Month report
August 2023
Rolled up 2026-08-09 20:45 from 370,690 CVE records
2,479 CVEs published, +7.5% on the same month last year. 116 rated critical, 8 listed by CISA as exploited. google led with 109; the most common weakness class was CWE-79 (293). cisco climbed 48 places, the largest move. 4 vendors ranked for the first time.
Published
2,479
Critical / high
116 / 556
Medium / low
734 / 70
Added to CISA KEV
8
Public exploit
119
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
88
Listed within 7 days
28.6%
Listed within 30 days
28.6%
Detection gap
Listed as exploited, no public template
Listed this month
8
With a template
3
No template
5
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | 109 | 2 | 10 | chrome (57) · android (51) · mt6879 (9) | ↑2 | |||
| 2 | microsoft | 77 | 4 | 1 | 2 | windows 11 version 21h2 (32) · windows 11 version 22h2 (32) · windows 10 version 21h2 (31) | ↓1 | |
| 3 | tenda | 65 | 1 | ac6 (17) · ac9 (14) · ac5 (13) | ↑16 | |||
| 4 | adobe | 37 | 1 | acrobat reader (30) · dimension (3) · magento commerce (2) | ↑13 | |||
| 5 | siemens | 37 | 2 | teamcenter visualization v14 1 (12) · teamcenter visualization v14 2 (12) · solid edge se2023 (11) | ↑8 | |||
| 6 | cisco | 35 | 1 | 1 | cisco evolved programmable network manager epnm (4) · cisco prime infrastructure (4) · cisco intersight virtual appliance (3) | ↑48 | ||
| 7 | mediatek | 35 | mt6895 (14) · mt6983 (14) · mt6879 (13) | ↑7 | ||||
| 8 | ibm | 31 | 1 | security guardium (8) · robotic process automation (5) · guardium cloud key manager (3) | — | |||
| 9 | sourcecodester | 30 | inventory management system (12) · free hospital management system for small practices (8) · resort reservation system (3) | ↑9 | ||||
| 10 | huawei | 28 | 6 | emui (28) · harmonyos (28) | — | |||
| 11 | samsung mobile | 26 | samsung mobile devices (21) · galaxy book go galaxy book go 5g galaxy book2 go and galaxy book2 pro 360 (2) · galaxy book 2 go (1) | ↓2 | ||||
| 12 | sciencelogic | 25 | sl 1 (25) | new | ||||
| 13 | hewlett packard enterprise hpe | 23 | edgeconnect sd wan orchestrator (20) · hpe aruba networking virtual intranet access via (2) · aruba cx switches (1) | ↑13 | ||||
| 14 | intel | 23 | 1 | lsi storage authority lsa (19) · raid web console 3 rwc3 (19) · lsi storage authority (7) | · | |||
| 15 | broadcom | 22 | 1 | lsi storage authority lsa (22) · raid web console 3 rwc3 (19) · lsi storage authority (7) | · | |||
| 16 | redhat | 22 | 1 | red hat enterprise linux 9 (21) · red hat enterprise linux 6 (20) · red hat enterprise linux 7 (20) | ↓9 | |||
| 17 | codesys | 19 | codesys control for beaglebone sl (16) · codesys control for empc a imx6 sl (16) · codesys control for iot2000 sl (16) | · | ||||
| 18 | jenkins project | 19 | jenkins folders plugin (3) · jenkins fortify plugin (3) · jenkins delphix plugin (2) | ↓7 | ||||
| 19 | apple | 18 | 1 | macos (16) · ios and ipados (6) · safari (1) | ↓14 | |||
| 20 | qualcomm | 18 | 4 | snapdragon (18) · sd865 5g firmware (6) · sw5100 firmware (6) | — | |||
| 21 | brocade | 17 | fabric os (11) · brocade fabric os (3) · sannav (2) | · | ||||
| 22 | freerdp | 17 | freerdp (17) | · | ||||
| 23 | apache | 16 | 1 | 2 | apache airflow (4) · airflow (2) · apache airflow providers apache drill (2) | ↓11 | ||
| 24 | gitlab | 16 | gitlab (16) | ↑6 | ||||
