Month report
August 2019
Rolled up 2026-08-09 20:45 from 370,662 CVE records
2,001 CVEs published, +97.5% on the same month last year. 31 rated critical, 0 listed by CISA as exploited. adobe led with 118; the most common weakness class was CWE-20 (22). symantec climbed 45 places, the largest move. 12 vendors ranked for the first time.
Published
2,001
Critical / high
31 / 150
Medium / low
112 / 4
Added to CISA KEV
0
Public exploit
96
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
901.5
Listed within 7 days
0%
Listed within 30 days
0%
Weakness × vendor
Where the two overlap
| Vendor | CWE-20 | CWE-400 | CWE-119 | CWE-78 | CWE-125 | CWE-264 | CWE-284 | CWE-79 |
|---|---|---|---|---|---|---|---|---|
| adobe | ||||||||
| microsoft | 1 | 1 | ||||||
| cisco | 17 | 1 | 8 | 8 | 4 | 1 | 3 | |
| ibm | ||||||||
| jenkins project | ||||||||
| atlassian | ||||||||
| sap se | ||||||||
| hewlett packard enterprise hpe |
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | adobe | 118 | 13 | adobe acrobat and reader (75) · adobe photoshop cc (34) · creative cloud desktop application (4) | · | |||
| 2 | microsoft | 88 | 8 | 12 | windows server 2019 (57) · windows server 2019 server core installation (57) · windows server version 1903 server core installation (57) | — | ||
| 3 | cisco | 69 | 8 | 7 | cisco enterprise nfv infrastructure software (12) · cisco unified computing system e series software ucse (7) · cisco unified computing system director (6) | ↑3 | ||
| 4 | ibm | 44 | 1 | informix dynamic server enterprise edition (9) · emptoris spend analysis (6) · contract management (5) | — | |||
| 5 | jenkins project | 25 | jenkins (2) · jenkins gitlab authentication plugin (2) · jenkins jclouds plugin (2) | ↑2 | ||||
| 6 | atlassian | 16 | 1 | 1 | 2 | jira (13) · confluence server (1) · jira server and data center (1) | · | |
| 7 | sap se | 16 | 1 | 1 | sap businessobjects business intelligence platform bi workspace (2) · sap enable now (2) · commerce cloud (1) | ↑3 | ||
| 8 | hewlett packard enterprise hpe | 13 | hpe 3par service processor (6) · hpe 3par storeserv management and core software media (6) · hp xp7 cvae (1) | new | ||||
| 9 | apache | 10 | 1 | 2 | apache tika (3) · activemq (1) · apache commons beanutils (1) | ↑4 | ||
| 10 | floragunn | 9 | search guard (7) · search guard kibana plugin (2) | new | ||||
| 11 | huawei | 8 | pcmanager (3) · cloudlink phone 7900 (1) · emily l29c (1) | ↑34 | ||||
| 12 | nvidia | 8 | gpu display driver (5) · shield tv (3) | · | ||||
| 13 | siemens | 8 | ruggedcom rox mx5000 (2) · ruggedcom rox mx5000re (2) · ruggedcom rox rx1400 (2) | ↓4 | ||||
| 14 | canon | 6 | eos series digital cameras powershot sx740 hs powershot sx70 hs and powershot g5xmark (6) | new | ||||
| 15 | kubernetes | 6 | kubernetes (6) | · | ||||
| 16 | androvideo | 5 | advan vd 1 firmware (5) | new | ||||
| 17 | mcafee | 5 | data loss prevention dlpe for windows (2) · mcafee web gateway mwg (2) · mcafee frp (1) | ↓1 | ||||
| 18 | redhat | 5 | atomic openshift (2) · keycloak (2) · 389 ds base (1) | ↓7 | ||||
