CVE Tools
Sign in
month report

December 2018

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

December 2018 closed with 1,212 published CVEs. 175 criticals, ооо «русбитех-астра» led volume, mostly via astra linux special edition. Top weakness class — CWE-79 (207 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,212
— MoM— YoY
Severity mix
175 / 434
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
3.5%
43 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
2641.2
n=43
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
1339
n=10
Detection gap

KEV pressure, no Nuclei coverage

December 2018 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in December 2018

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write200Information Exposure20Improper Input Validation119Memory Buffer Bounds125Out-of-bounds Read522Insufficiently Protected Crede…476NULL Pointer Dereference611XXE22Path Traversalооо «русбитех-астра»12724151016сообщество свободного программного обеспечения22139161016debian62361477811google1334114611redhat18483431canonical110129108ibm1212414canonical ltd.1622536google inc1852microsoft3912microsoft corp3912novell inc.13144211

Most discussed CVEs — December 2018

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1ооо «русбитех-астра»—
    133 CVE11 critCVSS 7.1
    NEWKEV 1PoC 26
    astra linux special edition (126) · astra linux special edition для «эльбрус» (62) · astra linux common edition (13)
  • 2сообщество свободного программного обеспечения—
    130 CVE13 critCVSS 7.2
    NEWKEV 2Nuclei 1PoC 29
    debian gnu/linux (111) · freeware advanced audio decoder 2 (12) · libvnc (9)
  • 3debian—
    127 CVE14 critCVSS 7.4
    NEWKEV 1Nuclei 7PoC 18
    debian linux (127)
  • 4google—
    104 CVE5 critCVSS 7.5
    NEWKEV 1PoC 6
    chrome (49) · android (48) · google chrome (28)
  • 5redhat—
    85 CVE9 critCVSS 7.7
    NEWKEV 2Nuclei 2PoC 12
    enterprise linux workstation (33) · enterprise linux server (33) · enterprise linux desktop (32)
  • 6canonical—
    77 CVE9 critCVSS 7.4
    NEWPoC 15
    ubuntu linux (71) · ubuntu (49)
  • 7ibm—
    65 CVECVSS 5.6
    NEWPoC 1
    security access manager appliance (10) · security access manager (10) · security guardium (8)
  • 8microsoft—
    40 CVE2 critCVSS 6.9
    NEWKEV 3PoC 4
    windows server 2019 (server core installation) (14) · windows 10 (14) · windows server 2019 (14)
  • 9novell inc.—
    39 CVECVSS 7.1
    NEWKEV 1PoC 6
    opensuse leap (37) · suse linux enterprise module for basesystem (5) · suse linux enterprise desktop (3)
  • 10maven—
    34 CVE9 critCVSS 7.8
    NEWKEV 1Nuclei 1PoC 6
    org.jenkins-ci.main:jenkins-core (4) · org.apache.nifi:nifi (3) · org.hswebframework.web:hsweb-commons (2)
  • 11ао «концерн вниинс»—
    33 CVE2 critCVSS 7.2
    NEWPoC 10
    ос он «стрелец» (33)
  • 12google inc.—
    32 CVE2 critCVSS 7.6
    NEW
    android (32)
  • 13opensuse—
    32 CVE1 critCVSS 7.3
    NEWPoC 5
    leap (29) · libsolv (3) · backports sle (2)
  • 14fedoraproject—
    29 CVE2 critCVSS 7.0
    NEWPoC 11
    fedora (28) · sssd (1)
  • 15infovista—
    26 CVECVSS 6.1
    NEWPoC 26
    vistaportal (26)
  • 16siemens—
    25 CVE4 critCVSS 7.8
    NEWPoC 1
    sinumerik 828d v4.7 firmware (9) · sinumerik 840d sl v4.8 firmware (9) · sinumerik 840d sl v4.7 firmware (9)
