CVE Tools
Sign in
month report

July 2018

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

July 2018 closed with 2,225 published CVEs. 258 criticals, oracle led volume, mostly via mysql server. Top weakness class — CWE-190 (478 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
2,225
— MoM— YoY
Severity mix
258 / 1,207
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.9%
19 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
2790.0
n=19
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
1414
n=5
Detection gap

KEV pressure, no Nuclei coverage

July 2018 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in July 2018

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

190Integer Overflow79XSS125Out-of-bounds Read787Out-of-bounds Write20Improper Input Validation200Information Exposure119Memory Buffer Bounds416Use After Free704CWE-704843Type Confusionoracle12oracle corporationadobe1763825277redhat36913226712debian92151613755ibm54120foxitsoftware141231294645canonical517155233foxit141231274645сообщество свободного программного обеспечения61014837oracle corp.ооо «русбитех-астра»31869334

Most discussed CVEs — July 2018

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1oracle—
    219 CVE8 critCVSS 6.6
    Nuclei 4PoC 4
    mysql server (24) · mysql (24) · outside in technology (14)
  • 2adobe—
    168 CVE40 critCVSS 8.2
    KEV 2
    acrobat dc (156) · acrobat reader dc (156) · adobe acrobat 2017 (17)
  • 3redhat—
    140 CVE7 critCVSS 6.6
    KEV 1PoC 11
    enterprise linux workstation (63) · enterprise linux desktop (63) · enterprise linux server (62)
  • 4debian—
    127 CVE21 critCVSS 6.9
    KEV 1Nuclei 1PoC 23
    debian linux (126) · devscripts (1)
  • 5ibm—
    95 CVE1 critCVSS 5.3
    PoC 3
    rational quality manager (48) · rational collaborative lifecycle management (40) · rational rhapsody design manager (10)
  • 6canonical—
    93 CVE18 critCVSS 6.9
    PoC 21
    ubuntu linux (82) · ubuntu (34)
  • 7foxitsoftware—
    84 CVE1 critCVSS 8.7
    foxit reader (84) · phantompdf (84) · foxit phantompdf (1)
  • 8сообщество свободного программного обеспечения—
    82 CVE18 critCVSS 6.9
    KEV 1Nuclei 2PoC 15
    debian gnu/linux (68) · linux (29) · libgit2 (2)
  • 9ооо «русбитех-астра»—
    65 CVE21 critCVSS 7.6
    Nuclei 1PoC 9
    astra linux special edition (46) · astra linux common edition (22) · astra linux special edition для «эльбрус» (8)
  • 10qualcomm, inc.—
    59 CVE6 critCVSS 7.7
    NEW
    android for msm, firefox os for msm, qrd android (43) · snapdragon automobile, snapdragon mobile, snapdragon wear (9) · snapdragon mobile, snapdragon wear (5)
  • 11microsoft—
    56 CVE3 critCVSS 6.9
    KEV 1PoC 5
    edge (19) · microsoft edge (19) · chakracore (12)
  • 12maven—
    55 CVE4 critCVSS 6.8
    Nuclei 3PoC 9
    org.jenkins-ci.main:jenkins-core (7) · io.undertow:undertow-core (3) · org.keycloak:keycloak-core (3)
  • 13[unknown]—
    54 CVE2 critCVSS 6.2
    NEWPoC 5
    kernel (8) · ansible (4) · kernel: (3)
  • 14google—
    46 CVE4 critCVSS 7.5
    android (44) · android studio (2)
  • 15linux—
    43 CVECVSS 5.9
    PoC 12
    linux kernel (41) · kernel (3) · kernel: (1)
  • 16cisco—
    37 CVE8 critCVSS 8.0
    vedge-100 firmware (10) · vbond orchestrator (10) · vedge-1000 firmware (10)
