CVE Tools
Sign in
month report

February 2018

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

February 2018 closed with 1,350 published CVEs. 258 criticals, hewlett packard enterprise led volume, mostly via intelligent management center (imc) plat. Top weakness class — CWE-20 (184 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,350
— MoM— YoY
Severity mix
258 / 558
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
2.5%
34 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
2940.9
n=34
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
1366
n=3
Detection gap

KEV pressure, no Nuclei coverage

February 2018 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in February 2018

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

20Improper Input Validation79XSS89SQL Injection200Information Exposure119Memory Buffer Bounds125Out-of-bounds Read787Out-of-bounds Write352CSRF476NULL Pointer Dereference22Path Traversalhewlett packard enterprise8693203314hp8683204314debian9221113691hp inc.69112huawei16118741huawei technologies co., ltd.16118741microsoft3104161google7186181ibm1121122canonical313418microsoft corporation29161сообщество свободного программного обеспечения124343

Most discussed CVEs — February 2018

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1hewlett packard enterprise—
    186 CVE36 critCVSS 8.0
    NEWNuclei 2PoC 11
    intelligent management center (imc) plat (95) · matrix operating environment (15) · system management homepage for windows and linux (9)
  • 2hp—
    185 CVE36 critCVSS 8.3
    Nuclei 2PoC 11
    intelligent management center (100) · hpe intelligent management center plat (85) · matrix operating environment (15)
  • 3debian—
    117 CVE22 critCVSS 7.8
    KEV 1Nuclei 2PoC 27
    debian linux (117)
  • 4huawei—
    71 CVE1 critCVSS 5.4
    dp300 firmware (36) · te60 firmware (34) · te50 firmware (34)
  • 5huawei technologies co., ltd.—
    71 CVE1 critCVSS 5.9
    dp300,rp200,te30,te40,te50,te60 (11) · dp300,ips module,ngfw module,nip6300,nip6600,nip6800,rp200,svn5600,svn5800,svn5800-c,semg9811,secospace usg6300,secospace usg6500,secospace usg6600,te30,te40,te50,te60,usg9500,usg9520,usg9560,usg9580,vp9660,viewpoint 8660,viewpoint 9030,espace u1981 (6) · ips,module,ngfw,module,nip6300,nip6600,secospace,usg6300,secospace,usg6500,secospace,usg6600,usg9500 (6)
  • 6microsoft—
    58 CVECVSS 6.8
    PoC 15
    windows 10 (21) · windows server 2016 (20) · windows 7 (17)
  • 7google—
    56 CVE3 critCVSS 7.8
    PoC 2
    android (34) · chrome (20) · chrome os (2)
  • 8ibm—
    51 CVE4 critCVSS 6.8
    tririga application platform (8) · client application access (6) · notes (6)
  • 9canonical—
    50 CVE9 critCVSS 7.3
    KEV 1Nuclei 1PoC 11
    ubuntu linux (49) · ubuntu (17) · apport (3)
  • 10microsoft corporation—
    49 CVECVSS 6.5
    NEWPoC 14
    windows (12) · microsoft edge, chakracore (9) · microsoft edge (4)
  • 11сообщество свободного программного обеспечения—
    45 CVE14 critCVSS 7.8
    KEV 1Nuclei 1PoC 13
    debian gnu/linux (28) · sam2p (4) · libxml2 (3)
  • 12adobe—
    44 CVE4 critCVSS 7.7
    KEV 1PoC 1
    acrobat (39) · acrobat dc (39) · acrobat reader (39)
  • 13ооо «русбитех-астра»—
    40 CVE8 critCVSS 7.6
    KEV 1Nuclei 1PoC 10
    astra linux special edition (29) · astra linux special edition для «эльбрус» (15) · astra linux common edition (6)
  • 14sap—
    36 CVE1 critCVSS 6.7
    Nuclei 1
    internet graphics server (15) · hana extended application services (8) · sap netweaver (8)
