Month report
July 2019
Rolled up 2026-08-09 20:45 from 370,700 CVE records
1,618 CVEs published, -25.3% on the same month last year. 16 rated critical, 0 listed by CISA as exploited. oracle led with 157; the most common weakness class was CWE-20 (13). oracle climbed 46 places, the largest move. 20 vendors ranked for the first time.
Published
1,618
Critical / high
16 / 74
Medium / low
85 / 9
Added to CISA KEV
0
Public exploit
120
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
983
Listed within 7 days
0%
Listed within 30 days
0%
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 157 | 1 | mysql server (42) · vm virtualbox (13) · java (9) | ↑46 | |||
| 2 | microsoft | 78 | 4 | 19 | windows server (46) · windows (42) · windows server version 1903 server core installation (37) | ↓1 | ||
| 3 | qualcomm | 50 | snapdragon auto snapdragon compute snapdragon consumer iot snapdragon industrial iot snapdragon iot snapdragon mobile snapdragon voice music snapdragon wearables (5) · snapdragon auto snapdragon compute snapdragon connectivity snapdragon consumer electronics connectivity snapdragon consumer iot snapdragon industrial iot snapdragon mobile snapdragon voice music snapdragon wired infrastructure and networking (4) · snapdragon auto snapdragon consumer electronics connectivity snapdragon consumer iot snapdragon industrial iot snapdragon mobile snapdragon voice music (4) | ↑3 | ||||
| 4 | ibm | 48 | 1 | robotic process automation with automation anywhere (7) · db2 for linux unix and windows (6) · qradar siem (6) | ↓1 | |||
| 5 | mozilla | 48 | 1 | 2 | 8 | firefox (44) · thunderbird (28) · firefox esr (24) | · | |
| 6 | cisco | 28 | 1 | 1 | cisco small business 300 series managed switches (3) · cisco email security appliance esa (2) · cisco enterprise nfv infrastructure software (2) | ↓2 | ||
| 7 | jenkins project | 27 | 1 | jenkins configuration as code plugin (5) · jenkins (3) · jenkins docker plugin (3) | ↑4 | |||
| 8 | f5 | 22 | big ip (13) · f5 ssl orchestrator (2) · big ip afm analytics asm (1) | · | ||||
| 9 | siemens | 19 | 1 | ruggedcom rox mx5000 (14) · ruggedcom rox mx5000re (14) · ruggedcom rox rx1400 (14) | ↑4 | |||
| 10 | sap se | 11 | abap server and abap platform sap basis (1) · openui5 (1) · sap businessobjects business intelligence platform bi workspace enterprise (1) | ↓1 | ||||
| 11 | redhat | 10 | kernel (2) · ansible (1) · atomic openshift (1) | ↓1 | ||||
| 12 | freebsd | 8 | 2 | freebsd (8) | · | |||
| 13 | apache | 7 | vcl (3) · storm (2) · apache roller (1) | ↑4 | ||||
| 14 | linaro op tee | 7 | 1 | op tee (7) | new | |||
| 15 | jsish | 6 | jsi (5) · jsish (1) | new | ||||
| 16 | mcafee | 6 | data loss prevention dlpe for windows (2) · data loss prevention epo extension (1) · dlp endpoint epo extension (1) | ↑3 | ||||
| 17 | zzcms | 6 | zzcms (5) · zzmcms (1) | new | ||||
| 18 | juniper networks | 5 | 1 | junos os (5) | · | |||
| 19 | linux | 5 | onos (4) · onos sdn controller (1) | ↑4 | ||||
| 20 | 4 | hhvm (1) · proxygen (1) · whatsapp desktop (1) | ↓5 | |||||
| 21 | invenio | 4 | invenio app (1) · invenio communities (1) · invenio previewer (1) | new | ||||
| 22 | sukimalab com | 4 | attendance manager (2) · online lesson booking (2) | new | ||||
| 23 | the moodle project | 4 | moodle (4) | new | ||||
| 24 | broadlearning | 3 | 3 | eclass (3) | new | |||
| 25 | domainmod | 3 | domainmod (3) | new | ||||
| 26 | elastic | 3 | 1 | elastic apm agent for ruby (1) · elasticsearch (1) · kibana (1) | · | |||
| 27 | gnu libc | 3 | glibc (3) | new | ||||
| 28 | icedtea | 3 | icedtea web (3) | new | ||||
| 29 | micro focus | 3 | arcsight logger (1) · arcsight security management center (1) · netiq advanced authentication framework (1) | ↓5 | ||||
| 30 | proclima | 3 | proclima all versions prior to version 8 0 0 (3) | new | ||||
| 31 | sitebridge | 3 | joruri mail (2) · joruri cms 2017 (1) | · | ||||
| 32 | the eclipse foundation | 3 | eclipse openj9 (3) | ↑20 | ||||
| 33 | wavpack | 3 | wavpack (3) | new | ||||
| 34 | akeo consulting | 2 | rufus (2) | · | ||||
| 35 | arlo | 2 | basestation firmware (2) | new | ||||
| 36 | avaya | 2 | 1 | avaya aura conferencing (1) · avaya control manager (1) | · | |||
| 37 | cloud foundry | 2 | uaa release oss (2) | ↓4 | ||||
| 38 | cz nic | 2 | knot resolver (2) | · | ||||
| 39 | dell emc | 2 | unity (2) | ↓13 | ||||
| 40 | delta electronics | 2 | cncsoft screeneditor (2) | · | ||||
| 41 | document foundation | 2 | 1 | libreoffice (2) | · | |||
| 42 | dolibarr erp crm | 2 | 1 | dolibarr (2) | new | |||
| 43 | gitea | 2 | gitea (2) | new | ||||
| 44 | glpi | 2 | glpi product (2) | new | ||||
| 45 | huawei | 2 | mate 20 x (2) · honor magic 2 (1) · mate 20 (1) | ↓38 | ||||
| 46 | hunesion | 2 | i onenet (2) | new | ||||
| 47 | intel | 2 | intel r processor diagnostic tool advisory (1) · intel r ssd dc s4500 s4600 series (1) | · | ||||
| 48 | jeesite | 2 | jeesite (2) | new | ||||
| 49 | jhead | 2 | jhead (2) | new | ||||
| 50 | mgetty | 2 | mgetty (2) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2019-07 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-20132 critical↑6
- 2CWE-284122 critical↑2
- 3CWE-79100 critical—
- 4CWE-2271 critical↑11
- 5CWE-20060 critical↑9
- 6CWE-40060 critical·
- 7CWE-8963 critical↑15
- 8CWE-11950 critical↑15
- 9CWE-12250 critical↑3
- 10CWE-19050 critical↑14
- 1CWE-43450 critical↑37
- 2CWE-7851 critical↓3
- 3CWE-9440 critical↑51
- 4CWE-12130 critical↓4
- 5CWE-12530 critical↓9
- 6CWE-26430 critical↓5
- 7CWE-28731 critical↑9
- 8CWE-28830 critical·
- 9CWE-47630 critical·
- 10CWE-53230 critical↑7
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.