| 19 | symantec | 5 | symantec advanced secure gateway asg (2) · symantec proxysg (2) · management center mc (1) | ↑45 | ||||
| 20 | belwith products | 4 | hickory smart (3) · hickory smart ethernet bridge (1) | new | ||||
| 21 | micro focus | 4 | content manager (2) · self service password reset sspr (1) · verastream host integrator (1) | ↑8 | ||||
| 22 | trend micro | 4 | trend micro password manager (2) · trend micro ransom buster trend micro security consumer (1) · trend micro security consumer (1) | · | ||||
| 23 | asus | 3 | 2 | 1 | hg100 firmware (2) · smarthome android app (1) · smarthome ios app (1) | · | ||
| 24 | cloud foundry | 3 | uaa release oss (2) · cf cli (1) · cf cli release (1) | ↑13 | ||||
| 25 | dell | 3 | alienware digital delivery (2) · dell digital delivery (2) · dell client commercial and consumer platforms (1) | · | ||||
| 26 | document foundation | 3 | 1 | libreoffice (3) | ↑15 | |||
| 27 | estsoft | 3 | alsee (1) · altools update service (1) · alzip (1) | · | ||||
| 28 | lenovo | 3 | bios (1) · paperdisplay hotkey service (1) · solution center (1) | · | ||||
| 29 | libvirt | 3 | libvirt (3) | · | ||||
| 30 | mongodb | 3 | mongodb server (3) | new | ||||
| 31 | netapp | 3 | data ontap operating in 7 mode (2) · oncommand insight (1) | · | ||||
| 32 | tibco software | 3 | tibco api exchange gateway (1) · tibco api exchange gateway distribution for tibco silver fabric (1) · tibco ftl community edition (1) | · | ||||
| 33 | clickhouse | 2 | clickhouse (2) | new | ||||
| 34 | fortinet | 2 | fortios (1) · fortiweb (1) | · | ||||
| 35 | johnson controls | 2 | metasys versions prior to 9 0 (2) | · | ||||
| 36 | php group | 2 | php (2) | · | ||||
| 37 | rapid7 | 2 | insightappsec (1) · nexpose (1) | ↑23 | ||||
| 38 | ubuntu | 2 | apport (1) · whoopsie (1) | · | ||||
| 39 | zephyr | 2 | shell (2) | new | ||||
| 40 | zte | 2 | zxhn f670 (2) | ↑27 | ||||
| 41 | bluetooth | 1 | 1 | br edr (1) | new | |||
| 42 | bosch | 1 | iot gateway software (1) · mbs sdk (1) | · | ||||
| 43 | crosscert | 1 | unisign (1) | new | ||||
| 44 | dell emc | 1 | powerconnect 7000 (1) · powerconnect 8024 (1) · powerconnect m6220 (1) | ↓5 | ||||
| 45 | djangoblog project | 1 | djangoblog (1) | new | ||||
| 46 | elastic | 1 | elastic apm agent for python (1) | ↓20 | ||||
| 47 | 1 | fizz (1) | ↓27 | |||||
| 48 | forcepoint | 1 | forcepoint next generation firewall (1) | · | ||||
| 49 | hp | 1 | hp 2910 48g al switch (1) | · | ||||
| 50 | imgtech co | 1 | zinsvx dll activex control (1) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2019-08 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-20220 critical—
- 2CWE-400120 critical↑4
- 3CWE-119111 critical↑5
- 4CWE-78112 critical↑8
- 5CWE-12592 critical↑10
- 6CWE-26480 critical↑10
- 7CWE-28470 critical↓5
- 8CWE-7970 critical↓5
- 9CWE-9470 critical↑4
- 10CWE-28561 critical·
- 1CWE-28764 critical↑6
- 2CWE-12151 critical↑2
- 3CWE-20050 critical↓8
- 4CWE-53250 critical↑6
- 5CWE-26940 critical·
- 6CWE-35240 critical↑35
- 7CWE-41640 critical↑42
- 8CWE-78741 critical↑5
- 9CWE-86340 critical·
- 10CWE-19030 critical↓10
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.