  • 17libraw—
    21 CVECVSS 7.4
    NEWPoC 4
    libraw (21)
  • 18ао "нппкт"—
    21 CVE1 critCVSS 6.8
    NEWPoC 4
    осон основа оnyx (21)
  • 19libraw llc—
    19 CVECVSS 7.3
    NEWPoC 4
    libraw (19)
  • 20packagist—
    19 CVECVSS 6.2
    NEWPoC 14
    phpmyadmin/phpmyadmin (3) · craftcms/cms (2) · evolutioncms/evolution (2)
  • 21audiocoding—
    18 CVECVSS 5.9
    NEWPoC 6
    freeware advanced audio decoder 2 (12) · freeware advanced audio coder (6)
  • 22qualcomm, inc.—
    16 CVE2 critCVSS 8.0
    NEW
    android for msm, firefox os for msm, qrd android (15) · snapdragon mobile, snapdragon wear (1)
  • 23asustor—
    15 CVE1 critCVSS 7.6
    NEWPoC 10
    data master (15)
  • 24drobo—
    14 CVE6 critCVSS 8.2
    NEWPoC 7
    5n2 firmware (14)
  • 25facebook—
    14 CVE4 critCVSS 8.0
    NEWPoC 1
    hhvm (5) · proxygen (3) · whatsapp for windows phone (1)
  • 26amazon—
    13 CVECVSS 6.8
    NEWPoC 5
    amazon web services freertos (13) · freertos (11)
  • 27schneider-electric—
    13 CVE2 critCVSS 7.6
    NEWPoC 2
    modicom premium firmware (3) · evlink parking firmware (3) · modicom quantum firmware (3)
  • 28schneider electric se—
    13 CVE2 critCVSS 7.9
    NEWPoC 2
    iiot monitor 3.1.38 (3) · evlink parking v3.2.0-12_v1 and earlier (3) · embedded web servers in all modicon m340, premium, quantum plcs and bmxnor0200 (3)
  • 29dlink—
    12 CVE8 critCVSS 8.8
    NEWPoC 1
    dcs-825l (3) · dcm-704 (2) · dir-605l (2)
  • 30douco—
    12 CVECVSS 5.2
    NEWPoC 5
    douphp (12)
  • 31gitlab—
    12 CVE2 critCVSS 7.1
    NEWPoC 2
    gitlab (12)
  • 32gnu—
    12 CVECVSS 6.5
    NEWPoC 3
    binutils (5) · libextractor (2) · gnutls (1)
  • 33schneider electric—
    12 CVE2 critCVSS 7.3
    NEWPoC 2
    iiot monitor (3) · modicon bmxnor0200 (3) · modicon premium (3)
  • 34fabrice bellard—
    11 CVECVSS 6.2
    NEW
    qemu (11)
  • 35fedora project—
    11 CVECVSS 6.6
    NEWPoC 2
    fedora (11)
  • 36hewlett packard enterprise—
    11 CVE2 critCVSS 7.4
    NEW
    aruba clearpass policy manager (5) · hpe intelligent management center (imc) (3) · hpe integrated lights-out 5 (ilo 5) for hpe gen10 servers (1)
  • 37mcafee—
    11 CVE2 critCVSS 7.3
    NEWPoC 3
    agent (5) · mcafee agent (ma) for linux (3) · true key (3)
  • 38netapp—
    11 CVE5 critCVSS 8.4
    NEWPoC 1
    e-series santricity os controller (4) · snapcenter (4) · snap creator framework (4)
  • 39qemu—
    11 CVECVSS 6.2
    NEW
    qemu (11)
  • 40technicolor—
    11 CVE10 critCVSS 9.6
    NEWPoC 3
    dpc3928sl firmware (3) · tc7110.ar firmware (2) · cga0111 firmware (2)
  • 41f5—
    10 CVECVSS 6.9
    NEW
    big-ip access policy manager (7) · big-ip application acceleration manager (5) · big-ip local traffic manager (5)
  • 42kibokolabs—
    10 CVECVSS 5.0
    NEWNuclei 10PoC 10
    arigato autoresponder and newsletter (10)
  • 43kiboko labs https://calendarscripts.info/—
    10 CVECVSS 5.0
    NEWNuclei 10PoC 10
    arigato autoresponder and newsletter (10)
  • 44[unknown]—
    10 CVECVSS 6.5
    NEW
    golang (3) · qemu: (2) · sssd (1)
  • 45ао «нтц ит роса»—
    10 CVECVSS 8.1
    NEWPoC 4
    роса кобальт (5) · rosa virtualization 3.0 (3) · rosa virtualization (2)
  • 46libvnc project—
    9 CVE4 critCVSS 8.6
    NEW
    libvncserver (9)