  • 15cisco—
    32 CVE5 critCVSS 7.3
    KEV 1Nuclei 1PoC 1
    data center analytics framework (4) · unified communications manager (3) · rv132w firmware (2)
  • 16redhat—
    32 CVE8 critCVSS 7.9
    KEV 1PoC 8
    enterprise linux server (16) · enterprise linux workstation (15) · enterprise linux desktop (14)
  • 17maven—
    28 CVE6 critCVSS 7.4
    Nuclei 2PoC 1
    org.jenkins-ci.main:jenkins-core (3) · com.fasterxml.jackson.core:jackson-databind (3) · org.apache.geode:geode-core (3)
  • 18apache—
    26 CVE4 critCVSS 7.3
    PoC 2
    geode (3) · jmeter (2) · cloudstack (2)
  • 19atlassian—
    26 CVE1 critCVSS 5.9
    crucible (8) · bamboo (6) · fisheye (6)
  • 20sap se—
    26 CVECVSS 6.7
    NEWNuclei 1
    sap internet graphics server (13) · sap hana extended application services (8) · sap crm webclient ui (1)
  • 21quest—
    25 CVE24 critCVSS 9.7
    NEWPoC 1
    netvault backup (25) · quest netvault backup (24)
  • 22apache software foundation—
    24 CVE4 critCVSS 7.2
    PoC 1
    apache geode (3) · apache jmeter (2) · apache tomcat (2)
  • 23dell technologies—
    24 CVE24 critCVSS 9.8
    PoC 1
    netvault backup (24)
  • 24wireshark—
    24 CVE1 critCVSS 7.6
    wireshark (24)
  • 25jiangmin—
    21 CVECVSS 7.8
    NEWPoC 21
    antivirus (21)
  • 26google inc.—
    20 CVE1 critCVSS 7.5
    NEWPoC 1
    android (20)
  • 27gnu—
    17 CVE3 critCVSS 7.2
    PoC 3
    binutils (7) · glibc (4) · libcdio (3)
  • 28packagist—
    16 CVE2 critCVSS 6.6
    Nuclei 1PoC 12
    simplesamlphp/simplesamlphp (4) · kreait/firebase-php (1) · mautic/core (1)
  • 29ccn-lite—
    15 CVE10 critCVSS 9.1
    NEW
    ccn-lite (15)
  • 30oracle—
    14 CVE5 critCVSS 8.4
    Nuclei 3PoC 3
    communications billing and revenue management (3) · communications instant messaging server (3) · communications cloud native core automated test suite (3)
  • 31linux—
    13 CVE1 critCVSS 6.6
    PoC 2
    linux kernel (13)
  • 32qualcomm, inc.—
    11 CVE1 critCVSS 7.9
    NEW
    android for msm, firefox os for msm, qrd android (10) · snapdragon automobile, snapdragon iot, snapdragon mobile (1)
  • 33nuget—
    10 CVECVSS 7.5
    PoC 6
    microsoft.chakracore (10)
  • 34rubygems—
    10 CVE2 critCVSS 6.8
    PoC 6
    ember-source (2) · echor (2) · radiant (1)
  • 35siemens—
    10 CVECVSS 6.1
    PoC 1
    simatic s7-1500 cpu 1518(f)-4 pn/dp mfp (7) · ruggedcom rox ii firmware (3) · ruggedcom rox ii (2)
  • 36trendmicro—
    10 CVE1 critCVSS 8.2
    control manager (8) · trend micro control manager (8) · deep security (1)
  • 37extremewireless—
    9 CVECVSS 6.2
    NEW
    wing (9)
  • 38gnu general public license—
    9 CVE2 critCVSS 7.0
    NEWKEV 1Nuclei 2PoC 3
    gnu binutils (7) · exim (1) · joomla! (1)
  • 39pypi—
    9 CVE2 critCVSS 8.0
    Nuclei 1PoC 3
    web2py (2) · django (1) · django-anymail (1)
  • 40jenkins—
    8 CVECVSS 6.9
    Nuclei 2
    jenkins (3) · credentials binding (1) · android lint (1)
  • 41smiths-medical—
    8 CVECVSS 6.5
    NEWPoC 1
    medfusion 4000 wireless syringe infusion pump (8)
  • 42micropoint—
    7 CVECVSS 7.8
    NEWPoC 7
    proactive defense (7)
  • 43xpdfreader—
    7 CVECVSS 5.5
    NEWPoC 1
    xpdf (7)
  • 44eq-3—
    6 CVE3 critCVSS 8.5
    NEWPoC 2
    homematic central control unit ccu2 firmware (5) · homematic ccu2 firmware (1)
  • 45leptonica—
    6 CVE4 critCVSS 8.1
    NEW
    leptonica (6)
  • 46npm—
    6 CVE2 critCVSS 7.3
    PoC 2
