CVE Tools
Sign in
month report

March 2018

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

March 2018 closed with 2,306 published CVEs. 199 criticals, debian led volume, mostly via debian linux. Top weakness class — CWE-79 (194 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
2,306
— MoM— YoY
Severity mix
199 / 551
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
2.3%
53 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
2909.0
n=53
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
1436
n=22
Detection gap

KEV pressure, no Nuclei coverage

March 2018 · vendors with active exploitation listed by CISA but no public detection template.

  • KEV 1sap10 CVE
Weakness × Vendor

What's spreading where in March 2018

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS20Improper Input Validation200Information Exposure119Memory Buffer Bounds125Out-of-bounds Read787Out-of-bounds Write287Improper Authentication352CSRF22Path Traversal476NULL Pointer Dereferencedebian67110131421314microsoft13392161microsoft corporation13392161google1912231643huawei137910413сообщество свободного программного обеспечения2931088216ibm18220123huawei technologies co., ltd.10799413canonical2212128110ооо «русбитех-астра»163666218cisco91334233redhat16185926

Most discussed CVEs — March 2018

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1debian—
    107 CVE15 critCVSS 7.1
    KEV 1Nuclei 2PoC 31
    debian linux (107)
  • 2google—
    78 CVE17 critCVSS 7.9
    PoC 1
    android (77) · chrome os (1)
  • 3canonical—
    75 CVE7 critCVSS 7.1
    Nuclei 1PoC 19
    ubuntu linux (66) · ubuntu (35) · screen-resolution-extra (1)
  • 4microsoft—
    74 CVECVSS 6.4
    PoC 13
    windows 10 (29) · windows server 2016 (29) · windows server 2008 (23)
  • 5microsoft corporation—
    74 CVECVSS 6.8
    NEWPoC 13
    microsoft sharepoint (13) · windows kernel (13) · chakracore, microsoft edge (10)
  • 6huawei—
    72 CVECVSS 5.5
    PoC 1
    dp300 firmware (30) · te60 firmware (22) · te30 firmware (21)
  • 7сообщество свободного программного обеспечения—
    72 CVE11 critCVSS 7.3
    KEV 1Nuclei 2PoC 24
    debian gnu/linux (60) · rubygems (7) · linux (5)
  • 8ibm—
    71 CVE1 critCVSS 5.4
    rational doors next generation (9) · rational collaborative lifecycle management (9) · rational quality manager (9)
  • 9huawei technologies co., ltd.—
    67 CVECVSS 5.7
    NEWPoC 1
    dp300; rp200; te30; te40; te50; te60 (10) · mate 9 pro (5) · dp300; ips module; ngfw module; nip6300; nip6600; rp200; s12700; s1700; s2700; s5700; s6700; s7700; s9700; secospace usg6300; secospace usg6500; secospace usg6600; te30; te40; te50; te60; tp3106; tp3206; usg9500; viewpoint 9030 (4)
  • 10ооо «русбитех-астра»—
    65 CVE10 critCVSS 7.4
    Nuclei 1PoC 17
    astra linux special edition (52) · astra linux common edition (25) · astra linux special edition для «эльбрус» (20)
  • 11redhat—
    63 CVE6 critCVSS 7.5
    Nuclei 2PoC 11
    enterprise linux server (31) · enterprise linux workstation (30) · enterprise linux desktop (30)
  • 12cisco—
    62 CVE4 critCVSS 7.1
    KEV 17Nuclei 1
    ios xe (31) · cisco ios xe (18) · ios (17)
  • 13maven—
    40 CVE4 critCVSS 6.6
    Nuclei 3PoC 6
    org.jruby:jruby-stdlib (7) · org.apache.syncope:syncope-core (2) · org.keycloak:keycloak-core (2)
  • 14netiq—
    30 CVE1 critCVSS 4.5
    identity manager (12) · access manager (8) · imanager (4)
  • 15dell emc—
    28 CVE3 critCVSS 6.9
    NEWNuclei 1PoC 10
    isilon onefs (9) · scaleio (3) · rsa authentication agent for web for iis, rsa authentication agent for web for apache web server (2)
  • 16qualcomm, inc.—
