Month report
August 2022
Rolled up 2026-08-09 20:45 from 370,662 CVE records
2,306 CVEs published, +10.5% on the same month last year. 108 rated critical, 23 listed by CISA as exploited. microsoft led with 105; the most common weakness class was CWE-79 (143). openemr climbed 57 places, the largest move. 13 vendors ranked for the first time.
Published
2,306
Critical / high
108 / 375
Medium / low
454 / 61
Added to CISA KEV
23
Public exploit
68
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
6
Listed within 7 days
50%
Listed within 30 days
62.5%
Weakness × vendor
Where the two overlap
| Vendor | CWE-79 | CWE-89 | CWE-120 | CWE-20 | CWE-200 | CWE-125 | CWE-416 | CWE-352 |
|---|---|---|---|---|---|---|---|---|
| microsoft | 1 | 6 | 2 | |||||
| sourcecodester | 21 | 48 | 1 | |||||
| tcl | 26 | 2 | ||||||
| samsung mobile | 1 | 3 | 4 | |||||
| adobe | 3 | 2 | 7 | 4 | ||||
| apache | 1 | 8 | ||||||
| mediatek | ||||||||
Detection gap
Listed as exploited, no public template
Listed this month
23
With a template
9
No template
14
- 1apple3of 3 listed
- 2microsoft3of 3 listed
- 3google2of 2 listed
- 4delta electronics1of 1 listed
- 5fedoraproject1of 1 listed
- 6palo alto networks1of 1 listed
- 7paloaltonetworks1of 1 listed
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 105 | 3 | 1 | 1 | windows 10 version 21h1 (41) · windows 10 version 21h2 (41) · windows 10 version 1809 (40) | ↑2 | |
| 2 | sourcecodester | 87 | gym management system (12) · company website cms (9) · simple e learning system (6) | ↑14 | ||||
| 3 | tcl | 42 | 31 | linkhub mesh wifi (42) | · | |||
| 4 | samsung mobile | 33 | samsung mobile devices (19) · charm by samsung (5) · cameralyzer (1) | ↑4 | ||||
| 5 | adobe | 27 | 1 | magento commerce (8) · acrobat reader (7) · framemaker (6) | ↑4 | |||
| 6 | apache | 25 | 1 | apache traffic server (6) · apache jspwiki (5) · apache avro (3) | ↑14 | |||
| 7 | mediatek | 25 | 1 | mt7603 mt7610 mt7612 mt7613 mt7615 mt7620 mt7622 mt7628 mt7629 mt7915 mt7916 mt7986 mt8981 (8) · mt6833 mt6853 mt6873 mt6877 mt6879 mt6885 mt6893 mt6895 mt6983 mt8167 mt8167s mt8168 mt8173 mt8175 mt8185 mt8321 mt8362a mt8365 mt8385 mt8532 mt8666 mt8675 mt8765 mt8766 mt8768 mt8786 mt8788 mt8789 mt8791 mt8797 (3) · mt6833 mt6853 mt6873 mt6877 mt6879 mt6885 mt6893 mt6895 mt6983 mt8185 mt8321 mt8385 mt8532 mt8666 mt8675 mt8765 mt8766 mt8768 mt8786 mt8788 mt8789 mt8791 mt8797 (3) | ↑3 | |||
| 8 | 24 | chrome (23) · play services sdk (1) | ↓7 | |||||
| 9 | dell | 23 | wyse management suite (10) · powerscale onefs (4) · dell container storage modules (2) | ↑6 | ||||
| 10 | ibm | 22 | cics tx advanced (6) · cics tx standard (6) · sterling b2b integrator (3) | ↓6 | ||||
| 11 | wwbn | 22 | 9 | avideo (22) | new | |||
| 12 | f5 | 21 | big ip (15) · big ip apm (3) · big iq centralized management (3) | · | ||||
| 13 | vim | 18 | vim vim (18) | ↑11 | ||||
| 14 | gitlab | 16 | gitlab (16) | — | ||||
| 15 | cisco | 15 | 3 | 1 | cisco small business rv series router firmware (3) · cisco adaptive security appliance asa software (2) · cisco nx os software (2) | ↓10 | ||
| 16 | apple | 13 | 1 | 2 | macos (13) · watchos (6) · tvos (5) | · | ||
| 17 | esri | 13 | portal for arcgis (10) · arcreader (3) | · | ||||
| 18 | go standard library | 13 | encoding xml (2) · net http (2) · path filepath (2) | new | ||||
