Month report
October 2020
Rolled up 2026-08-09 20:45 from 370,662 CVE records
1,594 CVEs published, +1.8% on the same month last year. 49 rated critical, 0 listed by CISA as exploited. apple led with 241; the most common weakness class was CWE-79 (31). sonicwall climbed 55 places, the largest move. 12 vendors ranked for the first time.
Published
1,594
Critical / high
49 / 278
Medium / low
309 / 32
Added to CISA KEV
0
Public exploit
93
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
422
Listed within 7 days
0%
Listed within 30 days
0%
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | apple | 241 | 2 | 4 | macos (166) · ios (114) · tvos (92) | · | ||
| 2 | oracle | 160 | 9 | 4 | 4 | mysql server (48) · java se jdk and jre (8) · peoplesoft enterprise pt peopletools (7) | · | |
| 3 | microsoft | 89 | 6 | windows 10 version 2004 (51) · windows 10 version 1903 for x64 based systems (50) · windows 10 version 1909 (50) | ↓2 | |||
| 4 | cisco | 56 | 1 | 1 | cisco adaptive security appliance asa software (20) · cisco firepower threat defense software (10) · cisco firepower management center (9) | ↓2 | ||
| 5 | ibm | 52 | 1 | curam spm (9) · security access manager (5) · security guardium (5) | ↓1 | |||
| 6 | juniper networks | 30 | junos os (25) · junos os evolved (4) · mist cloud ui (3) | · | ||||
| 7 | mozilla | 27 | firefox (21) · thunderbird (10) · firefox esr (9) | · | ||||
| 8 | nvidia | 24 | nvidia dgx servers (9) · nvidia vgpu software (7) · nvidia gpu display driver (4) | ↑25 | ||||
| 9 | adobe | 22 | illustrator (7) · animate (4) · after effects (2) | ↑1 | ||||
| 10 | sap se | 20 | 1 | 2 | sap 3d visual enterprise viewer (6) · sap commerce cloud (2) · sap netweaver application server java (2) | ↓3 | ||
| 11 | gitlab | 15 | 1 | gitlab (13) · gitlab runner (2) | ↓3 | |||
| 12 | jenkins project | 13 | jenkins active choices plugin (2) · jenkins audit trail plugin (2) · jenkins maven cascade release plugin (2) | ↓6 | ||||
| 13 | sonicwall | 13 | 1 | 1 | 1 | sonicos (11) · sonicwall global vpn client (2) | ↑55 | |
| 14 | synology | 11 | 1 | synology router manager srm (7) · diskstation manager dsm (4) | · | |||
| 15 | 9 | whatsapp for android (4) · whatsapp for ios (4) · whatsapp business for android (3) | — | |||||
| 16 | foxit | 8 | phantompdf (5) · reader (3) | · | ||||
| 17 | mitsubishi electric | 8 | melsec iq r series (6) · conveyor tracking application (1) · d55up12 v (1) | · | ||||
| 18 | b r | 7 | gatemanager (4) · sitemanager (2) · automation runtime (1) | · | ||||
| 19 | mcafee | 7 | epolicy orchistrator epo (2) · file removable media protection frp (1) · mcafee active response (1) | ↓8 | ||||
| 20 | trend micro | 7 | trend micro antivirus for mac consumer (7) | ↓8 | ||||
| 21 | siemens | 6 | desigo insight (3) · dca vantage analyzer (2) · siport mp (1) | ↓7 | ||||
| 22 | atlassian | 5 | jira server (3) · atlaskit editor core (1) · crowd (1) | ↓2 | ||||
| 23 | glpi project | 5 | 1 | glpi (5) | ↑29 | |||
| 24 | korenix | 5 | 3 | jetnet (5) · p f comtrol rocketlinx (5) · pmi 110 f2g (5) | new | |||
| 25 | lenovo | 5 | 1 | cloud networking operating system cnos (1) · diagnostics (1) · system x (1) | ↓7 | |||
| 26 | pepperl fuchs | 5 | 3 | jetnet (5) · p f comtrol rocketlinx (5) · pmi 110 f2g (5) | new | |||
| 27 | westermo | 5 | 3 | jetnet (5) · p f comtrol rocketlinx (5) · pmi 110 f2g (5) | new | |||
| 28 | dell | 4 | 1 | networker (2) · cpg bios (1) · omimssc openmanage integration for microsoft system center (1) | ↓7 | |||
| 29 | acronis | 3 | cyber backup (1) · cyber protect (1) · true image (1) | · | ||||
| 30 | arc informatique | 3 | 1 | pcvue (3) | new | |||
| 31 | baserproject | 3 | basercms (3) | · | ||||
| 32 | micro focus | 3 | 1 | 3 | operation bridge manager (3) · application performance management (2) · operation bridge containerized (2) | · | ||
| 33 | qnap systems | 3 | 1 | 3 | qts (3) | ↓5 | ||
| 34 | aws community | 2 | community collections (2) | new | ||||
| 35 | bitdefender | 2 | bitdefender engines (2) | ↑7 | ||||
| 36 | crafter software | 2 | crafter cms (2) | new | ||||
| 37 | electron | 2 | 1 | electron (2) | · | |||
| 38 | mapfish | 2 | 2 | mapfish print (2) | new | |||
| 39 | microhard | 2 | 1 | bullet lte (2) | new | |||
| 40 | ory | 2 | fosite (2) | ↓5 | ||||
| 41 | php group | 2 | php (2) | ↑20 | ||||
| 42 | rapid7 | 2 | 1 | metasploit (1) · nexpose (1) | ↓16 | |||
| 43 | requarks | 2 | wiki (1) · wiki js (1) | · | ||||
| 44 | tensorflow | 2 | tensorflow (2) | ↓35 | ||||
| 45 | the eclipse foundation | 2 | 1 | eclipse jetty (1) · eclipse vert x (1) | · | |||
| 46 | tips and tricks hq | 2 | simple download monitor (2) | new | ||||
| 47 | ucweb | 2 | uc browser (2) | new | ||||
| 48 | actions | 1 | 1 | toolkit (1) | · | |||
| 49 | ansible community | 1 | community collections (1) | new | ||||
| 50 | anuko | 1 | 1 | timetracker (1) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2020-10 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-79311 critical↑1
- 2CWE-20252 critical↓1
- 3CWE-400190 critical↑4
- 4CWE-125160 critical↑4
- 5CWE-120121 critical↑13
- 6CWE-42790 critical↑20
- 7CWE-78791 critical↓1
- 8CWE-28781 critical↓3
- 9CWE-7872 critical↑6
- 10CWE-11960 critical↓6
- 1CWE-20060 critical↓2
- 2CWE-2260 critical—
- 3CWE-28460 critical—
- 4CWE-60160 critical·
- 5CWE-26951 critical↑10
- 6CWE-45150 critical·
- 7CWE-55250 critical·
- 8CWE-69350 critical↑24
- 9CWE-86350 critical↑24
- 10CWE-12141 critical↑2
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.