CVE Tools
Sign in
month report

July 2019

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

July 2019 closed with 1,752 published CVEs. 276 criticals, сообщество свободного программного обеспечения led volume, mostly via debian gnu/linux. Top weakness class — CWE-79 (198 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,752
— MoM— YoY
Severity mix
276 / 670
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
4.9%
85 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
2430.3
n=85
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
983
n=13
Detection gap

KEV pressure, no Nuclei coverage

July 2019 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in July 2019

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write125Out-of-bounds Read20Improper Input Validation352CSRF119Memory Buffer Bounds89SQL Injection200Information Exposure78OS Command Injection22Path Traversalсообщество свободного программного обеспечения539169242132oracle5ооо «русбитех-астра»434171113211oracle corporation1ао «концерн вниинс»5179621121debian22113151121opensuse121101212microsoft corp4125161microsoft4125161oracle corp.41canonical ltd.21271123canonical17523

Most discussed CVEs — July 2019

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    189 CVE44 critCVSS 7.3
    NEWKEV 3Nuclei 1PoC 47
    debian gnu/linux (161) · u-boot (14) · linux (11)
  • 2oracle—
    177 CVE9 critCVSS 6.7
    NEWNuclei 2PoC 8
    mysql server (43) · mysql (42) · vm virtualbox (14)
  • 3ооо «русбитех-астра»—
    169 CVE35 critCVSS 6.9
    NEWKEV 2PoC 30
    astra linux special edition (160) · astra linux special edition для «эльбрус» (45) · astra linux common edition (37)
  • 4ао «концерн вниинс»—
    103 CVE19 critCVSS 7.2
    NEWKEV 3PoC 33
    ос он «стрелец» (103)
  • 5redhat—
    99 CVE12 critCVSS 6.2
    NEWKEV 2PoC 18
    red hat enterprise linux (46) · enterprise linux (45) · enterprise linux eus (44)
  • 6debian—
    97 CVE18 critCVSS 7.3
    NEWKEV 1Nuclei 1PoC 35
    debian linux (97)
  • 7opensuse—
    94 CVE7 critCVSS 6.9
    NEWPoC 21
    leap (94) · backports sle (11) · backports (3)
  • 8canonical—
    92 CVE7 critCVSS 6.6
    NEWKEV 2PoC 29
    ubuntu linux (69) · ubuntu (68)
  • 9microsoft—
    81 CVE3 critCVSS 7.4
    NEWKEV 4PoC 2
    windows server (46) · windows (43) · windows server 2019 (40)
  • 10fedoraproject—
    60 CVE12 critCVSS 6.9
    NEWKEV 1Nuclei 1PoC 18
    fedora (60)
  • 11novell inc.—
    60 CVE8 critCVSS 6.8
    NEWPoC 12
    opensuse leap (53) · suse linux enterprise server (11) · suse linux enterprise desktop (11)
  • 12qualcomm—
    50 CVE12 critCVSS 7.9
    NEW
    sd 670 firmware (50) · sd 712 firmware (50) · sd 710 firmware (50)
  • 13qualcomm, inc.—
    50 CVE12 critCVSS 7.8
    NEW
    snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables (5) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking (4) · snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music (4)
  • 14ibm—
    48 CVE2 critCVSS 6.2
    NEW
    robotic process automation with automation anywhere (7) · db2 (6) · qradar siem (6)
  • 15mozilla—
    48 CVE15 critCVSS 8.0
    NEWKEV 2PoC 3
    firefox (44) · thunderbird (29) · firefox esr (24)
  • 16maven—
    40 CVE6 critCVSS 7.0
    NEWNuclei 1PoC 2
    io.jenkins:configuration-as-code (5) · com.fasterxml.jackson.core:jackson-databind (3) · org.jenkins-ci.plugins.m2release:m2release (3)
  • 17cpanel—
