CVE Tools
Sign in
month report

October 2019

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

October 2019 closed with 1,799 published CVEs. 249 criticals, oracle led volume, mostly via mysql server. Top weakness class — CWE-79 (258 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,799
— MoM— YoY
Severity mix
249 / 656
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
10.5%
188 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
2333.3
n=188
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
887
n=7
Weakness × Vendor

What's spreading where in October 2019

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS89SQL Injection125Out-of-bounds Read787Out-of-bounds Write20Improper Input Validation22Path Traversal416Use After Free78OS Command Injection200Information Exposure352CSRForacle111ооо «русбитех-астра»312191141сообщество свободного программного обеспечения6223873112oracle corp.11oracle corporationdebian721593211cisco systems inc.189162542adobe82291261cisco189153532adobe systems inc.8179126maven3119ао «концерн вниинс»215411

Most discussed CVEs — October 2019

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1oracle—
    151 CVE10 critCVSS 6.5
    NEWKEV 1Nuclei 11PoC 3
    mysql server (29) · mysql (29) · java se (19)
  • 2ооо «русбитех-астра»—
    147 CVE22 critCVSS 6.3
    NEWKEV 1Nuclei 3PoC 17
    astra linux special edition (138) · astra linux special edition для «эльбрус» (75) · astra linux common edition (20)
  • 3сообщество свободного программного обеспечения—
    140 CVE27 critCVSS 7.2
    NEWKEV 1Nuclei 11PoC 25
    debian gnu/linux (125) · linux (10) · tightvnc (4)
  • 4debian—
    115 CVE20 critCVSS 7.1
    NEWKEV 2Nuclei 9PoC 13
    debian linux (114) · bind9 (1) · overkill (1)
  • 5canonical—
    106 CVE12 critCVSS 6.6
    NEWKEV 2Nuclei 7PoC 17
    ubuntu linux (68) · ubuntu (56)
  • 6cisco—
    89 CVE2 critCVSS 7.1
    NEWPoC 84
    spa122 firmware (19) · cisco firepower management center (19) · cisco spa112 2-port phone adapter (18)
  • 7adobe—
    86 CVE22 critCVSS 8.3
    NEWNuclei 1PoC 2
    acrobat dc (70) · acrobat reader dc (70) · adobe acrobat and reader (69)
  • 8redhat—
    86 CVE12 critCVSS 6.5
    NEWKEV 1Nuclei 3PoC 6
    red hat enterprise linux (57) · enterprise linux (39) · enterprise linux server (21)
  • 9maven—
    73 CVE13 critCVSS 7.1
    NEWNuclei 6PoC 7
    com.fasterxml.jackson.core:jackson-databind (4) · org.jenkins-ci.plugins:dynatrace-dashboard (3) · org.jenkins-ci.plugins:icescrum (3)
  • 10ао «концерн вниинс»—
    71 CVE13 critCVSS 6.7
    NEWKEV 1Nuclei 2PoC 16
    ос он «стрелец» (71)
  • 11fedoraproject—
    67 CVE8 critCVSS 6.8
    NEWKEV 1Nuclei 2PoC 8
    fedora (67)
  • 12novell inc.—
    65 CVE9 critCVSS 7.3
    NEWKEV 1Nuclei 3PoC 7
    opensuse leap (64) · suse linux enterprise module for basesystem (40) · suse linux enterprise server (37)
  • 13opensuse—
    61 CVE6 critCVSS 6.7
    NEWNuclei 1PoC 8
    leap (61) · backports sle (3)
  • 14microsoft—
    60 CVE2 critCVSS 7.1
