Month report
October 2023
Rolled up 2026-08-09 20:45 from 376,493 CVE records
2,690 CVEs published, +45.5% on the same month last year. 174 rated critical, 18 listed by CISA as exploited. google led with 173; the most common weakness class was CWE-79 (320). netis systems climbed 61 places, the largest move. 10 vendors ranked for the first time.
Published
2,690
Critical / high
174 / 750
Medium / low
981 / 69
Added to CISA KEV
18
Public exploit
121
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
5
Listed within 7 days
63.2%
Listed within 30 days
73.7%
Detection gap
Listed as exploited, no public template
Listed this month
18
With a template
7
No template
11
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | 173 | 3 | android (157) · chrome (16) · mt6879 (6) | ↑3 | ||||
| 2 | microsoft | 104 | 2 | 3 | 2 | windows server 2022 (78) · windows server 2019 (77) · windows server 2019 server core installation (77) | — | |
| 3 | oracle | 73 | 3 | 3 | mysql server (24) · weblogic server (6) · banking trade finance (5) | · | ||
| 4 | ibm | 62 | security verify privilege (13) · db2 for linux unix and windows (9) · security verify governance (7) | ↑15 | ||||
| 5 | totolink | 58 | 6 | x2000r firmware (24) · x6000r firmware (21) · a3300r firmware (3) | · | |||
| 6 | redhat | 42 | 1 | 2 | red hat enterprise linux 7 (29) · red hat enterprise linux 8 (27) · red hat enterprise linux 9 (27) | ↓1 | ||
| 7 | apple | 40 | 1 | 2 | macos (36) · ios and ipados (24) · watchos (11) | ↓6 | ||
| 8 | fortinet | 36 | 5 | 1 | fortiwlm (10) · fortimanager (8) · fortianalyzer (7) | ↑18 | ||
| 9 | idattend pty | 30 | 11 | idweb (30) | new | |||
| 10 | juniper networks | 30 | junos os (25) · junos os evolved (15) | · | ||||
| 11 | siemens | 28 | 2 | 2 | 3 | tecnomatix plant simulation v2201 (9) · tecnomatix plant simulation v2302 (9) · simatic s7 1500 cpu 1518 4 pn dp mfp (7) | ↑6 | |
| 12 | apache | 24 | 2 | 1 | 3 | apache airflow (6) · apache inlong (4) · apache http server (3) | ↑11 | |
| 13 | unisoc shanghai technologies co | 24 | sc9863a (11) · sc7731e sc9832e sc9863a t310 t606 t612 t616 t610 t618 t760 t770 t820 s8000 (10) · t606 (3) | ↓6 | ||||
| 14 | huawei | 22 | harmonyos (22) · emui (20) | ↑1 | ||||
| 15 | lenovo | 22 | 1 | diagnostics (3) · hardwarescanplugin (3) · lenovo xclarity controller xcc (3) | · | |||
| 16 | qualcomm | 22 | 3 | snapdragon (22) · ar8035 firmware (4) · fastconnect 6700 firmware (4) | ↓5 | |||
| 17 | d link | 17 | di 7003gv2 d1 (7) · di 7200gv2 e1 (7) · di 7100gv2 d1 (6) | ↓9 | ||||
| 18 | f5 | 17 | 1 | 2 | 1 | big ip (14) · big ip edge client (2) · big ip next spk (2) | · | |
| 19 | acronis | 16 | acronis cyber protect cloud agent (11) · acronis cyber protect 16 (7) · acronis agent (4) | ↑6 | ||||
| 20 | tp link | 16 | 1 | tl wr886n firmware (14) · tl wdr7660 firmware (2) · tapo c100 (1) | ↑10 | |||
| 21 | sourcecodester | 15 | task reminder system (3) · online computer and laptop store (2) · sticky notes app (2) | ↓11 | ||||
| 22 | dlink | 14 | 1 | dir 823g firmware (11) · dir 846 firmware (1) · dsl 2730u (1) | ↓2 | |||
| 23 | mozilla | 14 | firefox (12) · firefox esr (8) · thunderbird (8) | ↓5 | ||||
| 24 | nothings | 14 | stb (14) · stb image (6) | new | ||||
| 25 | qnap systems | 14 | 1 | qts (6) · quts hero (6) · qutscloud (6) | ↑50 | |||