    38 CVE1 critCVSS 5.8
    NEW
    cpanel (38)
  • 18fedora project—
    35 CVE7 critCVSS 6.7
    NEWKEV 1PoC 12
    fedora (35)
  • 19f5—
    30 CVE1 critCVSS 6.8
    NEWPoC 2
    big-ip application security manager (20) · big-ip advanced firewall manager (20) · big-ip policy enforcement manager (19)
  • 20packagist—
    30 CVE3 critCVSS 7.0
    NEWPoC 14
    mediawiki/core (9) · moodle/moodle (4) · dolibarr/dolibarr (4)
  • 21cisco—
    28 CVE1 critCVSS 6.7
    NEWNuclei 1PoC 28
    cisco small business 200 series smart switches (3) · sf200-24p firmware (3) · sf200-48 firmware (3)
  • 22jenkins—
    28 CVECVSS 6.3
    NEWPoC 2
    configuration as code (5) · jenkins configuration as code plugin (5) · jenkins docker plugin (3)
  • 23dlink—
    26 CVE10 critCVSS 8.8
    NEWNuclei 3PoC 17
    dcs-1130 firmware (14) · dcs-1100 firmware (8) · central wifi manager (4)
  • 24ао "нппкт"—
    26 CVE2 critCVSS 7.0
    NEWPoC 10
    осон основа оnyx (26)
  • 25imagemagick—
    24 CVECVSS 7.6
    NEWPoC 14
    imagemagick (24)
  • 26jetbrains—
    21 CVE9 critCVSS 8.2
    NEW
    teamcity (6) · youtrack (5) · intellij idea (5)
  • 27linux—
    21 CVE5 critCVSS 7.4
    NEWKEV 1PoC 8
    linux kernel (21)
  • 28gitlab—
    20 CVECVSS 6.1
    NEWNuclei 1PoC 2
    gitlab (20)
  • 29nortekcontrol—
    20 CVE14 critCVSS 9.3
    NEWKEV 1Nuclei 6PoC 13
    linear emerge elite firmware (14) · linear emerge essential firmware (14) · linear emerge 5000p firmware (6)
  • 30ооо «код безопасности»—
    19 CVECVSS 4.8
    NEW
    secret net studio (16) · vgate (3)
  • 31imagemagick studio llc—
    18 CVECVSS 8.1
    NEWPoC 11
    imagemagick (18)
  • 32npm—
    18 CVE1 critCVSS 6.9
    NEWPoC 6
    lodash (2) · lodash-amd (2) · http-file-server (2)
  • 33pypi—
    17 CVE3 critCVSS 7.5
    NEWNuclei 1PoC 3
    novajoin (1) · python-engineio (1) · python-libnmap (1)
  • 34glyphandcog—
    15 CVECVSS 6.3
    NEWPoC 13
    xpdfreader (15)
  • 35netapp—
    15 CVE5 critCVSS 7.2
    NEWKEV 1PoC 3
    active iq unified manager (9) · e-series santricity os controller (3) · solidfire (3)
  • 36nuget—
    15 CVECVSS 6.9
    NEWKEV 2Nuclei 4PoC 4
    microsoft.chakracore (5) · dotnetnuke.core (4) · microsoft.aspnetcore.all (1)
  • 37rubygems—
    15 CVE7 critCVSS 8.0
    NEWPoC 13
    lodash-rails (2) · nokogiri (2) · simple_captcha2 (1)
  • 38ао «ивк»—
    15 CVE7 critCVSS 7.0
    NEWKEV 1PoC 2
    альт 8 сп (8) · альт линукс спт (7) · альт сп 10 (1)
  • 39denx—
    14 CVE13 critCVSS 9.6
    NEW
    u-boot (14)
  • 40google—
    14 CVE2 critCVSS 7.3
    NEWPoC 1
    android (12) · kubernetes engine (1) · voice builder (1)
  • 41mcafee—
    13 CVECVSS 5.8
    NEW
    epolicy orchestrator (7) · data loss prevention endpoint (4) · data loss prevention (dlpe) for windows (2)
  • 42trendnet—
    13 CVE3 critCVSS 8.9
    NEWPoC 13
    tew-827dru firmware (13)
  • 43hp—
    12 CVE1 critCVSS 5.4
    NEW
    xp7 command view (7) · 3par service processor firmware (1) · arcsight management center (1)
  • 44adobe—
    11 CVE1 critCVSS 7.1
    NEW
    campaign (6) · experience manager (3) · adobe campaign classic (3)
  • 45sap—
    11 CVE1 critCVSS 6.6
    NEWPoC 1
    sap netweaver application server (2) · netweaver application server java (2) · diagnostics agent (1)
  • 46sap se—
    11 CVE1 critCVSS 6.6
    NEWPoC 1
    abap server and abap platform (sap basis) (1) · openui5 (1) · sap businessobjects business intelligence platform - bi workspace (enterprise) (1)
