CVE Tools
Sign in
month report

October 2018

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

October 2018 closed with 1,483 published CVEs. 184 criticals, oracle led volume, mostly via mysql. Top weakness class — CWE-79 (199 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,483
— MoM— YoY
Severity mix
184 / 623
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
2.2%
33 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
2701.9
n=33
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
1150
n=2
Detection gap

KEV pressure, no Nuclei coverage

October 2018 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in October 2018

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write20Improper Input Validation125Out-of-bounds Read119Memory Buffer Bounds416Use After Free200Information Exposure89SQL Injection22Path Traversal287Improper Authenticationoracle1111oracle corporation1oracle corp.111cisco12438125142adobe5324238debian2585104623canonical125511681сообщество свободного программного обеспечения147365622ооо «русбитех-астра»1254104712cisco systems inc.42242414redhat135276522ibm307133

Most discussed CVEs — October 2018

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1oracle—
    198 CVE10 critCVSS 6.6
    Nuclei 5PoC 9
    mysql (35) · mysql server (33) · peoplesoft enterprise peopletools (23)
  • 2cisco—
    131 CVE9 critCVSS 7.3
    PoC 20
    ios xe (19) · webex meetings online (19) · webex meetings server (17)
  • 3canonical—
    104 CVE15 critCVSS 7.0
    Nuclei 1PoC 23
    ubuntu linux (100) · ubuntu (59) · linux kernel, as used in ubuntu 18.04 lts and ubuntu 18.10 (1)
  • 4adobe—
    102 CVE4 critCVSS 7.0
    adobe acrobat and reader (86) · acrobat dc (86) · acrobat reader dc (86)
  • 5debian—
    101 CVE12 critCVSS 7.0
    Nuclei 3PoC 23
    debian linux (100) · crossroads (1)
  • 6сообщество свободного программного обеспечения—
    84 CVE10 critCVSS 7.1
    Nuclei 2PoC 26
    debian gnu/linux (76) · linux (9) · systemd (3)
  • 7redhat—
    78 CVE12 critCVSS 7.4
    Nuclei 2PoC 21
    enterprise linux server (53) · enterprise linux workstation (48) · enterprise linux desktop (48)
  • 8ооо «русбитех-астра»—
    77 CVE13 critCVSS 7.1
    PoC 22
    astra linux special edition (65) · astra linux special edition для «эльбрус» (28) · astra linux common edition (15)
  • 9ibm—
    63 CVE2 critCVSS 5.8
    rational quality manager (17) · security key lifecycle manager (10) · websphere application server (7)
  • 10qualcomm, inc.—
    62 CVECVSS 7.5
    NEW
    snapdragon mobile (28) · snapdragon automobile, snapdragon mobile, snapdragon wear (15) · snapdragon mobile, snapdragon wear (13)
  • 11qualcomm—
    61 CVECVSS 7.6
    NEW
    sd 845 firmware (42) · sd 835 firmware (42) · sda660 firmware (37)
  • 12microsoft—
    52 CVE1 critCVSS 6.8
    KEV 1PoC 9
    windows 10 (22) · windows 10 servers (21) · windows server 2016 (21)
  • 13novell inc.—
    44 CVE8 critCVSS 7.4
    NEWNuclei 1PoC 6
    opensuse leap (39) · suse linux enterprise software development kit (8) · suse linux enterprise server (7)
  • 14foxitsoftware—
    41 CVECVSS 8.3
    PoC 7
    reader (40) · phantompdf (38) · foxit reader (10)
  • 15netapp—
    41 CVE2 critCVSS 5.8
    NEWNuclei 1PoC 6
    snapcenter (33) · oncommand workflow automation (32) · oncommand insight (31)
