CVE Tools
Sign in
month report

August 2019

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

August 2019 closed with 2,064 published CVEs. 326 criticals, cpanel led volume, mostly via cpanel. Top weakness class — CWE-79 (458 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
2,064
— MoM— YoY
Severity mix
326 / 726
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
22.3%
460 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
2389.1
n=460
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
902
n=6
Detection gap

KEV pressure, no Nuclei coverage

August 2019 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in August 2019

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS20Improper Input Validation787Out-of-bounds Write352CSRF89SQL Injection125Out-of-bounds Read200Information Exposure416Use After Free22Path Traversal119Memory Buffer Boundscpanel6068141292adobe13333244сообщество свободного программного обеспечения227221411332adobe systems inc.12933102microsoft28192131microsoft corp28172131debian13121121814packagist3548211magento283611cisco4222118cisco systems inc.4222118canonical32661

Most discussed CVEs — August 2019

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1cpanel—
    277 CVE5 critCVSS 5.9
    NEW
    cpanel (277)
  • 2adobe—
    119 CVE48 critCVSS 8.1
    NEWPoC 1
    acrobat dc (75) · acrobat reader dc (75) · adobe acrobat and reader (75)
  • 3microsoft—
    95 CVE8 critCVSS 7.3
    NEWPoC 9
    windows 10 (65) · windows server 2016 (65) · windows server 2019 (server core installation) (63)
  • 4сообщество свободного программного обеспечения—
    95 CVE12 critCVSS 7.1
    NEWKEV 1Nuclei 3PoC 34
    debian gnu/linux (68) · linux (28) · envoy (4)
  • 5debian—
    88 CVE15 critCVSS 7.1
    NEWKEV 1Nuclei 1PoC 21
    debian linux (88)
  • 6packagist—
    86 CVE5 critCVSS 6.4
    NEWPoC 74
    magento/community-edition (70) · magento/product-community-edition (3) · bolt/bolt (3)
  • 7magento—
    71 CVECVSS 6.1
    NEWPoC 70
    magento (71)
  • 8cisco—
    70 CVE9 critCVSS 7.6
    NEWPoC 69
    integrated management controller supervisor (17) · unified computing system (13) · enterprise nfv infrastructure software (12)
  • 9canonical—
    69 CVE7 critCVSS 6.9
    NEWPoC 23
    ubuntu linux (51) · ubuntu (46) · apport (1)
  • 10opensuse—
    51 CVE2 critCVSS 6.6
    NEWPoC 15
    leap (50) · backports (1) · backports sle (1)
  • 11maven—
    46 CVE1 critCVSS 6.7
    NEWKEV 1Nuclei 2PoC 5
    org.opencms:opencms-core (4) · org.jenkins-ci.plugins:gitlab-oauth (2) · com.xebialabs.xlt.ci:xltestview-plugin (2)
  • 12ооо «русбитех-астра»—
    46 CVE8 critCVSS 7.5
    NEWPoC 21
    astra linux special edition (42) · astra linux special edition для «эльбрус» (25) · astra linux common edition (10)
  • 13ibm—
    45 CVE3 critCVSS 6.7
    NEW
    informix dynamic server (9) · informix dynamic server enterprise edition (9) · emptoris spend analysis (6)
  • 14ао «концерн вниинс»—
    45 CVE7 critCVSS 7.7
    NEWKEV 1Nuclei 1PoC 13
    ос он «стрелец» (45)
  • 15redhat—
    41 CVE1 critCVSS 7.4
    NEWNuclei 1PoC 6
    red hat enterprise linux (16) · enterprise linux (15) · jboss enterprise application platform (9)
  • 16fedoraproject—
    40 CVE7 critCVSS 7.8
    NEWPoC 13
    fedora (39) · 389 directory server (1)
  • 17linux—
    38 CVE3 critCVSS 6.1
    NEWPoC 17
    linux kernel (38)
  • 18bestwebsoft—
    35 CVE2 critCVSS 6.3
    NEWNuclei 35
    contact form (5) · pdf \& print (2) · visitors online (2)
  • 19netapp—
    33 CVE6 critCVSS 5.7
