CVE Tools
Sign in
month report

February 2019

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

February 2019 closed with 908 published CVEs. 139 criticals, сообщество свободного программного обеспечения led volume, mostly via debian gnu/linux. Top weakness class — CWE-79 (121 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
908
— MoM— YoY
Severity mix
139 / 361
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
2.3%
21 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
2572.0
n=21
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
1117
n=6
Detection gap

KEV pressure, no Nuclei coverage

February 2019 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in February 2019

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS125Out-of-bounds Read787Out-of-bounds Write119Memory Buffer Bounds20Improper Input Validation22Path Traversal352CSRF200Information Exposure89SQL Injection416Use After Freeсообщество свободного программного обеспечения130211031312ооо «русбитех-астра»1251412619debian12822931311canonical281414117redhat46108422210canonical ltd.1810101113google1101635111fedoraproject1158425novell inc.2044122opensuse199224ао «концерн вниинс»1485121zoneminder2614

Most discussed CVEs — February 2019

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    130 CVE22 critCVSS 8.0
    NEWKEV 1Nuclei 1PoC 30
    debian gnu/linux (119) · sdl (11) · rdesktop (10)
  • 2ооо «русбитех-астра»—
    129 CVE18 critCVSS 7.3
    NEWPoC 20
    astra linux special edition (118) · astra linux special edition для «эльбрус» (34) · astra linux common edition (20)
  • 3debian—
    121 CVE26 critCVSS 8.0
    NEWNuclei 1PoC 28
    debian linux (121) · tmpreaper (1)
  • 4canonical—
    110 CVE23 critCVSS 7.7
    NEWPoC 32
    ubuntu linux (99) · ubuntu (70)
  • 5redhat—
    83 CVE16 critCVSS 7.8
    NEWPoC 12
    enterprise linux server (59) · enterprise linux workstation (59) · enterprise linux desktop (57)
  • 6google—
    68 CVE2 critCVSS 7.6
    NEWPoC 3
    android (38) · google chrome (30) · chrome (30)
  • 7fedoraproject—
    59 CVE3 critCVSS 7.8
    NEWPoC 7
    fedora (59)
  • 8novell inc.—
    50 CVE8 critCVSS 7.9
    NEWPoC 16
    opensuse leap (42) · suse linux enterprise software development kit (20) · suse linux enterprise server (19)
  • 9opensuse—
    48 CVE12 critCVSS 7.9
    NEWPoC 23
    leap (48) · backports sle (5) · package hub (1)
  • 10ао «концерн вниинс»—
    45 CVE4 critCVSS 7.5
    NEWPoC 12
    ос он «стрелец» (45)
  • 11zoneminder—
    35 CVE5 critCVSS 6.7
    NEWPoC 14
    zoneminder (35)
  • 12mozilla—
    34 CVE12 critCVSS 8.4
    NEWPoC 1
    firefox (34) · firefox esr (17) · thunderbird (15)
  • 13cisco—
    31 CVE1 critCVSS 6.7
    NEWNuclei 1PoC 30
    hyperflex hx data platform (5) · cisco hyperflex hx-series (5) · telepresence management suite (2)
  • 14maven—
    31 CVE2 critCVSS 6.7
    NEWPoC 2
    org.jenkins-ci.plugins:job-import-plugin (3) · io.jenkins.blueocean:blueocean (2) · org.jenkins-ci.plugins:script-security (2)
  • 15qualcomm, inc.—
    29 CVE3 critCVSS 7.3
    NEW
    android for msm, firefox os for msm, qrd android (7) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music (4) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile (3)
  • 16netapp—
    28 CVE6 critCVSS 6.8
    NEWPoC 12