| 19 | cybozu | 12 | cybozu office (12) | ↓7 | ||||
| 20 | artica pfms | 9 | pandora fms (9) | ↑30 | ||||
| 21 | huawei | 9 | harmonyos (9) · emui (8) · magic ui (8) | — | ||||
| 22 | softing | 9 | 1 | 2 | secure integration server (9) · edgeaggregator (2) · edgeconnector 840d (2) | new | ||
| 23 | siemens | 8 | 2 | 1 | ruggedcom rm1224 lte 4g eu (3) · ruggedcom rm1224 lte 4g nam (3) · scalance m804pb (3) | ↓16 | ||
| 24 | zoom video communications | 8 | 1 | zoom client for meetings for macos (3) · zoom on premise meeting connector mmr (2) · zoom client for meetings for android ios linux macos and windows (1) | · | |||
| 25 | airspan | 7 | airvelocity (7) | new | ||||
| 26 | dspace | 7 | 3 | dspace (7) | new | |||
| 27 | openemr | 7 | 2 | openemr openemr (7) | ↑57 | |||
| 28 | tabit | 7 | tabit (7) | new | ||||
| 29 | hcl software | 6 | hcl inotes (3) · hcl versionvault express (2) · hcl launch (1) | ↑11 | ||||
| 30 | measuresoft | 6 | scadapro server (4) · scadapro server and client (2) | new | ||||
| 31 | synology | 6 | diskstation manager dsm (1) · sso server (1) · storage analyzer (1) | ↓8 | ||||
| 32 | tibco software | 6 | tibco data science workbench (2) · tibco ftl community edition (2) · tibco ftl developer edition (2) | · | ||||
| 33 | automationdirect | 5 | 1 | c more ea9 (2) · directlogic d0 06 series cpus (2) · sio mb04ads (1) | · | |||
| 34 | emerson electric | 5 | proficy machine edition (5) | new | ||||
| 35 | nextcloud | 5 | security advisories (5) | ↑48 | ||||
| 36 | atlassian | 4 | 1 | 1 | jira data center (2) · jira server (2) · bitbucket data center (1) | ↑3 | ||
| 37 | device42 | 4 | 1 | cmdb (4) | new | |||
| 38 | itpison | 4 | 2 | omicard edm (4) | new | |||
| 39 | jason gauci | 4 | eternal terminal (4) | new | ||||
| 40 | jetbrains | 4 | ktor (2) · rider (1) · teamcity (1) | ↑1 | ||||
| 41 | notrinos | 4 | notrinos notrinoserp (4) | new | ||||
| 42 | nvidia | 4 | 1 | 1 | nvidia virtual gpu software and nvidia cloud gaming (3) · nvidia flare (1) | ↓15 | ||
| 43 | octopus deploy | 4 | octopus server (4) | ↑15 | ||||
| 44 | openzeppelin | 4 | openzeppelin contracts (4) | ↑16 | ||||
| 45 | realtek | 4 | linux android bluetooth mesh sdk (4) | · | ||||
| 46 | yetiforcecompany | 4 | 1 | yetiforcecompany yetiforcecrm (4) | · | |||
| 47 | abb | 3 | abb zenon (3) | ↑52 | ||||
| 48 | bookwyrm social | 3 | 1 | 1 | bookwyrm (2) · bookwyrm social bookwyrm (1) | new | ||
| 49 | contiki ng | 3 | contiki ng (3) | · | ||||
| 50 | delta electronics | 3 | cncsoft (2) · delta robot automation studio dras (1) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2022-08 that are on the CISA KEV catalog today. The 23 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-791439 critical—
- 2CWE-89755 critical—
- 3CWE-1204330 critical—
- 4CWE-20392 critical↑5
- 5CWE-200390 critical↑3
- 6CWE-125371 critical↓2
- 7CWE-416370 critical↓2
- 8CWE-352360 critical↓2
- 9CWE-787342 critical↓2
- 10CWE-284335 critical↑1
- 1CWE-269320 critical↑30
- 2CWE-22292 critical↑1
- 3CWE-400280 critical↑2
- 4CWE-119201 critical↑6
- 5CWE-78206 critical↑1
- 6CWE-434190 critical↑2
- 7CWE-94181 critical↑9
- 8CWE-121170 critical↑70
- 9CWE-862171 critical↑10
- 10CWE-476160 critical↑4
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.