    NEWPoC 11
    data availability services (15) · h410c firmware (14) · active iq unified manager (14)
  • 20novell inc.—
    32 CVE5 critCVSS 7.5
    NEWPoC 10
    opensuse leap (24) · suse linux enterprise server for sap applications (9) · suse linux enterprise server (9)
  • 21crates.io—
    31 CVE11 critCVSS 8.0
    NEWPoC 1
    smallvec (3) · slice-deque (2) · ncurses (2)
  • 22google—
    25 CVE2 critCVSS 7.3
    NEWPoC 2
    android (18) · nest cam iq indoor firmware (5) · cloud messaging notification (1)
  • 23jenkins—
    25 CVECVSS 6.5
    NEWNuclei 1
    jclouds (2) · jenkins gitlab authentication plugin (2) · jenkins jclouds plugin (2)
  • 24fedora project—
    24 CVE7 critCVSS 8.1
    NEWNuclei 1PoC 6
    fedora (24)
  • 25apache—
    21 CVECVSS 7.0
    NEWKEV 2Nuclei 1PoC 3
    traffic server (8) · apache tika (3) · tika (3)
  • 26oracle—
    21 CVE3 critCVSS 7.4
    NEWNuclei 1PoC 5
    graalvm (7) · enterprise manager ops center (3) · primavera unifier (3)
  • 27npm—
    20 CVE4 critCVSS 7.2
    NEWPoC 5
    openpgp (3) · status-board (2) · editor.md (2)
  • 28pypi—
    19 CVE4 critCVSS 7.8
    NEWPoC 4
    django (4) · opencv-contrib-python (3) · opencv-contrib-python-headless (3)
  • 29dlink—
    18 CVE1 critCVSS 7.4
    NEWNuclei 1PoC 16
    dwl-3600ap firmware (7) · 6600-ap firmware (7) · dir-823g firmware (5)
  • 30atlassian—
    17 CVE1 critCVSS 5.9
    NEWKEV 1Nuclei 3PoC 4
    jira (14) · jira server (11) · jira server and data center (1)
  • 31siemens—
    17 CVE6 critCVSS 7.7
    NEWPoC 1
    ruggedcom win7200 firmware (11) · ruggedcom win7025 firmware (11) · ruggedcom win7000 firmware (11)
  • 32apache software foundation—
    16 CVECVSS 7.3
    NEWKEV 1Nuclei 1PoC 2
    traffic server (6) · netty (3) · tika (3)
  • 33sap—
    16 CVE2 critCVSS 7.1
    NEWKEV 1
    businessobjects business intelligence (7) · sap business objects business intelligence (4) · sap commerce cloud (2)
  • 34sap se—
    16 CVE2 critCVSS 7.1
    NEWKEV 1
    sap enable now (2) · sap businessobjects business intelligence platform (bi workspace) (2) · sap businessobjects business intelligence platform (cmc) (1)
  • 35ао "нппкт"—
    16 CVE3 critCVSS 7.7
    NEWPoC 6
    осон основа оnyx (16)
  • 36hp—
    15 CVE4 critCVSS 7.5
    NEW
    3par service processor firmware (6) · 3par storeserv management console (6) · hp 200 g3 (rom family ssid 8431) (1)
  • 37ithemes—
    15 CVECVSS 6.1
    NEWNuclei 15
    exchange (1) · builder theme depot (1) · invoices (1)
  • 38fortinet inc.—
    13 CVE1 critCVSS 5.6
    NEW
    fortios (9) · fortios ips engine (1) · fortimanager vm (1)
  • 39hpe—
    13 CVE4 critCVSS 7.6
    NEW
    hpe 3par storeserv management and core software media (6) · hpe 3par service processor (6) · hp xp7 cvae (1)
  • 40mcafee—
    12 CVECVSS 6.7
    NEW
    web gateway (9) · mcafee web gateway (mwg) (2) · data loss prevention endpoint (2)
  • 41microdigital—
    12 CVE6 critCVSS 8.7
    NEW
    mdc-n2190v firmware (12) · mdc-n4090 firmware (12) · mdc-n4090w firmware (12)
  • 42apple—
    11 CVECVSS 7.6
    NEWPoC 1
    swiftnio (8) · mac os x (3) · macos (2)
  • 43belden—
    11 CVE5 critCVSS 8.5
    NEWPoC 1
    hirschmann hios (11) · garrettcom magnum dx940e firmware (11)
  • 44belden inc.—
    11 CVE5 critCVSS 8.5
    NEWPoC 1
    hirschmann hios (11) · garrettcom dx (11)
  • 45codepeople—
    11 CVE2 critCVSS 7.1
    NEWNuclei 11PoC 1
    appointment booking calendar (2) · booking calendar contact form (2) · contact form email (2)
  • 46windriver—