    solidfire (9) · hci management node (9) · storage automation store (7)
  • 17ibm—
    27 CVE2 critCVSS 5.9
    NEWNuclei 1PoC 1
    security identity governance and intelligence (7) · bigfix compliance (4) · security identity manager (3)
  • 18android—
    26 CVE1 critCVSS 7.4
    NEWPoC 2
    android (26)
  • 19ао "нппкт"—
    25 CVECVSS 7.8
    NEWPoC 8
    осон основа оnyx (25)
  • 20jenkins—
    24 CVE1 critCVSS 6.6
    NEWPoC 1
    job import (3) · jenkins job import plugin (3) · jenkins script security plugin (2)
  • 21ics-cert—
    22 CVE5 critCVSS 7.5
    NEWPoC 2
    lcds laquis scada (7) · pr100088 modbus gateway (3) · wecon levistudiou (3)
  • 22qualcomm—
    22 CVE3 critCVSS 7.3
    NEW
    sd 820a firmware (21) · mdm9650 firmware (21) · sd 835 firmware (20)
  • 23fedora project—
    20 CVECVSS 7.9
    NEWPoC 5
    fedora (20)
  • 24dlink—
    19 CVE4 critCVSS 8.7
    NEWPoC 5
    dir-878 (10) · dir-878 firmware (8) · dir-823g firmware (5)
  • 25npm—
    19 CVE6 critCVSS 7.6
    NEWNuclei 1PoC 6
    m-server (2) · bootstrap-sass (1) · defaults-deep (1)
  • 26f5—
    15 CVE2 critCVSS 6.9
    NEWPoC 3
    big-ip access policy manager (11) · big-ip local traffic manager (9) · big-ip edge gateway (8)
  • 27hackerone—
    15 CVE4 critCVSS 7.7
    NEWPoC 3
    m-server (2) · express-cart (1) · airmax, edgemax (1)
  • 28intel—
    15 CVE1 critCVSS 6.5
    NEW
    data center manager (11) · intel data center manager sdk (10) · intel unite (1)
  • 29ао «ивк»—
    15 CVE7 critCVSS 8.8
    NEW
    альт 8 сп (10) · альт 8 сп рабочая станция (5) · альт линукс спт (5)
  • 30check point software technologies ltd.—
    14 CVE5 critCVSS 8.2
    NEWKEV 1PoC 2
    rdesktop (10) · winrar (4)
  • 31gnu—
    14 CVE1 critCVSS 6.8
    NEWPoC 4
    binutils (8) · glibc (5) · pspp (1)
  • 32matio project—
    13 CVE6 critCVSS 8.2
    NEWPoC 13
    matio (13)
  • 33packagist—
    12 CVE3 critCVSS 7.6
    NEWKEV 1Nuclei 2PoC 8
    modx/revolution (4) · drupal/drupal (1) · joomla/joomla-cms (1)
  • 34sap—
    12 CVE2 critCVSS 7.2
    NEW
    sap disclosure management (2) · sap abap platform (2) · sap business objects business intelligence (2)
  • 35libsdl—
    11 CVECVSS 8.6
    NEWPoC 3
    simple directmedia layer (11)
  • 36pypi—
    11 CVE1 critCVSS 7.0
    NEWPoC 3
    aioxmpp (2) · sqlalchemy (2) · pyspark (1)
  • 37sap se—
    11 CVE2 critCVSS 6.7
    NEW
    sap disclosure management (2) · abap platform (kernel) (1) · abap platform (krnl64nuc) (1)
  • 38siemens—
    11 CVE5 critCVSS 7.8
    NEWPoC 2
    simatic s7-1500 cpu 1518(f)-4 pn/dp mfp (6) · siship imac (3) · sicam 230 (3)
  • 39lcds—
    10 CVE2 critCVSS 7.5
    NEW
    laquis scada (10) · lcds laquis scada (3)
  • 40nvidia corporation—
    10 CVECVSS 7.6
    NEW
    nvidia gpu graphics driver (7) · android (3)
  • 41oracle—
    10 CVE3 critCVSS 6.6
    NEWPoC 3
    communications operations monitor (5) · secure global desktop (4) · oracle secure global desktop (4)
  • 42rdesktop—
    10 CVE5 critCVSS 8.7
    NEW
    rdesktop (10)
  • 43gnu general public license—
    9 CVE1 critCVSS 6.7
    NEWPoC 3
    gnu binutils (7) · elfutils (1) · gnu c (1)
  • 44f5 networks, inc.—
    8 CVE1 critCVSS 7.1
    NEWPoC 1
    big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator) (4) · big-ip (apm) (2) · big-ip analytics (1)
