Month report
August 2020
Rolled up 2026-08-09 20:45 from 370,745 CVE records
1,160 CVEs published, -42% on the same month last year. 34 rated critical, 0 listed by CISA as exploited. microsoft led with 121; the most common weakness class was CWE-20 (25). trend micro climbed 32 places, the largest move. 15 vendors ranked for the first time.
Published
1,160
Critical / high
34 / 194
Medium / low
181 / 24
Added to CISA KEV
0
Public exploit
51
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
447
Listed within 7 days
0%
Listed within 30 days
0%
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 121 | 1 | 3 | 3 | windows 10 version 1909 (86) · windows 10 version 2004 (86) · windows 10 version 1809 (85) | ↑1 | |
| 2 | ibm | 70 | security guardium data encryption (13) · security guardium insights (12) · i2 analyst notebook (6) | ↑1 | ||||
| 3 | cisco | 49 | 1 | 2 | 2 | cisco data center network manager (7) · cisco webex meetings (7) · cisco nx os software (5) | ↑1 | |
| 4 | adobe | 28 | 1 | 1 | adobe acrobat and reader (26) · adobe lightroom (1) · helix (1) | ↑2 | ||
| 5 | mozilla | 15 | firefox esr (10) · firefox (9) · thunderbird (9) | ↑4 | ||||
| 6 | gitlab | 13 | 1 | gitlab (12) · gitlab runner (1) | · | |||
| 7 | parallels | 13 | desktop (13) | · | ||||
| 8 | sap se | 13 | 1 | sap netweaver abap server and abap platform (3) · sap netweaver knowledge management (2) · sap adaptive server enterprise (1) | ↑6 | |||
| 9 | mcafee | 11 | dlp epo extension (6) · data loss prevention dlp (2) · mcafee application and change control (1) | ↑15 | ||||
| 10 | marvell | 10 | 1 | qconvergeconsole (10) | new | |||
| 11 | jenkins project | 9 | 3 | jenkins (3) · jenkins pipeline maven integration plugin (3) · jenkins email extension plugin (1) | ↓3 | |||
| 12 | foxit | 8 | studio photo (6) · phantompdf (2) | · | ||||
| 13 | etcd io | 6 | etcd (6) | new | ||||
| 14 | 6 | asylo (2) · aws s3 crypto sdk for golang (2) · android play core (1) | ↓7 | |||||
| 15 | combodo | 5 | itop (5) | new | ||||
| 16 | isc | 5 | bind9 (5) | · | ||||
| 17 | ncr | 5 | selfserv atm (5) | new | ||||
| 18 | philips | 5 | suresigns vs4 (3) · dreammapper (1) · smartcontrol (1) | · | ||||
| 19 | canonical | 4 | apport (2) · ppp (1) · whoopsie (1) | ↑12 | ||||
| 20 | trend micro | 4 | trend micro deep security (3) · trend micro anti threat toolkit attk (1) · trend micro apex one (1) | ↑32 | ||||
| 21 | baserproject | 3 | basercms (3) | new | ||||
| 22 | cellopoint | 3 | celloos (3) | new | ||||
| 23 | netgear | 3 | r6700 (2) · multiple routers (1) | ↓5 | ||||
| 24 | neuroinformatics unit integrative computational brain science collaboration division riken center for brain science | 3 | xoonips (2) · multiple netgear switching hubs (1) | new | ||||
| 25 | secomea | 3 | 1 | gatemanager (3) | new | |||
| 26 | siemens | 3 | automation license manager 5 (1) · automation license manager 6 (1) · desigo cc (1) | ↓15 | ||||
| 27 | avaya | 2 | avaya aura communication manager (1) · avaya aura messaging (1) · ip office (1) | · | ||||
| 28 | bitdefender | 2 | endpoinit security tools for windows (1) · endpoint security for mac (1) · endpoint security sdk (1) | · | ||||
| 29 | cayin technology | 2 | 2 | 2 | cayin cms (1) · cayin cms 20 (1) · cayin cms 40 (1) | new | ||
| 30 | cloud foundry | 2 | cf deployment (2) · capi (1) · routing (1) | · | ||||
| 31 | cog creators | 2 | red discordbot (2) | new | ||||
| 32 | cybersolutions | 2 | cybermail (2) | new | ||||
| 33 | dell | 2 | dell encryption enterprise (1) · isilon onefs (1) | ↓17 | ||||
| 34 | elastic | 2 | elastic enterprise search (1) · elasticsearch (1) | ↑7 | ||||
| 35 | github | 2 | github enterprise server (2) | ↑32 | ||||
| 36 | humantalk co | 2 | daviewindy (2) | · | ||||
| 37 | kajitori co | 2 | exment (2) | new | ||||
| 38 | opensuse | 2 | opensuse leap 15 1 (2) · opensuse tumbleweed (2) · opensuse leap 15 2 (1) | · | ||||
| 39 | oracle | 2 | oracle netsuite service (2) | ↓38 | ||||
| 40 | php factory | 2 | calendar01 and calendar02 (1) · calendar01 calendar02 pkobo news01 pkobo vote01 telop01 gallery01 calendarform01 and link01 (1) | new | ||||
| 41 | rapid7 | 2 | metasploit framework (2) | · | ||||
| 42 | softing industrial automation all versions prior to the latest build of version 4 47 0 | 2 | 1 | opc (2) | new | |||
| 43 | sylius | 2 | 1 | syliusresourcebundle (2) | · | |||
| 44 | tibco software | 2 | tibco data virtualization (1) · tibco data virtualization for aws marketplace (1) · tibco silver fabric (1) | · | ||||
| 45 | triaxtec | 2 | openapi python client (2) | new | ||||
| 46 | vmware tanzu | 2 | 1 | concourse (1) · rabbitmq (1) | ↓7 | |||
| 47 | yokogawa electric | 2 | cams for his (2) | · | ||||
| 48 | activesoft | 1 | mybrowserplus (1) | · | ||||
| 49 | atlassian | 1 | fisheye (1) | ↓39 | ||||
| 50 | auth0 | 1 | lock (1) | ↑5 |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2020-08 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-20250 critical↑2
- 2CWE-79220 critical—
- 3CWE-22161 critical↑3
- 4CWE-200100 critical↑5
- 5CWE-12171 critical↑8
- 6CWE-12570 critical↑32
- 7CWE-78770 critical↑16
- 8CWE-11960 critical↑4
- 9CWE-28761 critical↑1
- 10CWE-40060 critical↓2
- 1CWE-12950 critical·
- 2CWE-26951 critical↑58
- 3CWE-28450 critical↓8
- 4CWE-30650 critical↓7
- 5CWE-35250 critical↑67
- 6CWE-12241 critical↓2
- 7CWE-42740 critical↑74
- 8CWE-7442 critical·
- 9CWE-7740 critical↑16
- 10CWE-9440 critical↑5
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.