  • 47mcafee inc.—
    9 CVE1 critCVSS 7.5
    NEWPoC 3
    mcafee true key windows client (3) · mcafee agent for linux (2) · mcafee agent (2)
  • 48radare—
    9 CVECVSS 5.5
    NEWPoC 2
    radare2 (9)
  • 49sap—
    9 CVECVSS 6.1
    NEW
    netweaver application server java (3) · sap netweaver (3) · sap netweaver as java (servercore) (2)
  • 50apache—
    8 CVE1 critCVSS 7.2
    NEWNuclei 1
    nifi (4) · netbeans (1) · ofbiz (1)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79207—
2CWE-78792—
3CWE-20077—
4CWE-2067—
5CWE-11959—
6CWE-12542—
7CWE-52235—
8CWE-47634—
9CWE-61134—
10CWE-2232—
11CWE-41632—
12CWE-8931—
13CWE-35229—
14CWE-19026—
15CWE-7826—
16CWE-40018—
17CWE-73217—
18CWE-83514—
19CWE-26913—
20CWE-28713—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems335 CVE
    137 crit91 KEV38 vendorsCVSS 8.3
    debian linux (127) · astra linux special edition (126) · debian gnu/linux (111)
  • OSS Libraries235 CVE
    26 crit1 KEV74 vendorsCVSS 8.2
    libraw (40) · qt (11) · libsass (7)
  • Enterprise Software208 CVE
    57 crit42 vendorsCVSS 8.0
    vistaportal (26) · security access manager (10) · security access manager appliance (10)
  • Web & CMS Plugins143 CVE
    16 crit1 KEV67 vendorsCVSS 7.0
    douphp (12) · imcat (7) · wordpress (7)
  • Mobile Apps116 CVE
    12 crit2 KEV7 vendorsCVSS 9.4
    android (60) · chrome (49) · google chrome (28)
  • Cloud & SaaS87 CVE
    5 crit21 vendorsCVSS 7.4
    qemu (11) · xen (7) · xenserver (3)
  • Hardware Firmware81 CVE
    58 crit16 KEV23 vendorsCVSS 9.8
    data master (15) · 5n2 firmware (14) · q'center virtual appliance (2)
  • Networking Infrastructure80 CVE
    57 crit32 vendorsCVSS 8.4
    arv7519rw22 livebox 2.1 firmware (4) · dcs-825l (3) · netgate pfsense (3)
  • Security Products60 CVE
    11 crit35 vendorsCVSS 7.5
    agent (5) · mcafee agent (3) · mcafee agent (ma) for linux (3)
  • ICS / OT / IoT56 CVE
    36 crit30 vendorsCVSS 9.4
    cx-one (4) · iiot monitor (4) · embedded web servers in all modicon m340, premium, quantum plcs and bmxnor0200 (3)
  • Consumer Software45 CVE
    11 crit16 KEV21 vendorsCVSS 8.8
    freeware advanced audio decoder 2 (12) · freeware advanced audio coder (6) · kmplayer (2)
  • DevTools & CI40 CVE
    5 crit2 KEV12 vendorsCVSS 8.0
    radare2 (9) · netwide assembler (3) · tinycc (3)
  • Communications29 CVE
    9 crit8 vendorsCVSS 10.0
    libvncserver (9) · hhvm (5) · proxygen (3)
  • Databases27 CVE
    4 crit12 vendorsCVSS 8.4
    sqlite (3) · clusterware (2) · database server (2)
  • AI / ML4 CVE
    2 vendorsCVSS 8.0
    libxsmm (3) · osquery (1)
  • Unclassified70 CVE
    23 crit36 vendorsCVSS 7.5
    domainmod (8) · v2i hub (8) · dcs-825l firmware (3)
Weakness × Sector

Which weaknesses hit which solution categories in December 2018

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write200Information Exposure20Improper Input Validation119Memory Buffer Bounds125Out-of-bounds Read522Insufficiently Protected Crede…476NULL Pointer Dereference611XXE22Path TraversalOperating Systems1260132120182112OSS Libraries24256191521231311Web & CMS Plugins8811918Enterprise Software60110441153Hardware Firmware115112921714Consumer Software13031213166ICS / OT / IoT4681172425Security Products16311211133Networking Infrastructure945482921Cloud & SaaS1094123