  • 47gnu—
    10 CVE1 critCVSS 6.4
    NEWPoC 5
    glibc (4) · binutils (3) · patch (2)
  • 48go—
    10 CVE3 critCVSS 7.9
    NEWPoC 1
    github.com/docker/docker (2) · code.gitea.io/gitea (2) · github.com/containers/podman (1)
  • 49xnview—
    10 CVECVSS 7.8
    NEWPoC 4
    xnview (10)
  • 50apache—
    9 CVE3 critCVSS 8.1
    NEW
    virtual computing lab (3) · vcl (3) · storm (2)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79198—
2CWE-787148—
3CWE-12567—
4CWE-2065—
5CWE-35259—
6CWE-11955—
7CWE-8950—
8CWE-20047—
9CWE-7845—
10CWE-2238—
11CWE-28432—
12CWE-47628—
13CWE-41626—
14CWE-43426—
15CWE-19025—
16CWE-86224—
17CWE-28720—
18CWE-52218—
19CWE-30617—
20CWE-9417—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems517 CVE
    296 crit135 KEV39 vendorsCVSS 9.1
    debian gnu/linux (161) · astra linux special edition (160) · ос он «стрелец» (103)
  • OSS Libraries298 CVE
    60 crit2 KEV103 vendorsCVSS 8.0
    imagemagick (42) · exiv2 (7) · jsish (7)
  • Enterprise Software255 CVE
    34 crit11 KEV61 vendorsCVSS 7.8
    active iq unified manager (9) · robotic process automation with automation anywhere (7) · xp7 command view (7)
  • Databases196 CVE
    120 crit18 vendorsCVSS 7.3
    mysql (57) · mysql server (48) · vm virtualbox (38)
  • Security Products151 CVE
    33 crit2 KEV60 vendorsCVSS 7.8
    big-ip advanced firewall manager (20) · big-ip application security manager (20) · big-ip policy enforcement manager (19)
  • Web & CMS Plugins143 CVE
    37 crit4 KEV87 vendorsCVSS 8.1
    mediawiki (9) · moodle (9) · shift (6)
  • Consumer Software139 CVE
    82 crit12 KEV40 vendorsCVSS 8.4
    firefox (84) · thunderbird (55) · firefox esr (46)
  • Networking Infrastructure123 CVE
    36 crit49 vendorsCVSS 7.9
    dcs-1130 firmware (14) · tew-827dru firmware (13) · junos (10)
  • DevTools & CI105 CVE
    28 crit23 vendorsCVSS 9.8
    jenkins (8) · configuration as code (5) · jenkins configuration as code plugin (5)
  • ICS / OT / IoT83 CVE
    84 crit2 KEV31 vendorsCVSS 9.2
    linear emerge elite firmware (14) · linear emerge essential firmware (14) · oncell g3100-hspa (7)
  • Cloud & SaaS74 CVE
    22 crit8 KEV33 vendorsCVSS 8.6
    edx-platform (8) · nextcloud (5) · central print services (3)
  • Hardware Firmware70 CVE
    515 crit17 vendorsCVSS 8.6
    sd 670 firmware (50) · sd 710 firmware (50) · sd 712 firmware (50)
  • Communications37 CVE
    8 crit23 vendorsCVSS 8.0
    mgetty (4) · asterisk (2) · certified asterisk (2)
  • Mobile Apps23 CVE
    3 crit6 vendorsCVSS 6.8
    android (12) · honor magic 2 firmware (2) · mate 20 x (2)
  • AI / ML6 CVE
    2 crit2 vendorsCVSS 6.9
    open network operating system (5)
  • Unclassified109 CVE
    28 crit79 vendorsCVSS 7.6
    flexair (7) · gnuboard (7) · аккорд-win64 (5)
Weakness × Sector

Which weaknesses hit which solution categories in July 2019

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write125Out-of-bounds Read20Improper Input Validation352CSRF119Memory Buffer Bounds89SQL Injection200Information Exposure78OS Command Injection22Path TraversalOperating Systems879322041522338OSS Libraries354827108685310Enterprise Software74219629537Web & CMS Plugins371132823327Consumer Software1443151014333Networking Infrastructure18204185752212Security Products117543141541Databases2412DevTools & CI13151541214ICS / OT / IoT410255274