Month report
June 2023
Rolled up 2026-08-09 20:45 from 370,700 CVE records
2,395 CVEs published, +11.4% on the same month last year. 213 rated critical, 24 listed by CISA as exploited. microsoft led with 92; the most common weakness class was CWE-79 (295). inspireui climbed 49 places, the largest move. 10 vendors ranked for the first time.
Published
2,395
-1%on the previous month
Critical / high
213 / 645
of the 1,796 scored
Medium / low
835 / 103
the rest of the scored bands
Added to CISA KEV
24
listed as exploited this month
Public exploit
131
exploit code indexed publicly
Scanner template
0
0% of the month
Publication to KEV
How long before CISA listed them
17 published this month and listed since — not the 24 listed during it.
Median days to listing
2
from publication to CISA's date added
Listed within 7 days
58.8%
of the 17
Listed within 30 days
70.6%
of the 17
Detection gap
Listed as exploited, no public template
CVEs CISA listed this month
Listed this month
24
added to the CISA KEV catalog
With a template
3
12.5% covered
No template
21
nothing in the public index
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
Δ is the move against last month's rank.
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 92 | 4 | 2 | 7 | windows server 2022 (34) · windows server 2019 (32) · windows server 2019 server core installation (32) | ↑3 | |
| 2 | mozilla | 86 | 6 | firefox (78) · thunderbird (49) · firefox esr (48) | · | |||
| 3 | apple | 71 | 6 | 6 | macos (62) · ios and ipados (47) · watchos (33) | ↓1 | ||
| 4 | dell | 38 | cpg bios (30) · dell command update dcu (2) · dell emc vxrail appliance (2) | ↑19 | ||||
| 5 | huawei | 34 | 3 | emui (26) · harmonyos (18) · bisheng wnm (3) | ↑10 | |||
| 6 | trend micro | 33 | trend micro apex one (12) · trend micro apex central (11) · trend micro moibile security for enterprise (9) | · | ||||
| 7 | qualcomm | 32 | snapdragon (32) · fastconnect 6900 firmware (13) · qca6696 firmware (12) | ↑17 | ||||
| 8 | ibm | 31 | security directory suite va (6) · cics tx advanced (4) · cics tx standard (4) | ↓1 | ||||
| 9 | mediatek | 31 | mt6768 mt6769 mt6779 mt6781 mt6785 mt6789 mt6833 mt6853 mt6853t mt6873 mt6875 mt6877 mt6883 mt6885 mt6889 mt6891 mt6893 mt8168 mt8365 mt8395 (3) · mt6789 mt6855 mt8185 mt8195 mt8365 mt8395 mt8781 mt8786 mt8789 mt8791 mt8797 (3) · mt5221 mt6789 mt6855 mt6879 mt6895 mt6983 mt7663 mt7668 mt7902 mt7921 mt8167s mt8168 mt8175 mt8362a mt8365 mt8385 mt8518 mt8532 mt8673 mt8695 mt8766 mt8768 mt8781 mt8786 mt8788 mt8789 mt8791 mt8797 (2) | ↑3 | ||||
| 10 | hp | 30 | 3 | hp pc bios (15) · hp device manager (5) · hp laserjet pro (4) | · | |||
| 11 | sourcecodester | 28 | 1 | online discussion forum site (10) · online school fees system (3) · game result matrix system (2) | ↓8 | |||
| 12 | xwiki | 22 | 17 | 1 | xwiki platform (21) · xwiki commons (1) | ↑48 | ||
| 13 | fortinet | 21 | 2 | 1 | 1 | fortios (11) · fortiproxy (11) · fortinac (3) | ↑19 | |
| 14 | unisoc shanghai technologies co | 20 | sc9863a sc9832e sc7731e t610 t310 t606 t760 t610 t618 t606 t612 t616 t760 t770 t820 s8000 (20) | ↓13 | ||||
| 15 | adobe | 18 | 1 | magento commerce (10) · adobe experience manager (3) · adobe commerce (2) | ↑5 | |||
| 16 | apache | 16 | 1 | 2 | apache traffic server (3) · apache airflow odbc provider (2) · apache guacamole (2) | ↓10 | ||
| 17 | gitlab | 16 | gitlab (16) | ↑1 | ||||
| 18 | siemens | 16 | 2 | jt2go (5) · teamcenter visualization v13 2 (4) · teamcenter visualization v13 3 (4) | ↑1 | |||
| 19 | 13 | 2 | 1 | chrome (8) · grpc (3) · android (1) | ↓14 | |||
| 20 | cisco | 12 | 2 | 1 | cisco telepresence video communication server vcs expressway (2) · cisco web security appliance wsa (2) · cisco adaptive security appliance asa software (1) | ↓10 | ||