  • 17netapp—
    37 CVE2 critCVSS 5.9
    Nuclei 1
    oncommand insight (32) · oncommand workflow automation (32) · snapcenter (25)
  • 18npm—
    31 CVE10 critCVSS 7.6
    PoC 10
    bootstrap (3) · angular-redactor (1) · bootstrap-sass (1)
  • 19schneider-electric—
    25 CVE4 critCVSS 8.7
    Nuclei 1PoC 1
    u.motion builder (16) · ibp519-1er firmware (3) · ibps110-1er firmware (3)
  • 20schneider electric se—
    24 CVE4 critCVSS 7.9
    NEWNuclei 1PoC 1
    u.motion (14) · u.motion builder (4) · pelco sarix professional v1 (3)
  • 21apache—
    21 CVE5 critCVSS 7.5
    Nuclei 2
    http server (2) · kafka (2) · spark (2)
  • 22apache software foundation—
    21 CVE5 critCVSS 7.5
    Nuclei 2
    apache kafka (2) · apache tomcat native (2) · http server (2)
  • 23nuget—
    21 CVECVSS 6.6
    KEV 1Nuclei 1PoC 9
    microsoft.chakracore (10) · bootstrap.sass (3) · bootstrap (3)
  • 24pypi—
    20 CVE3 critCVSS 7.5
    PoC 1
    ansible (7) · mercurial (3) · aubio (3)
  • 25packagist—
    19 CVE7 critCVSS 7.6
    KEV 1Nuclei 1PoC 8
    dolibarr/dolibarr (4) · twbs/bootstrap (3) · moodle/moodle (3)
  • 26juniper networks—
    18 CVE3 critCVSS 6.8
    PoC 14
    junos os (11) · contrail service orchestration (3) · junos space (2)
  • 27f5—
    17 CVECVSS 6.9
    PoC 2
    big-ip access policy manager (12) · big-ip application security manager (11) · big-ip local traffic manager (10)
  • 28axiosys—
    16 CVE3 critCVSS 7.9
    NEWPoC 2
    bento4 (16)
  • 29f5 networks, inc.—
    16 CVECVSS 6.4
    NEWPoC 1
    big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator) (6) · big-ip (apm) (2) · big-ip (asm) (2)
  • 30hdfgroup—
    16 CVE10 critCVSS 9.4
    NEWPoC 16
    hdf5 (16)
  • 31intel—
    16 CVECVSS 6.0
    active management technology firmware (3) · core i3 (3) · core i7 (3)
  • 32jenkins—
    16 CVECVSS 6.6
    NEWNuclei 2PoC 1
    jenkins (7) · aws codedeploy (2) · jenkins-ssh-slaves-plugin (1)
  • 33juniper—
    16 CVE5 critCVSS 7.3
    PoC 14
    junos (11) · contrail service orchestration (5)
  • 34qualcomm—
    16 CVE4 critCVSS 8.3
    NEW
    sd 210 firmware (15) · sd 205 firmware (15) · sd 625 firmware (15)
  • 35michael elkins—
    15 CVE13 critCVSS 9.4
    NEW
    neomutt (15) · mutt (12)
  • 36neomutt—
    15 CVE13 critCVSS 9.3
    NEW
    neomutt (15)
  • 37ffmpeg—
    14 CVE1 critCVSS 7.3
    NEW
    ffmpeg (14)
  • 38siemens—
    13 CVE2 critCVSS 7.5
    PoC 3
    siclock tc400 firmware (6) · siclock tc100 firmware (6) · siclock tc100, siclock tc400 (6)
  • 39mutt—
    12 CVE11 critCVSS 9.4
    NEW
    mutt (12)
  • 40sap—
    12 CVE1 critCVSS 6.5
    businessobjects business intelligence (3) · sap internet graphics server (igs) (3) · internet graphics server (3)
  • 41ffmpeg team—
    11 CVE1 critCVSS 7.2
    NEW
    ffmpeg (11)
  • 42huawei—
    11 CVECVSS 5.6
    rp200 firmware (2) · dp300 firmware (2) · emily-al00a firmware (2)
  • 43huawei technologies co., ltd.—
    11 CVECVSS 5.6
    NEW
    emily-al00a (2) · dp300; rp200; te30; te40; te50; te60 (1) · mate 9 pro (1)
  • 44linuxsampler—
    11 CVECVSS 8.8
    NEWPoC 11
    libgig (11)
  • 45opensuse—
    11 CVE2 critCVSS 7.6
    PoC 3
    leap (11)
  • 46wireshark—
    11 CVECVSS 7.5
    PoC 2