| 25 | phoenix contact | 16 | 2 | wp 6070 wvps (14) · wp 6101 wxps (14) · wp 6121 wxps (14) | · | |||
| 26 | sap se | 16 | 1 | sap powerdesigner (3) · cla assistant (1) · sap business one (1) | ↓5 | |||
| 27 | dell | 15 | powerscale onefs (11) · cpg bios (2) · dell storage integration tools for vmware dsitv dell storage vsphere client plugin dsvcp replay manager for vmware rmsv (1) | ↑7 | ||||
| 28 | mozilla | 15 | firefox (15) · firefox esr (13) · thunderbird (5) | ↓5 | ||||
| 29 | zoom video communications | 15 | 3 | zoom desktop client for windows (5) · zoom clients (3) · zoom sdk s (3) | ↑23 | |||
| 30 | acronis | 14 | 1 | acronis agent (8) · acronis cyber protect 15 (6) · acronis cyber protect home office (4) | · | |||
| 31 | hpe | 14 | edgeconnect sd wan orchestrator (14) | · | ||||
| 32 | ox software | 14 | ox app suite (14) | · | ||||
| 33 | moxa | 13 | tn 5900 series (8) · tn 5900 (6) · edr g902 series (5) | · | ||||
| 34 | hcl software | 12 | hcl unica platform (4) · hcl traveler to do (2) · hcl dryice iautomate (1) | ↑8 | ||||
| 35 | ivanti | 12 | 2 | 3 | 2 | avalanche (7) · epmm (2) · desktop server management dsm (1) | · | |
| 36 | amd | 11 | 2 | athlon 3000 series processors with radeon graphics (3) · athlon pro 3000 series processors with radeon vega graphics (3) · prof (3) | · | |||
| 37 | instantsoft | 11 | 1 | instantsoft icms2 (11) · instantcms (3) | new | |||
| 38 | schweitzer engineering laboratories | 11 | sel 5030 acselerator quickset software (5) · sel 5037 sel grid configurator (4) · sel 5033 acselerator rtac software (2) | · | ||||
| 39 | d link | 10 | 1 | 1 | dir 880l (3) · dap 2660 (2) · dir 868l (2) | ↑43 | ||
| 40 | lenovo | 10 | notebook (5) · lenovo notebook (2) · thinkpad (2) | · | ||||
| 41 | netgear | 10 | jwnr2000v2 (2) · xavn2001v2 (2) · xwn5001 (2) | · | ||||
| 42 | nextcloud | 10 | security advisories (10) · server (1) · talk (1) | · | ||||
| 43 | unisoc shanghai technologies co | 10 | sc7731e sc9832e sc9863a t310 t606 t612 t616 t610 t618 t760 t770 t820 s8000 (5) · t606 t612 t616 t610 t618 t760 t770 t820 s8000 (2) · s8000 (1) | ↓39 | ||||
| 44 | phoenixcontact | 9 | 1 | wp 6070 wvps (9) · wp 6101 wxps (9) · wp 6121 wxps (9) | new | |||
| 45 | cockpit hq | 8 | 1 | cockpit (8) · cockpit hq cockpit (8) | · | |||
| 46 | php jabbers | 8 | 6 | availability booking calendar (1) · bus reservation system (1) · cleaning business (1) | new | |||
| 47 | splunk | 8 | splunk enterprise (7) · splunk cloud (6) · splunk (1) | · | ||||
| 48 | f5 | 7 | big ip (4) · big ip edge client (2) · big iq (1) | · | ||||
| 49 | nozomi networks | 7 | cmc (7) · guardian (7) | · | ||||
| 50 | omron | 7 | cx programmer (6) · cj2h cpu unit (1) · cj2m cpu unit (1) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2023-08 that are on the CISA KEV catalog today. The 8 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-792934 critical—
- 2CWE-20743 critical↑2
- 3CWE-897213 critical—
- 4CWE-78638 critical↑5
- 5CWE-125531 critical↑1
- 6CWE-284441 critical↑15
- 7CWE-22437 critical↑7
- 8CWE-200380 critical↓1
- 9CWE-787383 critical↑7
- 10CWE-416330 critical↓2
- 1CWE-120325 critical↑11
- 2CWE-862230 critical↑8
- 3CWE-269222 critical↑5
- 4CWE-400210 critical↓3
- 5CWE-94193 critical↓2
- 6CWE-352171 critical↓14
- 7CWE-427160 critical·
- 8CWE-863162 critical↓8
- 9CWE-122150 critical↓4
- 10CWE-190153 critical↑16
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.