    11 CVE5 critCVSS 8.5
    NEWPoC 1
    vxworks (11)
  • 47eq-3—
    10 CVE3 critCVSS 8.6
    NEWPoC 7
    homematic ccu2 firmware (7) · homematic ccu3 firmware (6) · ccu3 firmware (3)
  • 48intel—
    10 CVECVSS 7.5
    NEW
    intel driver & support assistant (2) · driver \& support assistant (2) · hp 14-aq0xx (1)
  • 49nvidia—
    10 CVE3 critCVSS 8.0
    NEWPoC 1
    gpu display driver (5) · gpu driver (5) · tesla r418 (4)
  • 50red lion controls, inc.—
    10 CVE4 critCVSS 8.4
    NEWPoC 1
    siprotec 5 cpu cp100 (10) · siprotec 5 cpu cp300 (10) · siprotec 5 cpu cp200 (6)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79458—
2CWE-20148—
3CWE-787117—
4CWE-352114—
5CWE-8992—
6CWE-12577—
7CWE-20064—
8CWE-41650—
9CWE-2249—
10CWE-11944—
11CWE-7839—
12CWE-28434—
13CWE-28732—
14CWE-73224—
15CWE-26423—
16CWE-9422—
17CWE-40021—
18CWE-60121—
19CWE-86220—
20CWE-43419—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Enterprise Software539 CVE
    103 crit6 KEV71 vendorsCVSS 8.0
    cpanel (277) · control panel (2) · status board (2)
  • Web & CMS Plugins485 CVE
    78 crit4 KEV192 vendorsCVSS 9.8
    events manager (9) · all in one wp security \& firewall (8) · cformsii (7)
  • OSS Libraries325 CVE
    66 crit1 KEV74 vendorsCVSS 9.5
    node.js (14) · imagemagick (8) · adplug (7)
  • Operating Systems305 CVE
    360 crit3 KEV41 vendorsCVSS 8.3
    debian linux (88) · debian gnu/linux (68) · fedora (63)
  • Consumer Software159 CVE
    202 crit25 vendorsCVSS 8.5
    acrobat dc (75) · acrobat reader dc (75) · adobe acrobat and reader (75)
  • Networking Infrastructure154 CVE
    95 crit29 vendorsCVSS 8.2
    unified computing system (25) · nx-os (18) · integrated management controller supervisor (17)
  • Hardware Firmware97 CVE
    345 crit27 vendorsCVSS 8.4
    mdc-n2190v firmware (12) · mdc-n4090 firmware (12) · mdc-n4090w firmware (12)
  • Security Products94 CVE
    13 crit45 vendorsCVSS 8.0
    web gateway (11) · antivirus \+ security 2019 (2) · data loss prevention (dlpe) for windows (2)
  • ICS / OT / IoT58 CVE
    37 crit25 vendorsCVSS 8.5
    siprotec 5 cpu cp100 (10) · siprotec 5 cpu cp300 (10) · siprotec 5 cpu cp200 (6)
  • DevTools & CI51 CVE
    4 crit1 KEV19 vendorsCVSS 9.5
    jenkins (5) · gitlab oauth (2) · jclouds (2)
  • Cloud & SaaS47 CVE
    9 crit3 KEV36 vendorsCVSS 7.8
    kubernetes (6) · docker (3) · uaa release (oss) (2)
  • Mobile Apps45 CVE
    2 crit6 vendorsCVSS 7.8
    android (19) · nest cam iq indoor firmware (5) · pcmanager (4)
  • Databases37 CVE
    7 crit13 vendorsCVSS 8.7
    graalvm (7) · primavera gateway (4) · retail xstore point of service (4)
  • Communications27 CVE
    8 crit19 vendorsCVSS 9.2
    live chat (5) · 3cx (2) · teamspeak (1)
  • AI / ML4 CVE
    2 vendorsCVSS 7.7
    open source computer vision library (opencv) (3) · nltk (1)
  • Unclassified94 CVE
    23 crit76 vendorsCVSS 7.5
    brandy (3) · gesior-aac (3) · invite anyone (3)
Weakness × Sector

Which weaknesses hit which solution categories in August 2019

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS20Improper Input Validation787Out-of-bounds Write352CSRF89SQL Injection125Out-of-bounds Read200Information Exposure416Use After Free22Path Traversal119Memory Buffer BoundsWeb & CMS Plugins260227051313Enterprise Software117697111633593OSS Libraries631229168182577Operating Systems417487126151957Consumer Software1145113812836Hardware Firmware82861444411Networking Infrastructure1225341138Security Products14654146113ICS / OT / IoT326153351Cloud & SaaS9222515