  • 45linux—
    8 CVE1 critCVSS 7.3
    NEWPoC 2
    linux kernel (8)
  • 46mcafee—
    8 CVE1 critCVSS 6.4
    NEW
    agent (3) · mcafee agent (ma) (2) · web gateway (2)
  • 47apache—
    7 CVECVSS 6.9
    NEWPoC 1
    airflow (1) · guacamole (1) · hadoop (1)
  • 48atlassian—
    7 CVECVSS 5.6
    NEW
    jira server (3) · jira (3) · fisheye and crucible (2)
  • 49frog cms project—
    7 CVECVSS 6.6
    NEWPoC 4
    frog cms (7)
  • 50nvidia—
    7 CVECVSS 7.5
    NEW
    gpu driver (7)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79121—
2CWE-12566—
3CWE-78765—
4CWE-11937—
5CWE-2037—
6CWE-2237—
7CWE-35230—
8CWE-20027—
9CWE-8927—
10CWE-41625—
11CWE-47621—
12CWE-7818—
13CWE-19016—
14CWE-28715—
15CWE-9415—
16CWE-25414—
17CWE-43413—
18CWE-40012—
19CWE-7411—
20CWE-77010—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems285 CVE
    246 crit2 KEV31 vendorsCVSS 9.8
    debian linux (121) · debian gnu/linux (119) · astra linux special edition (118)
  • OSS Libraries213 CVE
    43 crit3 KEV70 vendorsCVSS 8.8
    matio (13) · php (13) · simple directmedia layer (11)
  • Enterprise Software117 CVE
    42 crit5 KEV35 vendorsCVSS 7.5
    hci management node (9) · solidfire (9) · security identity governance and intelligence (7)
  • Web & CMS Plugins106 CVE
    16 crit3 KEV63 vendorsCVSS 9.0
    frog cms (7) · joomla\! (6) · pluck (5)
  • ICS / OT / IoT93 CVE
    63 crit25 vendorsCVSS 9.3
    zoneminder (35) · s14 firmware (4) · smart camera (2)
  • Consumer Software79 CVE
    71 crit2 KEV20 vendorsCVSS 8.5
    firefox (64) · firefox esr (32) · thunderbird (27)
  • Networking Infrastructure78 CVE
    24 crit23 vendorsCVSS 9.8
    dir-878 (10) · dir-878 firmware (8) · cisco hyperflex hx-series (5)
  • Mobile Apps76 CVE
    3 crit8 vendorsCVSS 7.5
    android (39) · chrome (30) · google chrome (30)
  • Security Products75 CVE
    32 crit1 KEV32 vendorsCVSS 8.5
    rdesktop (10) · winrar (4) · agent (3)
  • Hardware Firmware58 CVE
    172 crit13 vendorsCVSS 8.3
    data center manager (11) · intel data center manager sdk (10) · gpu driver (7)
  • DevTools & CI37 CVE
    4 crit12 vendorsCVSS 7.8
    jenkins job import plugin (3) · job import (3) · blue ocean (2)
  • Databases23 CVE
    14 crit7 vendorsCVSS 7.8
    http server (6) · communications operations monitor (5) · oracle communications operations monitor (4)
  • Cloud & SaaS22 CVE
    4 crit22 vendorsCVSS 8.3
    tcpreplay (3) · qemu (2) · automic workload automation (1)
  • Communications15 CVE
    3 crit10 vendorsCVSS 8.7
    mdaemon (2) · enigmail (1) · haraka (1)
  • AI / ML1 CVE
    1 vendorsCVSS 8.6
    runc (1)
  • Unclassified56 CVE
    20 crit38 vendorsCVSS 7.6
    sound exchange (4) · phpmywind (3) · rssh (3)
Weakness × Sector

Which weaknesses hit which solution categories in February 2019

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS125Out-of-bounds Read787Out-of-bounds Write119Memory Buffer Bounds20Improper Input Validation22Path Traversal352CSRF200Information Exposure89SQL Injection416Use After FreeOperating Systems744412112133319OSS Libraries1746228369345Web & CMS Plugins382431114111Consumer Software49201649218ICS / OT / IoT27811233161Hardware Firmware1179102318Networking Infrastructure1427272521Security Products58102131101Enterprise Software17112222DevTools & CI31123731