| 26 | adobe | 13 | adobe commerce (9) · bridge (2) · acrobat for edge (1) | ↓23 | ||||
| 27 | dell | 13 | 1 | dell smartfabric storage software (8) · unity (4) · dell openmanage server administrator (1) | ↑9 | |||
| 28 | realmag777 | 13 | bear bulk editor and products manager professional for woocommerce by pluginus net (11) · wolf wordpress posts bulk editor and manager professional (2) | · | ||||
| 29 | sonicwall | 13 | sonicos (9) · netextender (3) · directory services connector (1) | · | ||||
| 30 | yifan | 13 | 9 | yf325 (13) · yf325 firmware (13) | new | |||
| 31 | yifanwireless | 13 | 9 | yf325 (13) · yf325 firmware (13) | new | |||
| 32 | mediatek | 12 | mt6879 (8) · mt6895 (8) · mt6985 (8) | ↓26 | ||||
| 33 | zscaler | 12 | client connector (12) | new | ||||
| 34 | gopiplus | 11 | 1 | horizontal scrolling announcement (1) · image horizontal reel scroll slideshow (1) · image vertical reel scroll slideshow (1) | new | |||
| 35 | jenkins project | 11 | jenkins cloudbees cd plugin (2) · jenkins lambdatest automation plugin (2) · jenkins edgewall trac plugin (1) | ↓22 | ||||
| 36 | netis systems | 11 | 1 | n3m firmware (6) · n3m (5) | ↑61 | |||
| 37 | samsung mobile | 11 | samsung mobile devices (6) · samsung health (2) · galaxy book galaxy book pro galaxy book pro 360 and galaxy book odyssey (1) | ↓21 | ||||
| 38 | sielco | 11 | 4 | polyeco1000 (7) · analog fm transmitter (4) · radio link (4) | new | |||
| 39 | hcl software | 10 | 2 | hcl compass (3) · bigfix insights for vulnerability remediation (2) · bigfix patch management (1) | · | |||
| 40 | sick | 10 | apu0200 (9) · apu0200 firmware (1) · fx0 gent00000 (1) | · | ||||
| 41 | xwiki | 10 | 8 | 1 | xwiki platform (8) · xwiki rendering (2) | · | ||
| 42 | byzoro | 9 | smart s45f multi service secure gateway intelligent management platform (7) · smart s85f management platform (2) · smart s45f (1) | ↑40 | ||||
| 43 | codeastro | 9 | internet banking system (7) · pos system (2) | new | ||||
| 44 | elastic | 9 | 1 | 1 | elasticsearch (3) · fleet server (2) · apm server (1) | · | ||
| 45 | softether vpn | 9 | 1 | softether vpn (9) · vpn (7) | new | |||
| 46 | discourse | 8 | 1 | discourse (6) · discourse calendar (1) · discourse jira (1) | ↑5 | |||
| 47 | gopi ramasamy | 8 | popup contact form (2) · email posts to subscribers (1) · image vertical reel scroll slideshow (1) | · | ||||
| 48 | home assistant | 8 | core (8) | new | ||||
| 49 | hp | 8 | certain hp enterprise laserjet laserjet managed printers (1) · hp displays (1) · hp life android mobile (1) | · | ||||
| 50 | solarwinds | 8 | access rights manager (8) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2023-10 that are on the CISA KEV catalog today. The 18 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-7932015 critical—
- 2CWE-3522052 critical↑20
- 3CWE-8910828 critical↓1
- 4CWE-200691 critical↑2
- 5CWE-20666 critical↑2
- 6CWE-787563 critical↓3
- 7CWE-284486 critical↑7
- 8CWE-784513 critical↑4
- 9CWE-269441 critical↑7
- 10CWE-862430 critical↑7
- 1CWE-22427 critical↓6
- 2CWE-400420 critical↓3
- 3CWE-121415 critical—
- 4CWE-416411 critical↓10
- 5CWE-94409 critical—
- 6CWE-120333 critical↓6
- 7CWE-125302 critical↓9
- 8CWE-306262 critical↑10
- 9CWE-434256 critical↓8
- 10CWE-77247 critical↑3
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.