Month report
February 2019
Rolled up 2026-08-09 20:45 from 370,662 CVE records
838 CVEs published, -36.8% on the same month last year. 8 rated critical, 0 listed by CISA as exploited. mozilla led with 31; the most common weakness class was CWE-79 (10). nvidia climbed 57 places, the largest move. 11 vendors ranked for the first time.
Published
838
Critical / high
8 / 28
Medium / low
56 / 3
Added to CISA KEV
0
Public exploit
47
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
1117
Listed within 7 days
0%
Listed within 30 days
0%
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | mozilla | 31 | firefox (30) · firefox esr (16) · thunderbird (13) | · | ||||
| 2 | cisco | 30 | 1 | 3 | cisco hyperflex hx series (5) · cisco meeting server (2) · cisco telepresence management suite tms (2) | ↑3 | ||
| 3 | 30 | 1 | chrome (30) | ↓1 | ||||
| 4 | qualcomm | 29 | android for msm firefox os for msm qrd android (7) · snapdragon auto snapdragon compute snapdragon connectivity snapdragon consumer electronics connectivity snapdragon consumer iot snapdragon industrial iot snapdragon mobile snapdragon voice music (4) · snapdragon auto snapdragon compute snapdragon connectivity snapdragon consumer electronics connectivity snapdragon consumer iot snapdragon industrial iot snapdragon mobile (3) | ↑2 | ||||
| 5 | ibm | 27 | 1 | 1 | security identity governance and intelligence (7) · bigfix compliance (4) · infosphere information server (3) | ↑4 | ||
| 6 | android | 26 | 2 | android (26) | · | |||
| 7 | jenkins project | 23 | 1 | jenkins job import plugin (3) · jenkins blue ocean plugins (2) · jenkins github authentication plugin (2) | ↑10 | |||
| 8 | ics cert | 22 | 2 | lcds laquis scada (7) · pr100088 modbus gateway (3) · wecon levistudiou (3) | ↑6 | |||
| 9 | hackerone | 15 | 1 | m server (2) · airmax edgemax (1) · defaults deep (1) | · | |||
| 10 | check point software technologies | 14 | 1 | 1 | rdesktop (10) · winrar (4) | · | ||
| 11 | sap se | 11 | sap disclosure management (2) · abap platform kernel (1) · abap platform krnl32nuc (1) | ↑1 | ||||
| 12 | nvidia | 10 | nvidia gpu graphics driver (7) · android (3) | ↑57 | ||||
| 13 | atlassian | 7 | jira (3) · fisheye and crucible (2) · confluence data center (1) | ↑38 | ||||
| 14 | f5 networks | 7 | big ip ltm aam afm analytics apm asm dns edge gateway fps gtm link controller pem webaccelerator (4) · big ip apm (2) · big ip ltm (1) | · | ||||
| 15 | apache | 6 | apache airflow (1) · apache guacamole (1) · apache hadoop (1) | ↓4 | ||||
| 16 | mcafee | 6 | mcafee agent ma (2) · epolicy orchestrator cloud (1) · mcafee endpoint security ens (1) | ↑9 | ||||
| 17 | micco | 5 | self extracting archives created by unlha32 dll (1) · the installer of lhmelting (1) · the installer of unarj32 dll (1) | new | ||||
| 18 | schneider electric se | 5 | eurotherm by schneider electric guicon v2 0 gold build 683 0 (3) · iiot monitor 3 1 38 (1) · zelio soft 2 v5 1 and prior versions (1) | · | ||||
| 19 | flexera software | 4 | libraw (2) · flexnet publisher (1) · libexif (1) | · | ||||
| 20 | talos | 4 | 1 | acd systems (3) · coturn (1) | · | |||
| 21 | debian gnu linux | 3 | rssh (2) · tmpreaper (1) | ↑32 | ||||
| 22 | lcds | 3 | lcds laquis scada (3) | new | ||||
| 23 | netapp | 3 | clustered data ontap (2) · atto fibrebridge 7500n (1) | ↑16 | ||||
| 24 | the curl project | 3 | 1 | curl (3) | · | |||
| 25 | dell | 2 | dell networking os10 (1) · wyse password encoder (1) | ↑3 | ||||
| 26 | freebsd | 2 | 1 | freebsd (2) | ↑34 | |||
| 27 | kaspersky lab | 2 | codesys v3 products (2) | · | ||||
| 28 | micro focus | 2 | 2 | filr (2) | · | |||
| 29 | openam consortium | 2 | openam (1) · openam open source edition (1) | new | ||||
| 30 | steven ellis | 2 | easy2map photos wordpress plugin (2) | new | ||||
| 31 | tenable | 2 | 1 | mikrotik routeros (1) · tenable nessus (1) | ↑2 | |||
| 32 | the eclipse foundation | 2 | eclipse openj9 (2) | ↑48 | ||||
| 33 | trend micro | 2 | 1 | trend micro dr safety for android consumer (1) · trend micro security consumer (1) | · | |||
| 34 | avaya | 1 | communication manager (1) | ↑18 | ||||
| 35 | ca technologies a broadcom | 1 | ca automic workload automation (1) | new | ||||
| 36 | cloud foundry | 1 | credhub cli (1) | · | ||||
| 37 | d circle | 1 | power egg (1) | new | ||||
| 38 | dell emc | 1 | vnx control station in dell emc vnx2 oe for file (1) | · | ||||
| 39 | drupal | 1 | 1 | 1 | drupal core (1) | ↓24 | ||
| 40 | forcepoint | 1 | forcepoint user id fuid server (1) | new | ||||
| 41 | fortinet | 1 | fortinet forticlientwindows (1) | ↑18 | ||||
| 42 | house gate | 1 | house gate app for ios (1) | new | ||||
| 43 | mambo | 1 | mambo cms (1) | new | ||||
| 44 | mitsubishi electric | 1 | q03 04 06 13 26udvcpu (1) · q03udecpu q04 06 10 13 20 26 50 100udehcpu (1) · q04 06 13 26udpvcpu (1) | new | ||||
| 45 | n a | 1 | android (1) | · | ||||
| 46 | netiq edirectory | 1 | netiq access manager nam (1) | · | ||||
| 47 | ntt docomo | 1 | v20 pro l 01j (1) | · | ||||
| 48 | oaklouds | 1 | mailsherlock (1) | new | ||||
| 49 | openssl | 1 | openssl (1) | · | ||||
| 50 | qnap | 1 | photo station (1) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2019-02 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-79100 critical↑1
- 2CWE-40090 critical↑10
- 3CWE-2070 critical↑3
- 4CWE-12560 critical↓1
- 5CWE-12650 critical·
- 6CWE-12240 critical↑11
- 7CWE-2240 critical↑23
- 8CWE-28440 critical↓1
- 9CWE-30641 critical↑13
- 10CWE-11931 critical↓5
- 1CWE-28730 critical↓1
- 2CWE-39930 critical↑31
- 3CWE-7430 critical·
- 4CWE-78730 critical↑11
- 5CWE-79830 critical↓6
- 6CWE-12120 critical↑12
- 7CWE-28520 critical↑4
- 8CWE-28820 critical·
- 9CWE-29520 critical·
- 10CWE-41620 critical↓19
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.