    NEWKEV 2Nuclei 1PoC 7
    windows (37) · windows server (37) · windows 10 1809 (32)
  • 15netapp—
    60 CVE5 critCVSS 5.5
    NEWKEV 1Nuclei 4PoC 4
    oncommand workflow automation (49) · active iq unified manager (37) · snapcenter (27)
  • 16fedora project—
    51 CVE8 critCVSS 7.4
    NEWKEV 1Nuclei 3PoC 9
    fedora (51)
  • 17jenkins—
    46 CVE2 critCVSS 6.5
    NEWNuclei 1PoC 1
    jenkins dynatrace application monitoring plugin (3) · kubernetes ci (3) · jenkins crx content package deployer plugin (3)
  • 18ibm—
    41 CVECVSS 5.7
    NEW
    cloud orchestrator (9) · security guardium big data intelligence (8) · security directory server (5)
  • 19jetbrains—
    34 CVE4 critCVSS 6.6
    NEWNuclei 1PoC 1
    teamcity (12) · youtrack (7) · upsource (3)
  • 20awesomemotive—
    32 CVECVSS 6.1
    NEWNuclei 32
    easy digital downloads (32)
  • 21easydigitaldownloads—
    31 CVECVSS 6.1
    NEWNuclei 31
    amazon s3 (1) · attach accounts to orders (1) · commissions (1)
  • 22tcpdump—
    30 CVE2 critCVSS 7.2
    NEW
    tcpdump (25) · libpcap (5)
  • 23foxitsoftware—
    29 CVECVSS 7.7
    NEWPoC 1
    reader (18) · phantompdf (17) · foxit studio photo (4)
  • 24sugarcrm—
    29 CVE1 critCVSS 8.2
    NEWNuclei 1PoC 1
    sugarcrm (29)
  • 25fusionpbx—
    26 CVECVSS 6.4
    NEW
    fusionpbx (26)
  • 26juniper—
    25 CVECVSS 7.1
    NEWPoC 24
    junos (24) · sbr carrier (1)
  • 27juniper networks—
    25 CVECVSS 7.1
    NEWPoC 24
    junos (24) · junos os (24) · sbr carrier (1)
  • 28the tcpdump team—
    25 CVE2 critCVSS 7.4
    NEW
    tcpdump (25)
  • 29apple—
    21 CVECVSS 6.8
    NEW
    mac os x (21) · ipados (1) · iphone os (1)
  • 30packagist—
    21 CVE6 critCVSS 7.2
    NEWNuclei 2PoC 6
    dolibarr/dolibarr (4) · centreon/centreon (3) · nilsteampassnet/teampass (3)
  • 31irfanview—
    18 CVECVSS 7.7
    NEW
    irfanview (18)
  • 32npm—
    18 CVE9 critCVSS 8.4
    NEWNuclei 1PoC 4
    sequelize (3) · realms-shim (2) · safer-eval (2)
  • 33the linux foundation—
    18 CVE1 critCVSS 7.3
    NEW
    xen (18)
  • 34xen—
    18 CVE1 critCVSS 7.3
    NEW
    xen (18)
  • 35pypi—
    17 CVE4 critCVSS 7.2
    NEWNuclei 1PoC 3
    ansible (2) · keyring (1) · koji (1)
  • 36ао "нппкт"—
    17 CVE6 critCVSS 8.0
    NEWPoC 5
    осон основа оnyx (17)
  • 37isc—
    15 CVECVSS 6.6
    NEW
    bind (11) · bind 9 (8) · kea (3)
  • 38dlink—
    14 CVE7 critCVSS 9.0
    NEWNuclei 1PoC 5
    dir-865l firmware (3) · dir-846 firmware (2) · dir-846 (2)
  • 39google—
    14 CVE1 critCVSS 7.5
    NEWKEV 1Nuclei 1PoC 2
    android (10) · nest cam iq indoor firmware (1) · chrome (1)
  • 40ао «ивк»—
    14 CVE3 critCVSS 8.1
    NEWKEV 1Nuclei 3PoC 6
    альт 8 сп (13) · альт сп 10 (2)
  • 41paloaltonetworks—
    13 CVE3 critCVSS 7.7
    NEW
    zingbox inspector (11) · globalprotect (2) · globalprotect agent for linux (1)
  • 42youphptube—
    13 CVE5 critCVSS 9.2
    NEWNuclei 3PoC 6
    youphptube (10) · youphptube encoder (3)
  • 43centreon—
    12 CVE2 critCVSS 8.0
