Month report
February 2021
Rolled up 2026-08-09 20:45 from 370,662 CVE records
1,455 CVEs published, +4.2% on the same month last year. 60 rated critical, 0 listed by CISA as exploited. cisco led with 75; the most common weakness class was CWE-121 (43). qnap systems climbed 54 places, the largest move. 10 vendors ranked for the first time.
Published
1,455
-3.9%on the previous month
Critical / high
60 / 249
of the 514 scored
Medium / low
167 / 38
the rest of the scored bands
Added to CISA KEV
0
listed as exploited this month
Public exploit
73
exploit code indexed publicly
Scanner template
0
0% of the month
Publication to KEV
How long before CISA listed them
19 published this month and listed since — not the 0 listed during it.
Median days to listing
268
from publication to CISA's date added
Listed within 7 days
0%
of the 19
Listed within 30 days
0%
of the 19
Vendors
Ranked by distinct CVEs this month
Δ is the move against last month's rank.
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | cisco | 75 | 11 | 1 | cisco small business rv series router firmware (44) · cisco ios xr software (9) · cisco nx os software (6) | — | ||
| 2 | microsoft | 58 | 4 | 1 | 7 | windows server version 2004 (29) · windows 10 version 2004 (28) · windows server 2019 (28) | ↑2 | |
| 3 | adobe | 53 | 6 | 1 | 3 | acrobat reader (23) · magento commerce (16) · photoshop (5) | ↑13 | |
| 4 | 44 | 1 | 2 | chrome (42) · gerrit (1) · rendertron (1) | ↑1 | |||
| 5 | ibm | 40 | security verify information queue (11) · api connect (5) · security identity governance and intelligence (5) | ↓2 | ||||
| 6 | qualcomm | 29 | snapdragon auto snapdragon compute snapdragon connectivity snapdragon consumer electronics connectivity snapdragon consumer iot snapdragon industrial iot snapdragon mobile snapdragon voice music snapdragon wired infrastructure and networking (5) · snapdragon auto snapdragon compute snapdragon connectivity snapdragon consumer electronics connectivity snapdragon consumer iot snapdragon industrial iot snapdragon iot snapdragon mobile snapdragon voice music snapdragon wired infrastructure and networking (3) · snapdragon auto snapdragon compute snapdragon connectivity snapdragon consumer iot snapdragon industrial iot snapdragon iot snapdragon mobile snapdragon voice music snapdragon wearables snapdragon wired infrastructure and networking (2) | — | ||||
| 7 | mozilla | 25 | firefox (25) · firefox esr (8) · thunderbird (8) | ↑6 | ||||
| 8 | foxit | 23 | studio photo (22) · reader (1) | · | ||||
| 9 | trend micro | 23 | trend micro apex one (17) · trend micro officescan (17) · trend micro worry free business security (16) | ↑17 | ||||
| 10 | siemens | 20 | 1 | jt2go (12) · teamcenter visualization (12) · apogee pxc compact bacnet (1) | ↓3 | |||
| 11 | atlassian | 12 | jira data center (7) · jira server (7) · atlassian gadgets (1) | ↑16 | ||||
| 12 | dell | 9 | 1 | powerscale onefs (7) · avamar (1) · cyber recovery (1) | ↓1 | |||
| 13 | elecom co | 9 | wrc 300febk s (3) · wrc 300febk a (2) · elecom file manager (1) | · | ||||
| 14 | mcafee | 9 | 1 | 1 | endpoint security ens for windows (5) · mcafee total protection mtp (3) · mcafee web gateway mwg (1) | ↑23 | ||
| 15 | logitec | 8 | lan w300n pgrb (3) · lan w300n pr5b (2) · lan w300n rs (2) | new | ||||
| 16 | sap se | 8 | 1 | sap business objects business intelligence platform cmc and bi launchpad (1) · sap commerce (1) · sap hana database (1) | ↓8 | |||
