimento de sistemas ltda me | 5 | laquis scada (5) | · | ||||
| 23 | opensuse | 5 | open build service (5) | · | ||||
| 24 | the gluster project | 5 | glusterfs (4) · glusterfs server (1) | new | ||||
| 25 | trend micro | 5 | trend micro antivirus for mac consumer (5) | ↑54 | ||||
| 26 | atlassian | 4 | jira (3) · fisheye and crucible (1) | ↑23 | ||||
| 27 | auto maskin | 4 | 4 | dcu 210e (4) · rp 210e (4) · marine pro observer android app (2) | new | |||
| 28 | cloud foundry | 4 | 1 | bosh (1) · cf networking release (1) · log cache release (1) | ↑8 | |||
| 29 | mediawiki | 4 | mediawiki (4) | · | ||||
| 30 | nuuo | 4 | 1 | nuuo cms (4) | ↑10 | |||
| 31 | pivotal | 4 | 2 | pivotal container service (1) · pivotal ops manager (1) · spring framework (1) | ↓6 | |||
| 32 | siemens | 4 | rox ii (2) · simatic et 200sp open controller (1) · simatic s7 1200 cpu family version 4 (1) | ↑2 | ||||
| 33 | yokogawa | 4 | stardom controllers fcj fcn 100 fcn rtu fcn 500 (4) | · | ||||
| 34 | delta electronics | 3 | delta industrial automation tpeditor (2) · ispsoft (1) | ↑21 | ||||
| 35 | gain electronic co | 3 | saga1 l8b (3) | new | ||||
| 36 | hangzhou xiongmai technology co | 3 | xmeye p2p cloud server (3) | new | ||||
| 37 | hewlett packard enterprise | 3 | hpe intelligence management center imc plat (1) · hpe service governance framework sgf (1) · hpe uiot (1) | ↓19 | ||||
| 38 | linksys | 3 | 1 | eseries e1200 (3) · eseries e2500 (3) | · | |||
| 39 | suse linux | 3 | 1 | smt (3) | new | |||
| 40 | systemd | 3 | 2 | systemd (3) | new | |||
| 41 | talos | 3 | 1 | sophos (2) · acd systems (1) | ↓15 | |||
| 42 | the curl project | 3 | curl (3) | · | ||||
| 43 | the eclipse foundation | 3 | 1 | eclipse vert x (3) | · | |||
| 44 | tp link | 3 | tp link tl wrn841n (3) | ↑34 | ||||
| 45 | vmware | 3 | esxi (2) · fusion (2) · workstation (2) | — | ||||
| 46 | wecon | 3 | pi studio (3) · pi studio hmi (3) | ↑34 | ||||
| 47 | emerson | 2 | ams device manager (2) | · | ||||
| 48 | entes | 2 | emg12 (2) | new | ||||
| 49 | ge | 2 | ge communicator (1) · ifix (1) | · | ||||
| 50 | hp | 2 | 1 | certain hp enterprise printers hp pagewide printers and mfp products (1) · hp 240 g1 notebook pc and certain other consumer notebooks (1) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2018-10 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-20390 critical—
- 2CWE-79150 critical↑3
- 3CWE-399130 critical·
- 4CWE-284110 critical↑9
- 5CWE-400100 critical↓2
- 6CWE-416100 critical↑4
- 7CWE-77101 critical↑44
- 8CWE-12190 critical↓4
- 9CWE-26490 critical·
- 10CWE-35290 critical↑4
- 1CWE-20080 critical↓9
- 2CWE-2270 critical↑3
- 3CWE-28770 critical↑18
- 4CWE-12550 critical↓3
- 5CWE-61150 critical·
- 6CWE-78750 critical↑36
- 7CWE-12240 critical↓11
- 8CWE-28540 critical↓11
- 9CWE-79841 critical·
- 10CWE-12030 critical↑3
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.