  • 16mozilla—
    32 CVE9 critCVSS 8.1
    NEWPoC 1
    firefox (29) · firefox esr (23) · thunderbird (22)
  • 17ао «ивк»—
    28 CVE5 critCVSS 7.7
    NEWPoC 1
    альт линукс спт (26) · альт 8 сп рабочая станция (20) · альт 8 сп сервер (10)
  • 18google—
    27 CVE2 critCVSS 7.2
    PoC 2
    android (27)
  • 19google inc.—
    25 CVE1 critCVSS 7.2
    NEWPoC 2
    android (25)
  • 20juniper—
    21 CVE1 critCVSS 7.0
    NEWPoC 21
    junos (18) · junos space (2) · netscreen screenos (1)
  • 21juniper networks—
    21 CVE1 critCVSS 7.3
    NEWPoC 21
    junos os (18) · junos (10) · junos space (1)
  • 22maven—
    21 CVE9 critCVSS 8.2
    Nuclei 4PoC 3
    io.vertx:vertx-core (2) · io.spray:spray-json_2.10 (2) · io.spray:spray-json_2.11 (2)
  • 23ао «нтц ит роса»—
    20 CVE1 critCVSS 6.8
    NEWPoC 1
    роса хром (11) · роса кобальт (8) · rosa virtualization 3.0 (1)
  • 24f5—
    18 CVECVSS 6.4
    big-ip access policy manager (16) · big-ip advanced firewall manager (15) · big-ip policy enforcement manager (13)
  • 25f5 networks, inc.—
    18 CVECVSS 6.3
    NEW
    big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator) (8) · big-ip (apm) (3) · big-ip afm (2)
  • 26ао «концерн вниинс»—
    17 CVE2 critCVSS 7.3
    NEWNuclei 2PoC 5
    ос он «стрелец» (17)
  • 27foxit software—
    15 CVECVSS 8.5
    NEWPoC 7
    foxit pdf reader (15)
  • 28packagist—
    14 CVE3 critCVSS 6.9
    PoC 8
    mediawiki/core (4) · topthink/framework (3) · mantisbt/mantisbt (2)
  • 29pypi—
    14 CVE2 critCVSS 7.2
    PoC 2
    salt (2) · pyopenssl (2) · django (1)
  • 30hp—
    13 CVE2 critCVSS 7.7
    xp7 command view (7) · 320-15ikbra firmware (1) · 320-15ikbrn firmware (1)
  • 31ао "нппкт"—
    13 CVE1 critCVSS 5.9
    NEWPoC 7
    осон основа оnyx (13)
  • 32mariadb—
    12 CVECVSS 5.5
    mariadb (12)
  • 33opensuse—
    12 CVECVSS 5.4
    PoC 3
    leap (8) · open build service (5) · tar scm (1)
  • 34advantech—
    11 CVE2 critCVSS 7.6
    NEWPoC 4
    webaccess (11) · advantech webaccess (9)
  • 35dlink—
    11 CVE5 critCVSS 8.6
    NEWNuclei 3PoC 5
    central wifimanager (4) · central wifi manager (4) · dwr-116 firmware (3)
  • 36gnu—
    11 CVE1 critCVSS 6.4
    PoC 6
    binutils (9) · gettext (1) · gnulib (1)
  • 37linux—
    11 CVECVSS 5.9
    PoC 4
    linux kernel (11)
  • 38nuget—
    11 CVE1 critCVSS 7.3
    microsoft.chakracore (6) · microsoft.aspnetcore.all (2) · microsoft.aspnetcore.server.kestrel.core (2)
  • 39sem-cms—
    11 CVECVSS 5.3
    NEWPoC 2
    semcms (11)
  • 40tenda—
    11 CVE3 critCVSS 8.0
    NEWKEV 1PoC 4
    ac9 firmware (11) · ac10 firmware (10) · ac15 firmware (10)
  • 41[unknown]—
    11 CVE2 critCVSS 7.4
    NEWPoC 1
    ansible (1) · ceph-iscsi-cli (1) · cfme (1)
  • 42apache—
    10 CVE1 critCVSS 6.9
    Nuclei 3PoC 2
    impala (2) · tika (1) · tomcat (1)
  • 43apache software foundation—
    10 CVE1 critCVSS 6.6
    Nuclei 3PoC 2
    apache impala (2) · apache pony mail (1) · apache activemq (1)
  • 44sv3c—
    10 CVE5 critCVSS 8.3
    NEWNuclei 1PoC 6
    h.264 poe ip camera firmware (10)
  • 45gnu general public license—
    9 CVECVSS 5.8
    NEWPoC 5
    gnu binutils (9)
  • 46intel—
    9 CVECVSS 7.0
    intel graphics driver (3) · graphics driver (3) · intel raid web server 3 (1)