| 17 | secomea | 8 | 1 | gatemanager (6) · sitemanager (1) · sitemanager embedded sm e (1) | · | |||
| 18 | contec co | 7 | solarview compact (7) | new | ||||
| 19 | jenkins project | 7 | jenkins claim plugin (2) · jenkins active choices plugin (1) · jenkins artifact repository parameter plugin (1) | ↓7 | ||||
| 20 | synology | 7 | 3 | synology diskstation manager dsm (6) · diskstation manager dsm (1) | · | |||
| 21 | micro focus | 6 | solutions business manager (6) | · | ||||
| 22 | netgear | 5 | multiple routers (2) · r7450 (2) · orbi (1) | · | ||||
| 23 | apache | 4 | apache airflow (2) · apache livy incubating (1) · apache myfaces core (1) | ↓9 | ||||
| 24 | d link | 4 | dap 1860 (2) · multiple routers (2) | ↑28 | ||||
| 25 | otrs | 4 | otrs (1) · otrscisincustomerfrontend (1) · otrsticketforms (1) | · | ||||
| 26 | qnap systems | 4 | 1 | 1 | helpdesk (2) · photo station (1) · surveillance station (1) | ↑54 | ||
| 27 | tk star | 4 | q90 junior gps horloge firmware (3) · q90 junior gps horloge (1) | new | ||||
| 28 | changate enterprise co | 3 | 1 | property management system (3) | new | |||
| 29 | mongodb | 3 | java driver (1) · mongo java driver (1) · mongodb driver (1) | · | ||||
| 30 | omron | 3 | cx one (3) · cx position (3) · cx protocol (3) | · | ||||
| 31 | openssl | 3 | 2 | openssl (3) | · | |||
| 32 | opensuse | 3 | factory (1) · open build service (1) · opensuse leap 15 1 (1) | · | ||||
| 33 | soar cloud system co | 3 | 1 | hr portal (3) | new | |||
| 34 | solarwinds | 3 | orion platform (2) · network performance monitor (1) | · | ||||
| 35 | suse | 3 | suse caas platform 4 5 (2) · opensuse leap 15 1 (1) · opensuse leap 15 2 (1) | · | ||||
| 36 | the eclipse foundation | 3 | 1 | eclipse californium (1) · eclipse jetty (1) · eclipse theia (1) | ↓5 | |||
| 37 | abb | 2 | ac500 v2 products with onboard ethernet (2) | · | ||||
| 38 | carrierwaveuploader | 2 | carrierwave (2) | new | ||||
| 39 | elastic | 2 | elastic apm agent for go (1) · elasticsearch (1) | ↑17 | ||||
| 40 | fortinet | 2 | fortinet fortiisolator (1) · fortinet fortiweb (1) | ↓6 | ||||
| 41 | hilscher | 2 | pcv pxv pgv (2) · wcs (2) · ethernet ip core v2 (1) | new | ||||
| 42 | http4s | 2 | blaze (1) · http4s (1) | · | ||||
| 43 | matrix org | 2 | synapse (2) | · | ||||
| 44 | mitsubishi electric | 2 | cpu module logging configuration tool (2) · cw configurator (2) · data transfer (2) | · | ||||
| 45 | moby | 2 | moby (2) | new | ||||
| 46 | node red | 2 | node red (2) | new | ||||
| 47 | nozomi networks | 2 | cmc (2) · guardian (2) | new | ||||
| 48 | pepper fuchs | 2 | pcv pxv pgv (2) · wcs (2) · ethernet ip core v2 (1) | ↓23 | ||||
| 49 | php group | 2 | php (2) | · | ||||
| 50 | prestashop | 2 | prestashop (2) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2021-02 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-121431 critical—
- 2CWE-787361 critical↑4
- 3CWE-125260 critical↑7
- 4CWE-20190 critical↓1
- 5CWE-400170 critical—
- 6CWE-78166 critical↑8
- 7CWE-22153 critical↑2
- 8CWE-284150 critical↑22
- 9CWE-79150 critical↓7
- 10CWE-122121 critical↓6
- 1CWE-476110 critical↑6
- 2CWE-416100 critical—
- 3CWE-11982 critical↓5
- 4CWE-26982 critical↑30
- 5CWE-19070 critical·
- 6CWE-20070 critical↑4
- 7CWE-27670 critical↑1
- 8CWE-31971 critical↑28
- 9CWE-47277 critical·
- 10CWE-8973 critical↓9
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.