Month report
June 2022
Rolled up 2026-08-09 20:45 from 370,662 CVE records
2,149 CVEs published, +27.1% on the same month last year. 94 rated critical, 48 listed by CISA as exploited. jenkins project led with 86; the most common weakness class was CWE-79 (141). ping identity climbed 37 places, the largest move. 19 vendors ranked for the first time.
Published
2,149
Critical / high
94 / 346
Medium / low
404 / 82
Added to CISA KEV
48
Public exploit
79
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
13
Listed within 7 days
33.3%
Listed within 30 days
66.7%
Weakness × vendor
Where the two overlap
| Vendor | CWE-79 | CWE-352 | CWE-89 | CWE-200 | CWE-269 | CWE-80 | CWE-20 | CWE-787 |
|---|---|---|---|---|---|---|---|---|
| jenkins project | ||||||||
| qualcomm | ||||||||
| microsoft | 1 | |||||||
| adobe | 26 | |||||||
| samsung mobile | 10 | 1 | 10 | |||||
| ibm | ||||||||
| siemens | 3 | 1 | ||||||
| dell | 2 | 1 | 4 |
Detection gap
Listed as exploited, no public template
Listed this month
48
With a template
4
No template
44
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | jenkins project | 86 | jenkins (6) · jenkins deployment dashboard plugin (5) · jenkins convertigo mobile platform plugin (3) | ↑8 | ||||
| 2 | qualcomm | 68 | 10 | 1 | 2 | snapdragon auto snapdragon compute snapdragon connectivity snapdragon consumer iot snapdragon industrial iot snapdragon mobile snapdragon voice music snapdragon wearables (12) · snapdragon auto snapdragon compute snapdragon connectivity snapdragon industrial iot snapdragon mobile (12) · snapdragon auto snapdragon compute snapdragon connectivity snapdragon consumer electronics connectivity snapdragon consumer iot snapdragon industrial iot snapdragon mobile snapdragon voice music snapdragon wearables (3) | · | |
| 3 | microsoft | 59 | 1 | 1 | 2 | windows 10 version 21h1 (27) · windows 10 version 21h2 (27) · windows server 2019 (27) | ↓1 | |
| 4 | adobe | 47 | bridge (12) · indesign (10) · incopy (8) | ↓3 | ||||
| 5 | samsung mobile | 41 | samsung mobile devices (21) · samsung account (8) · smart things (3) | ↑13 | ||||
| 6 | ibm | 40 | 1 | jazz team server (8) · spectrum copy data management (5) · robotic process automation (4) | — | |||
| 7 | siemens | 32 | 1 | sinema remote connect server (15) · sicam gridedge classic (4) · ruggedcom rox mx5000 (3) | ↑1 | |||
| 8 | dell | 22 | 2 | powerstore (6) · cpg bios (3) · powerscale onefs (3) | ↑21 | |||
| 9 | sap se | 21 | sap 3d visual enterprise viewer (9) · cla assistant (1) · sap adaptive server enterprise ase (1) | ↑23 | ||||
| 10 | apache | 18 | 1 | 4 | apache http server (8) · apache hadoop (2) · apache dubbo (1) | ↑14 | ||
| 11 | mediatek | 18 | mt6853 mt6853t mt6873 mt6875 mt6877 mt6883 mt6885 mt6889 mt6891 mt6893 mt9636 mt9638 mt9666 (3) · mt6580 mt6735 mt6739 mt6761 mt6765 mt6768 mt6771 mt6779 mt6781 mt6785 mt6833 mt6853 mt6873 mt6877 mt6879 mt6883 mt6885 mt6889 mt6893 mt6895 mt6983 mt8167s mt8168 mt8175 mt8183 mt8185 mt8362a mt8365 mt8385 mt8667 mt8675 mt8695 mt8696 mt8766 mt8768 mt8786 mt8788 mt8789 mt8797 (2) · mt6580 mt6735 mt6737 mt6739 mt6753 mt6761 mt6765 mt6768 mt6771 mt6779 mt6781 mt6785 mt6833 mt6853 mt6873 mt6877 mt6879 mt6883 mt6885 mt6889 mt6893 mt6895 mt6983 mt8321 mt8666 mt8675 mt8765 mt8766 mt8768 mt8786 mt8788 mt8789 mt8791 mt8797 (1) | ↓1 | ||||
| 12 | huawei | 17 | emui (17) · magic ui (15) · harmonyos (13) | ↑7 | ||||
| 13 | vim | 16 | vim vim (16) | — | ||||
| 14 | codesys | 14 | 2 | plcwinnt (9) · runtime toolkit (9) · codesys gateway server v2 (3) | · | |||