    wireshark (11)
  • 47ао «нтц ит роса»—
    11 CVE4 critCVSS 6.7
    PoC 1
    роса хром (7) · роса кобальт (3) · rosa virtualization 3.0 (1)
  • 48atlassian—
    10 CVE1 critCVSS 6.2
    NEWPoC 1
    jira (3) · jira server (3) · sourcetree (2)
  • 49dialogic—
    10 CVE3 critCVSS 8.5
    NEWPoC 3
    powermedia xms (10)
  • 50rubygems—
    10 CVECVSS 6.5
    PoC 7
    bootstrap (3) · bootstrap-sass (2) · nokogiri (1)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-190478—
2CWE-79173—
3CWE-125163—
4CWE-787117—
5CWE-20112—
6CWE-20084—
7CWE-11976—
8CWE-41676—
9CWE-70455—
10CWE-84348—
11CWE-2244—
12CWE-8937—
13CWE-35234—
14CWE-47634—
15CWE-28729—
16CWE-73222—
17CWE-29519—
18CWE-7819—
19CWE-30618—
20CWE-40016—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems411 CVE
    174 crit9 KEV42 vendorsCVSS 7.6
    debian linux (126) · ubuntu linux (82) · debian gnu/linux (68)
  • OSS Libraries345 CVE
    49 crit3 KEV98 vendorsCVSS 7.6
    ffmpeg (25) · bento4 (16) · curl (12)
  • Consumer Software304 CVE
    118 crit11 KEV33 vendorsCVSS 8.4
    foxit reader (164) · acrobat dc (156) · acrobat reader dc (156)
  • Databases246 CVE
    52 crit9 vendorsCVSS 9.2
    outside in technology (42) · mysql server (38) · mysql (25)
  • Enterprise Software245 CVE
    50 crit2 KEV50 vendorsCVSS 9.8
    rational quality manager (48) · rational collaborative lifecycle management (40) · oncommand insight (32)
  • Web & CMS Plugins122 CVE
    32 crit2 KEV72 vendorsCVSS 8.2
    generator (5) · http server (4) · joyplus-cms (4)
  • Networking Infrastructure113 CVE
    68 crit30 vendorsCVSS 9.8
    junos (12) · junos os (11) · vbond orchestrator (10)
  • Security Products91 CVE
    17 crit39 vendorsCVSS 7.8
    big-ip access policy manager (12) · big-ip application security manager (11) · big-ip global traffic manager (10)
  • ICS / OT / IoT82 CVE
    97 crit32 vendorsCVSS 9.4
    u.motion builder (22) · u.motion (16) · 762-3000 firmware (3)
  • Hardware Firmware82 CVE
    81 crit27 vendorsCVSS 8.3
    sd 205 firmware (15) · sd 210 firmware (15) · sd 212 firmware (15)
  • Mobile Apps77 CVE
    7 crit10 vendorsCVSS 9.8
    android (44) · bravo mobile application (4) · nut mobile (3)
  • Cloud & SaaS64 CVE
    2 crit31 vendorsCVSS 7.3
    esxi (4) · fusion (4) · workstation (4)
  • DevTools & CI49 CVE
    4 crit20 vendorsCVSS 9.8
    jenkins (7) · aws codedeploy (2) · active directory (1)
  • Communications43 CVE
    59 crit18 vendorsCVSS 9.3
    neomutt (30) · mutt (24) · open-xchange appsuite (2)
  • AI / ML2 CVE
    2 vendorsCVSS 7.5
    ablgenesistoken (1)
  • Unclassified337 CVE
    39 crit255 vendorsCVSS 7.5
    kernel (8) · - (7) · standard (7)
Weakness × Sector

Which weaknesses hit which solution categories in July 2018

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

190Integer Overflow79XSS125Out-of-bounds Read787Out-of-bounds Write20Improper Input Validation200Information Exposure119Memory Buffer Bounds416Use After Free704CWE-704843Type ConfusionOSS Libraries9221363224122242Operating Systems171344333714231623Consumer Software315826361410585547Enterprise Software879611221Hardware Firmware61173851711Web & CMS Plugins582611561Databases14114331Networking Infrastructure311322546ICS / OT / IoT4613873Security Products1313479