    28 CVE11 critCVSS 8.1
    NEW
    android for msm, firefox os for msm, qrd android (22) · snapdragon iot, snapdragon mobile (4) · snapdragon iot, snapdragon mobile, snapdragon automobile (1)
  • 17linux—
    22 CVECVSS 6.1
    PoC 1
    linux kernel (22)
  • 18windows optimization master project—
    21 CVECVSS 7.8
    NEWPoC 21
    windows optimization master (21)
  • 19libming—
    20 CVECVSS 6.8
    NEWPoC 11
    libming (20)
  • 20packagist—
    20 CVE7 critCVSS 7.6
    KEV 1Nuclei 3PoC 18
    drupal/core (8) · drupal/drupal (8) · simplesamlphp/saml2 (2)
  • 21ао «концерн вниинс»—
    19 CVE4 critCVSS 7.7
    NEWPoC 8
    ос он «стрелец» (19)
  • 22apache—
    18 CVE2 critCVSS 7.0
    Nuclei 1PoC 3
    http server (8) · syncope (2) · xerces-c\+\+ (1)
  • 23dell—
    18 CVE3 critCVSS 7.6
    Nuclei 1PoC 10
    emc isilon (6) · emc scaleio (3) · emc isilon onefs (3)
  • 24apache software foundation—
    17 CVE2 critCVSS 7.1
    Nuclei 1PoC 4
    apache http server (7) · http server (7) · apache syncope (2)
  • 25iobit—
    15 CVECVSS 7.8
    NEWPoC 15
    advanced systemcare ultimate (15)
  • 26opensuse—
    15 CVE2 critCVSS 7.3
    PoC 1
    leap (5) · libzypp (3) · open build service (3)
  • 27gitlab—
    14 CVE3 critCVSS 7.5
    NEW
    gitlab (14) · gitlab community and enterprise editions (13)
  • 28netapp—
    14 CVE2 critCVSS 7.0
    Nuclei 1PoC 4
    storagegrid (7) · clustered data ontap (7) · storage automation store (7)
  • 29nuget—
    14 CVE1 critCVSS 7.6
    PoC 2
    microsoft.chakracore (11) · curl (1) · microsoft.aspnetcore.httpoverrides (1)
  • 30rubygems—
    13 CVE1 critCVSS 6.9
    PoC 6
    rubygems (7) · rubygems-update (7) · sanitize (1)
  • 31schneider-electric—
    13 CVE7 critCVSS 8.7
    imp1110-1er firmware (12) · imp1110-1 firmware (12) · imp219-1e firmware (12)
  • 32schneider electric se—
    13 CVE7 critCVSS 8.7
    NEW
    pelco sarix professional (12) · somove (1)
  • 33suse—
    13 CVE1 critCVSS 7.6
    PoC 2
    libzypp (3) · open build service (2) · nextcloud (1)
  • 34trendmicro—
    13 CVE5 critCVSS 8.0
    PoC 12
    email encryption gateway (12) · trend micro email encryption gateway (12) · smart protection server (1)
  • 35gemalto—
    12 CVECVSS 7.7
    NEW
    gemalto's sentinel ldk rte (2) · sentinel ldk rte (2) · safenet authentication service windows logon agent (2)
  • 36imagemagick—
    12 CVE2 critCVSS 7.8
    PoC 3
    imagemagick (12)
  • 37jenkins—
    12 CVECVSS 5.7
    PoC 1
    gerrit trigger (2) · git (1) · coverity (1)
  • 38nvidia corporation—
    12 CVECVSS 6.8
    NEW
    android (6) · shield tv (5) · nvidia tegra (1)
  • 39philips—
    12 CVE5 critCVSS 8.5
    NEW
    intellispace portal (9) · philips intellispace portal (9) · philips alice 6 system (2)
  • 40ао «нтц ит роса»—
    12 CVE2 critCVSS 7.5
    Nuclei 1PoC 2
    rosa virtualization 3.0 (8) · rosa virtualization (7) · роса кобальт (4)
  • 41f5—
    11 CVECVSS 6.8
    big-ip application security manager (9) · big-ip policy enforcement manager (8) · big-ip link controller (7)
  • 42novell inc.—
    11 CVECVSS 7.6
    PoC 1
    opensuse leap (9) · suse linux enterprise desktop (3) · suse linux enterprise module for open buildservice development tools (3)
  • 43red hat, inc.—
    11 CVE1 critCVSS 7.0
    NEW
    keycloak (2) · 389-ds-base (2) · eap-5 (1)
  • 44exempi project—
    10 CVECVSS 5.7
    NEWPoC 6
    exempi (10)
  • 45f5 networks, inc.—
    10 CVECVSS 7.0
    NEW
    big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe) (2) · big-ip ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe (2) · big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem, websafe (1)