| 21 | splunk | 12 | 1 | splunk enterprise (9) · splunk cloud platform (7) · splunk app for lookup file editing (2) | · | |||
| 22 | h3c | 11 | 1 | magic (10) · magic b1stw (1) | new | |||
| 23 | lenovo | 11 | lenovo xclarity administrator (5) · fan power controller fpc (2) · system management module smm (2) | ↑33 | ||||
| 24 | mattermost | 11 | mattermost (8) · mattermost app framework (2) · mattermost github plugin (1) | ↑43 | ||||
| 25 | roxnor | 11 | metform contact form survey quiz custom form builder for elementor (11) | new | ||||
| 26 | zoom video communications | 11 | zoom for windows client (4) · zoom for macos client (2) · zoom for windows (2) | · | ||||
| 27 | horner automation | 10 | cscape (10) · cscape envisionrv (10) | · | ||||
| 28 | jenkins project | 10 | jenkins digital ai app management publisher plugin (2) · jenkins maven repository server plugin (2) · jenkins (1) | ↓20 | ||||
| 29 | vcita | 10 | online booking scheduling calendar for wordpress by vcita (5) · crm and lead management by vcita (2) · event registration calendar by vcita (2) | new | ||||
| 30 | fossbilling | 9 | 1 | fossbilling fossbilling (9) · fossbilling (5) | new | |||
| 31 | ox software | 9 | ox app suite (9) | new | ||||
| 32 | stylemix | 9 | 7 | directory listings wordpress plugin ulisting (9) | new | |||
| 33 | ami | 8 | megarac spx (8) | · | ||||
| 34 | nmedia | 8 | 2 | frontend file manager plugin (8) | new | |||
| 35 | code projects | 7 | agro school management system (6) · supplier management system (1) | ↑17 | ||||
| 36 | d link | 7 | 2 | dir 823g (4) · dsl 224 firmware (2) · dsl 224 firmware version 3 0 10 (2) | · | |||
| 37 | danfoss | 7 | 4 | ak em100 (7) | new | |||
| 38 | fuji electric co ltd and hakko electronics co | 7 | tellus and tellus lite (6) · v server and v server lite (1) | · | ||||
| 39 | inspireui | 7 | 2 | mstore api create native android ios apps on the cloud (6) · mstore api (1) | ↑49 | |||
| 40 | sap se | 7 | master data synchronization mds compare tool (1) · sap crm abap grantor management (1) · sap netweaver change and transport system (1) | ↓18 | ||||
| 41 | advantech | 6 | 1 | webaccess scada (4) · r seenet (2) | ↑32 | |||
| 42 | contec co | 6 | conprosys hmi system chs (6) | ↑11 | ||||
| 43 | levelfourstorefront | 6 | shopping cart ecommerce store (6) | new | ||||
| 44 | nextcloud | 6 | security advisories (6) | ↓4 | ||||
| 45 | nilsteampassnet | 6 | 1 | nilsteampassnet teampass (6) | ↑24 | |||
| 46 | palantir | 6 | 1 | com palantir comments comments (1) · com palantir contour contour dispatch (1) · com palantir gotham clips2 (1) | · | |||
| 47 | proofpoint | 6 | insider threat management (4) · threat response auto pull (2) | · | ||||
| 48 | ptc | 6 | vuforia studio (6) | · | ||||
| 49 | tsolucio | 6 | tsolucio corebos (6) | new | ||||
| 50 | vmware | 6 | 1 | vmware cloud foundation vcenter server (5) · vmware vcenter server vcenter server (5) · vmware tools (1) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2023-06 that are on the CISA KEV catalog today. The 24 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-792957 critical—
- 2CWE-86210512 critical↑8
- 3CWE-7879715 critical↑1
- 4CWE-898932 critical↓2
- 5CWE-352671 critical↓2
- 6CWE-20613 critical↑1
- 7CWE-125532 critical↑1
- 8CWE-863484 critical↑4
- 9CWE-4344516 critical↑6
- 10CWE-200411 critical↑7
- 1CWE-22366 critical↓6
- 2CWE-416350 critical↑1
- 3CWE-284322 critical↓2
- 4CWE-78327 critical—
- 5CWE-773112 critical↓6
- 6CWE-94313 critical↑2
- 7CWE-120285 critical↓11
- 8CWE-770240 critical↑8
- 9CWE-276232 critical↓3
- 10CWE-400230 critical↑1
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.