Month report
February 2023
Rolled up 2026-08-09 20:45 from 370,662 CVE records
2,164 CVEs published, +11.4% on the same month last year. 232 rated critical, 14 listed by CISA as exploited. microsoft led with 80; the most common weakness class was CWE-79 (244). fortinet climbed 29 places, the largest move. 12 vendors ranked for the first time.
Published
2,164
Critical / high
232 / 722
Medium / low
976 / 85
Added to CISA KEV
14
Public exploit
111
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
3.5
Listed within 7 days
70%
Listed within 30 days
70%
Weakness × vendor
Where the two overlap
| Vendor | CWE-79 | CWE-89 | CWE-787 | CWE-352 | CWE-77 | CWE-20 | CWE-125 | CWE-200 |
|---|---|---|---|---|---|---|---|---|
| microsoft | 5 | 2 | 3 | 8 | ||||
| dell | 2 | 1 | 2 | 3 | 1 | |||
| sourcecodester | 10 | 42 | 2 | |||||
| apple | 5 | 1 | 11 | |||||
| unisoc shanghai technologies co | 7 | 2 | 7 | |||||
| siemens | 19 | 1 | 10 | |||||
| fortinet | 4 | |||||||
| ibm | 7 | 1 | 3 | 5 |
Detection gap
Listed as exploited, no public template
Listed this month
14
With a template
7
No template
7
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 80 | 7 | 4 | 5 | windows 10 version 1809 (35) · windows 10 version 20h2 (35) · windows 10 version 21h2 (35) | — | |
| 2 | dell | 68 | powerscale onefs (18) · powerpath management appliance (7) · wyse management suite (6) | ↑22 | ||||
| 3 | sourcecodester | 61 | 12 | doctors appointment system (7) · music gallery site (6) · online pizza ordering system (5) | ↑11 | |||
| 4 | apple | 55 | 1 | 1 | 2 | macos (42) · ios and ipados (23) · tvos (17) | · | |
| 5 | unisoc shanghai technologies co | 50 | sc9863a sc9832e sc7731e t610 t310 t606 t760 t610 t618 t606 t612 t616 t760 t770 t820 s8000 (50) | ↑1 | ||||
| 6 | siemens | 45 | 1 | solid edge se2022 (20) · solid edge se2023 (19) · tecnomatix plant simulation (19) | ↑20 | |||
| 7 | fortinet | 38 | 2 | 2 | fortiweb (18) · fortinac (8) · fortios (7) | ↑29 | ||
| 8 | ibm | 37 | 2 | 1 | 1 | infosphere information server (5) · sterling b2b integrator standard edition (4) · db2 for linux unix and windows (3) | ↑5 | |
| 9 | hewlett packard enterprise hpe | 36 | 9 | aruba mobility conductor formerly mobility master aruba mobility controllers wlan gateways and sd wan gateways managed by aruba central (32) · hpe serviceguard for linux (3) · hpe oneview for vmware vcenter (1) | ↑6 | |||
| 10 | samsung mobile | 32 | samsung mobile devices (19) · galaxy store (2) · samsung cloud (2) | · | ||||
| 11 | mediatek | 29 | 3 | en7528 en7580 (6) · mt5221 mt7603 mt7613 mt7615 mt7622 mt7628 mt7629 mt7663 mt7668 mt7682 mt7686 mt7687 mt7697 mt7902 mt7915 mt7916 mt7921 mt7933 mt7981 mt7986 mt8167s mt8175 mt8362a mt8365 mt8385 mt8518s mt8532 mt8695 mt8696 mt8788 (3) · mt6739 mt6761 mt6762 mt6765 mt6768 mt6769 mt6771 mt6779 mt6781 mt6785 mt6789 mt6833 mt6853 mt6855 mt6873 mt6875 mt6877 mt6879 mt6883 mt6885 mt6889 mt6891 mt6893 mt6895 mt6983 mt8321 mt8385 mt8765 mt8766 mt8768 mt8786 mt8788 mt8789 mt8791 mt8791t mt8797 (3) | ↑8 | |||
| 12 | adobe | 28 | 1 | bridge (7) · framemaker (5) · photoshop (5) | ↓4 | |||
| 13 | qualcomm | 27 | 4 | snapdragon (27) · wsa8810 firmware (14) · wsa8815 firmware (14) | ↓4 | |||
| 14 | 19 | 1 | chrome (18) · android (1) | ↓3 | ||||
| 15 | wickedplugins | 19 | wicked folders folder organizer for pages posts and custom post types (19) | new | ||||
| 16 | sap | 18 | netweaver as abap bsp framework (3) · netweaver as for abap and abap platform (2) · solution manager (2) | ↑12 | ||||