    converse.js (1) · dijit (1) · ep_etherpad-lite (1)
  • 47puppet—
    6 CVECVSS 6.8
    PoC 1
    puppet enterprise (6) · puppet (2) · puppet agent (2)
  • 48ао «концерн вниинс»—
    6 CVE2 critCVSS 8.0
    NEWPoC 4
    ос он «стрелец» (6)
  • 49ао «нтц ит роса»—
    6 CVE1 critCVSS 7.6
    PoC 2
    роса кобальт (4) · rosa fresh (1) · роса хром (1)
  • 50ffmpeg—
    5 CVECVSS 7.4
    ffmpeg (5)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-20184—
2CWE-79149—
3CWE-8997—
4CWE-20096—
5CWE-11982—
6CWE-12562—
7CWE-78760—
8CWE-35232—
9CWE-47632—
10CWE-2230—
11CWE-41626—
12CWE-50226—
13CWE-19025—
14CWE-61122—
15CWE-7820—
16CWE-28719—
17CWE-83519—
18CWE-40014—
19CWE-73213—
20CWE-77213—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Enterprise Software410 CVE
    170 crit52 vendorsCVSS 9.7
    intelligent management center (100) · hpe intelligent management center plat (85) · matrix operating environment (15)
  • Operating Systems355 CVE
    108 crit8 KEV36 vendorsCVSS 8.2
    debian linux (117) · ubuntu linux (49) · astra linux special edition (29)
  • Networking Infrastructure260 CVE
    58 crit4 KEV31 vendorsCVSS 8.7
    intelligent management center (imc) plat (95) · matrix operating environment (15) · system management homepage for windows and linux (9)
  • OSS Libraries220 CVE
    57 crit1 KEV68 vendorsCVSS 8.5
    ccn-lite (15) · zziplib (9) · ffmpeg (8)
  • Mobile Apps129 CVE
    32 crit6 vendorsCVSS 7.5
    android (36) · dp300 firmware (36) · te30 firmware (34)
  • Web & CMS Plugins129 CVE
    47 crit75 vendorsCVSS 9.8
    mathtype (4) · tomcat (4) · apache geode (3)
  • Security Products107 CVE
    13 crit30 vendorsCVSS 8.3
    antivirus (21) · control manager (8) · trend micro control manager (8)
  • Consumer Software73 CVE
    30 crit2 KEV20 vendorsCVSS 9.8
    acrobat (39) · acrobat dc (39) · acrobat reader (39)
  • Hardware Firmware41 CVE
    54 crit15 vendorsCVSS 9.6
    netvault backup (24) · blackarmor nas 110 firmware (2) · blackarmor nas 220 firmware (2)
  • ICS / OT / IoT36 CVE
    19 crit21 vendorsCVSS 9.8
    d60 line distance relay firmware (2) · igss mobile (2) · abb microscada (1)
  • Cloud & SaaS35 CVE
    4 crit23 vendorsCVSS 8.8
    boot2docker (2) · eucalyptus (2) · fabric operating system (2)
  • Databases21 CVE
    37 crit10 vendorsCVSS 8.8
    postgresql (6) · communications billing and revenue management (4) · communications instant messaging server (4)
  • Communications19 CVE
    5 crit1 KEV11 vendorsCVSS 9.8
    asterisk (4) · trixbox (3) · certified asterisk (2)
  • DevTools & CI14 CVE
    6 vendorsCVSS 7.8
    jenkins (3) · android lint (1) · ccm (1)
  • AI / ML6 CVE
    4 crit3 vendorsCVSS 9.6
    classified (1) · je paypervideo (1) · membership (1)
  • Unclassified74 CVE
    21 crit52 vendorsCVSS 7.7
    sam2p (5) · wireless ip camera 360 (4) · epg search result viewer(kkcald) (3)
Weakness × Sector

Which weaknesses hit which solution categories in February 2018

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

20Improper Input Validation79XSS89SQL Injection200Information Exposure119Memory Buffer Bounds125Out-of-bounds Read787Out-of-bounds Write352CSRF476NULL Pointer Dereference22Path TraversalEnterprise Software8358292971739Networking Infrastructure110194232959565Operating Systems3061302115301161OSS Libraries917310222322386Web & CMS Plugins6454571398Consumer Software6315132727242Security Products398772323Hardware Firmware1853198622ICS / OT / IoT13141497123Mobile Apps711451