| 15 | cisco | 11 | 3 | 2 | cisco email security appliance esa (2) · cisco identity services engine software (2) · cisco adaptive security appliance asa software (1) | ↓11 | ||
| 16 | sourcecodester | 11 | prison management system (4) · library management system (3) · bank management system (2) | · | ||||
| 17 | robustel | 10 | 9 | r1510 (10) | new | |||
| 18 | bigbluebutton | 9 | bigbluebutton (8) · greenlight (1) | new | ||||
| 19 | elefant | 8 | cms (8) | new | ||||
| 20 | fuji electric co ltd hakko electronics co | 8 | v sft (6) · v server and v server lite (2) | new | ||||
| 21 | gitlab | 8 | 1 | gitlab (7) · gitlab runner (1) | ↓5 | |||
| 22 | hid mercury | 8 | 3 | 1 | ep4502 (8) · lnl 4420 (8) · lnl x2210 (8) | new | ||
| 23 | lenels2 | 8 | 3 | 1 | ep4502 (8) · lnl 4420 (8) · lnl x2210 (8) | new | ||
| 24 | schneider electric | 8 | 1 | wiser smart (6) · geo scada mobile (1) · power logic ion setup (1) | · | |||
| 25 | splunk | 8 | 1 | splunk enterprise (7) · splunk cloud platform (4) · universal forwarder (2) | ↑8 | |||
| 26 | trueconf | 8 | server (8) | new | ||||
| 27 | dominion voting systems | 7 | imagecast x application (7) · imagecast x firmware (7) | new | ||||
| 28 | glpi project | 7 | 2 | 3 | glpi (5) · glpi inventory plugin (2) | · | ||
| 29 | secheron | 7 | 5 | sepcos control and protection relay firmware package (7) | new | |||
| 30 | solare | 7 | solar log (7) | new | ||||
| 31 | abb | 6 | mint workbench (5) · abb automation builder (4) · drive composer entry (4) | ↑24 | ||||
| 32 | ping identity | 6 | pingid windows login (5) · pingid mac login (1) | ↑37 | ||||
| 33 | thomson | 6 | tcw710 (6) | new | ||||
| 34 | zephyrproject rtos | 6 | zephyr (6) | · | ||||
| 35 | argoproj | 5 | 1 | argo cd (4) · argo events (1) | ↑9 | |||
| 36 | artbees | 5 | jupiter (3) · jupiter x core (3) · jupiter x (2) | new | ||||
| 37 | discourse | 5 | discourse (3) · discourse calendar (1) · discourse chat (1) | · | ||||
| 38 | envoyproxy | 5 | 1 | envoy (5) | · | |||
| 39 | gogs | 5 | 2 | gogs gogs (4) · gogs (1) | · | |||
| 40 | illumina | 5 | 4 | iseq 100 instrument (5) · miniseq instrument (5) · miseq dx (5) | new | |||
| 41 | ionicabizau | 5 | 3 | ionicabizau parse url (4) · ionicabizau parse path (1) | new | |||
| 42 | kromitgmbh | 5 | kromitgmbh titra (5) | new | ||||
| 43 | ldapaccountmanager | 5 | 1 | lam (5) | new | |||
| 44 | nocodb | 5 | 4 | nocodb nocodb (5) | · | |||
| 45 | typo3 | 5 | typo3 (5) | · | ||||
| 46 | enalean | 4 | tuleap (4) | · | ||||
| 47 | festo | 4 | 4 | controller cecc x m1 4407603 (4) · controller cecc x m1 8124922 (4) · controller cecc x m1 mv 4407605 (4) | · | |||
| 48 | guzzle | 4 | guzzle (4) | new | ||||
| 49 | horner automation | 4 | horner automation cscape csfont (4) | new | ||||
| 50 | inventree | 4 | 2 | inventree inventree (4) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2022-06 that are on the CISA KEV catalog today. The 48 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-791417 critical—
- 2CWE-352780 critical↑12
- 3CWE-89554 critical↑3
- 4CWE-200501 critical↑11
- 5CWE-269462 critical↑11
- 6CWE-80421 critical↑34
- 7CWE-20390 critical↓5
- 8CWE-787350 critical↓3
- 9CWE-119250 critical↑19
- 10CWE-782114 critical—
- 1CWE-22184 critical↑2
- 2CWE-284183 critical↓3
- 3CWE-125170 critical↓9
- 4CWE-400140 critical↓6
- 5CWE-416120 critical↓12
- 6CWE-122110 critical↑7
- 7CWE-287112 critical↓6
- 8CWE-918111 critical—
- 9CWE-285100 critical↑26
- 10CWE-476100 critical↓1
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.