| 17 | cisco | 17 | 1 | 3 | cisco unified computing system managed (3) · cisco nexus dashboard (2) · cisco secure email (2) | ↑3 | ||
| 18 | f5 | 17 | big ip (14) · apm clients (2) · big ip spk (2) | · | ||||
| 19 | huawei | 17 | 1 | 1 | harmonyos (16) · emui (15) · e5573cs 322 (1) | ↑14 | ||
| 20 | apache | 16 | 4 | 2 | apache airflow google provider (2) · apache inlong (2) · apache age (1) | ↓3 | ||
| 21 | splunk | 13 | 1 | splunk enterprise (12) · splunk cloud platform (11) · splunk (1) | · | |||
| 22 | nextcloud | 12 | security advisories (12) | ↑29 | ||||
| 23 | suse | 11 | 1 | rancher (7) · opensuse leap 15 4 (3) · opensuse leap 15 3 (1) | · | |||
| 24 | libtiff | 10 | libtiff (10) | · | ||||
| 25 | thorsten | 10 | thorsten phpmyfaq (10) | ↑5 | ||||
| 26 | schneider electric | 9 | 4 | apc easy ups online monitoring software (4) · schneider electric easy ups online monitoring software (4) · igss data server igssdataserver exe (2) | ↓14 | |||
| 27 | trendnet | 9 | tew 811dru (5) · tew 652brp (4) | new | ||||
| 28 | tribe29 | 9 | 1 | checkmk (9) | new | |||
| 29 | group arge energy and control systems | 8 | 2 | smartpower web (8) | new | |||
| 30 | jenkins project | 8 | 1 | jenkins azure credentials plugin (3) · jenkins email extension plugin (3) · jenkins junit plugin (1) | ↓23 | |||
| 31 | openssl | 8 | 1 | openssl (8) | · | |||
| 32 | zoneminder | 8 | 1 | 2 | zoneminder (8) | · | ||
| 33 | answerdev | 7 | 1 | 1 | answerdev answer (7) | new | ||
| 34 | gpac | 7 | gpac gpac (6) · gpac (1) | · | ||||
| 35 | joomunited | 7 | wp meta seo (7) | new | ||||
| 36 | jtekt electronics | 7 | screen creator advance 2 (7) | new | ||||
| 37 | ls electric | 7 | 3 | xbc dn32u (7) | new | |||
| 38 | palantir | 7 | gotham (3) · atlasdb (1) · foundry magritte (1) | · | ||||
| 39 | solarwinds | 7 | solarwinds platform (6) · server application monitor sam (1) | · | ||||
| 40 | b r industrial automation | 6 | 2 | b r aprol (5) · b r automation runtime (1) | new | |||
| 41 | datahub project | 6 | datahub (6) | new | ||||
| 42 | moxa | 6 | sds 3008 series industrial ethernet switch (6) · sds 3008 firmware (1) · sds 3008 t firmware (1) | · | ||||
| 43 | npm | 6 | claviska jquery minicolors (1) · erxes (1) · izimodal (1) | · | ||||
| 44 | gitlab | 5 | gitlab (4) · dast api scanner (1) | ↓26 | ||||
| 45 | gssapi | 5 | gss ntlmssp (5) | new | ||||
| 46 | moby | 5 | hyperkit (5) | · | ||||
| 47 | mozilla | 5 | 1 | mozilla bleach (2) · firefox (1) · firefox esr (1) | · | |||
| 48 | nodejs | 5 | node (3) · undici (2) | · | ||||
| 49 | the opennms group | 5 | horizon (5) · meridian (5) | new | ||||
| 50 | tibco software | 5 | tibco businessconnect (2) · tibco ebx (1) · tibco ebx add ons (1) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2023-02 that are on the CISA KEV catalog today. The 14 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-792444 critical—
- 2CWE-8913136 critical—
- 3CWE-78710019 critical↑2
- 4CWE-352751 critical↑10
- 5CWE-776837 critical↑11
- 6CWE-20577 critical↑4
- 7CWE-125540 critical↓1
- 8CWE-200540 critical↑4
- 9CWE-862490 critical↑4
- 10CWE-284445 critical↓1
- 1CWE-22394 critical↓4
- 2CWE-400350 critical↑8
- 3CWE-416341 critical↓2
- 4CWE-78295 critical↓6
- 5CWE-121284 critical↓12
- 6CWE-122273 critical↓1
- 7CWE-502276 critical↑11
- 8CWE-942610 critical↑3
- 9CWE-3062410 critical↑8
- 10CWE-285211 critical↑25
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.