  • 46hanwha-security—
    10 CVE6 critCVSS 8.7
    NEW
    snh-v6410pn firmware (10) · snh-v6410pnw firmware (10)
  • 47hanwha techwin—
    10 CVE6 critCVSS 8.7
    NEW
    hanwha techwin smartcams (10)
  • 48oracle—
    10 CVE3 critCVSS 7.9
    Nuclei 1PoC 2
    peoplesoft enterprise peopletools (4) · enterprise manager ops center (4) · communications webrtc session controller (3)
  • 49pypi—
    10 CVE6 critCVSS 8.4
    PoC 2
    django (2) · bleach (1) · asyncssh (1)
  • 50sap—
    10 CVE1 critCVSS 6.8
    KEV 1PoC 1
    sap business process automation (2) · netweaver system landscape directory (1) · business application software integrated solution (1)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79194—
2CWE-20165—
3CWE-20095—
4CWE-11978—
5CWE-12577—
6CWE-78756—
7CWE-28746—
8CWE-35246—
9CWE-2242—
10CWE-47640—
11CWE-8928—
12CWE-26425—
13CWE-7824—
14CWE-41622—
15CWE-73222—
16CWE-79818—
17CWE-19017—
18CWE-36217—
19CWE-43417—
20CWE-61117—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems392 CVE
    129 crit3 KEV44 vendorsCVSS 7.3
    debian linux (107) · ubuntu linux (66) · debian gnu/linux (60)
  • OSS Libraries243 CVE
    43 crit2 KEV71 vendorsCVSS 8.5
    libming (20) · imagemagick (18) · exempi (10)
  • Enterprise Software197 CVE
    28 crit2 KEV46 vendorsCVSS 7.3
    rational collaborative lifecycle management (9) · rational doors next generation (9) · rational engineering lifecycle manager (9)
  • Mobile Apps161 CVE
    25 crit7 vendorsCVSS 9.8
    android (92) · dp300 firmware (30) · te60 firmware (22)
  • Security Products149 CVE
    24 crit42 vendorsCVSS 8.4
    identity manager (12) · access manager (8) · securmail (7)
  • Networking Infrastructure131 CVE
    179 crit96 KEV33 vendorsCVSS 9.6
    ios xe (31) · cisco ios xe (18) · ios (17)
  • Web & CMS Plugins124 CVE
    34 crit1 KEV60 vendorsCVSS 9.8
    http server (15) · drupal (8) · apache http server (7)
  • ICS / OT / IoT78 CVE
    205 crit10 KEV26 vendorsCVSS 9.8
    ibp1110-1er firmware (12) · ibp219-1er firmware (12) · ibp319-1er firmware (12)
  • Cloud & SaaS60 CVE
    13 crit23 vendorsCVSS 8.5
    389-ds-base (2) · keycloak (2) · owncloud (2)
  • Consumer Software56 CVE
    4 crit20 vendorsCVSS 7.7
    windows optimization master (21) · calibre (1) · dualdesk (1)
  • Hardware Firmware56 CVE
    118 crit20 vendorsCVSS 9.6
    android (6) · ryzen firmware (6) · ryzen pro firmware (6)
  • Databases54 CVE
    30 crit16 vendorsCVSS 9.8
    isilon onefs (9) · scaleio (3) · rsa authentication agent for web for iis, rsa authentication agent for web for apache web server (2)
  • DevTools & CI40 CVE
    10 crit12 vendorsCVSS 7.6
    gitlab (14) · gitlab community and enterprise editions (13) · mercurial (2)
  • Communications30 CVE
    20 crit2 KEV22 vendorsCVSS 9.2
    st14.2 (10) · connect onsite (8) · pjsip (2)
  • AI / ML3 CVE
    3 vendorsCVSS 7.8
    jubatus (4)
  • Unclassified57 CVE
    15 crit42 vendorsCVSS 7.1
    qqq systems (8) · dsmall (5) · razor (5)
Weakness × Sector

Which weaknesses hit which solution categories in March 2018

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS20Improper Input Validation200Information Exposure119Memory Buffer Bounds125Out-of-bounds Read787Out-of-bounds Write287Improper Authentication352CSRF22Path Traversal476NULL Pointer DereferenceOperating Systems9502743423741628OSS Libraries1915713282336919Enterprise Software5913252235683Networking Infrastructure1527617677544Security Products2627112226722Hardware Firmware51620191197226Web & CMS Plugins46642111710ICS / OT / IoT4153961213115Consumer Software425749161112Databases9234224122