  • 47npm—
    9 CVE3 critCVSS 8.6
    NEWNuclei 1PoC 2
    apex-publish-static-files (1) · blueimp-file-upload (1) · libnmap (1)
  • 48sap—
    9 CVECVSS 6.6
    businessobjects bi platform (2) · adaptive server enterprise (2) · sap adaptive server enterprise (ase) (2)
  • 49siemens—
    9 CVECVSS 7.0
    PoC 2
    simatic s7-1500 cpu 1518(f)-4 pn/dp mfp (5) · rox ii firmware (2) · rox ii (2)
  • 50zzcms—
    9 CVE6 critCVSS 8.9
    NEWPoC 3
    zzcms (9)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79199—
2CWE-78792—
3CWE-2091—
4CWE-12586—
5CWE-11970—
6CWE-41661—
7CWE-20058—
8CWE-8942—
9CWE-2240—
10CWE-28738—
11CWE-35237—
12CWE-47628—
13CWE-19026—
14CWE-73225—
15CWE-7824—
16CWE-40022—
17CWE-52220—
18CWE-26915—
19CWE-26414—
20CWE-43414—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems328 CVE
    185 crit39 KEV36 vendorsCVSS 8.2
    debian linux (100) · ubuntu linux (100) · debian gnu/linux (76)
  • Networking Infrastructure214 CVE
    106 crit3 KEV22 vendorsCVSS 8.8
    webex meetings online (32) · webex meetings server (31) · junos (28)
  • Consumer Software208 CVE
    56 crit22 vendorsCVSS 8.1
    acrobat dc (86) · acrobat reader dc (86) · adobe acrobat and reader (86)
  • Databases207 CVE
    33 crit8 vendorsCVSS 6.6
    mysql (65) · outside in technology (63) · peoplesoft enterprise peopletools (45)
  • Enterprise Software199 CVE
    23 crit40 vendorsCVSS 8.1
    snapcenter (33) · oncommand workflow automation (32) · oncommand insight (31)
  • OSS Libraries168 CVE
    40 crit61 vendorsCVSS 8.6
    imagemagick (10) · binutils (9) · gnu binutils (9)
  • Web & CMS Plugins164 CVE
    37 crit80 vendorsCVSS 8.2
    semcms (11) · zzcms (9) · yunucms (7)
  • Hardware Firmware106 CVE
    1 crit22 vendorsCVSS 7.6
    sd 835 firmware (42) · sd 845 firmware (42) · sda660 firmware (37)
  • ICS / OT / IoT91 CVE
    72 crit31 vendorsCVSS 8.4
    webaccess (11) · advantech webaccess (9) · laquis scada (6)
  • Security Products66 CVE
    5 crit32 vendorsCVSS 7.6
    big-ip access policy manager (16) · big-ip advanced firewall manager (15) · big-ip application acceleration manager (13)
  • Cloud & SaaS62 CVE
    15 crit21 vendorsCVSS 7.7
    netscaler sd-wan (5) · sd-wan (5) · starwind virtual san (5)
  • Mobile Apps32 CVE
    4 crit4 vendorsCVSS 6.9
    android (52) · alp-al00b firmware (1) · alp-al00b-rsc firmware (1)
  • DevTools & CI16 CVE
    7 crit11 vendorsCVSS 8.2
    gitlab (4) · git (2) · gitea (1)
  • Communications13 CVE
    6 crit11 vendorsCVSS 7.4
    440hd firmware (1) · 450hd firmware (1) · avaya aura system platform (1)
  • Unclassified68 CVE
    21 crit34 vendorsCVSS 7.6
    h.264 poe ip camera firmware (10) · dir-823g firmware (4) · saga1-l8b (3)
Weakness × Sector

Which weaknesses hit which solution categories in October 2018

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write20Improper Input Validation125Out-of-bounds Read119Memory Buffer Bounds416Use After Free200Information Exposure89SQL Injection22Path Traversal287Improper AuthenticationOperating Systems6211718181014256Networking Infrastructure245551118379Consumer Software347847135333Enterprise Software61319553OSS Libraries1219419936464Web & CMS Plugins75211524132Databases21113113Hardware Firmware9494281813ICS / OT / IoT912267645Security Products43411445