    NEWPoC 3
    centreon web (8) · centreon (2) · centreon vm (2)
  • 44sap—
    12 CVECVSS 5.4
    NEW
    businessobjects business intelligence platform (5) · sap business objects business intelligence (5) · sap financial consolidation (2)
  • 45sap se—
    12 CVECVSS 5.4
    NEW
    sap businessobjects business intelligence platform (web intelligence html interface) (5) · sap financial consolidation (2) · sap customer relationship management (email management - bbpcrm) (1)
  • 46f5—
    11 CVECVSS 7.1
    NEW
    traffix signaling delivery controller (9) · big-ip advanced firewall manager (4) · big-ip analytics (4)
  • 47schneider-electric—
    11 CVECVSS 6.8
    NEW
    modicon m580 firmware (11) · modicon m340 firmware (8) · modicon 140cra firmware (6)
  • 48zingbox—
    11 CVE3 critCVSS 8.3
    NEW
    inspector (11)
  • 49apache—
    10 CVE1 critCVSS 7.3
    NEWPoC 1
    hadoop (3) · apache thrift (2) · thrift (2)
  • 50linux—
    10 CVE1 critCVSS 5.7
    NEWPoC 8
    linux kernel (10)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79258—
2CWE-8978—
3CWE-12570—
4CWE-78765—
5CWE-2058—
6CWE-2255—
7CWE-41654—
8CWE-7843—
9CWE-20042—
10CWE-35241—
11CWE-11937—
12CWE-27633—
13CWE-30626—
14CWE-12022—
15CWE-43422—
16CWE-9422—
17CWE-28419—
18CWE-31918—
19CWE-75518—
20CWE-86217—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems356 CVE
    282 crit94 KEV43 vendorsCVSS 8.3
    astra linux special edition (138) · debian gnu/linux (125) · fedora (118)
  • OSS Libraries262 CVE
    84 crit2 KEV78 vendorsCVSS 8.5
    tcpdump (25) · jackson-databind (8) · bento4 (6)
  • Networking Infrastructure229 CVE
    78 crit43 vendorsCVSS 9.7
    junos (48) · cisco firepower management center (37) · junos os (24)
  • Enterprise Software228 CVE
    162 crit20 KEV44 vendorsCVSS 8.0
    oncommand workflow automation (49) · active iq unified manager (37) · oncommand insight (27)
  • Web & CMS Plugins216 CVE
    40 crit88 vendorsCVSS 7.7
    wordpress (13) · youphptube (10) · sitos six (6)
  • Consumer Software167 CVE
    179 crit31 vendorsCVSS 8.7
    acrobat dc (70) · acrobat reader dc (70) · adobe acrobat and reader (69)
  • Databases161 CVE
    161 crit3 KEV12 vendorsCVSS 7.8
    mysql server (56) · mysql (30) · vm virtualbox (29)
  • Security Products112 CVE
    26 crit2 KEV50 vendorsCVSS 7.8
    epolicy orchestrator (4) · tightvnc (4) · anti-virus (3)
  • DevTools & CI98 CVE
    13 crit16 vendorsCVSS 7.8
    crx content package deployer (3) · dynatrace application monitoring (3) · icescrum (3)
  • ICS / OT / IoT73 CVE
    94 crit29 vendorsCVSS 8.7
    modicon m580 firmware (11) · modicon m580 (10) · modicon m340 firmware (8)
  • Cloud & SaaS73 CVE
    11 crit23 vendorsCVSS 8.7
    xen (18) · fusion (3) · vmware fusion (3)
  • Communications66 CVE
    12 crit22 vendorsCVSS 9.2
    fusionpbx (26) · asterisk (2) · freepbx (2)
  • Mobile Apps39 CVE
    1 crit56 KEV7 vendorsCVSS 8.8
    mac os x (21) · ipados (1) · iphone os (1)
  • Hardware Firmware37 CVE
    14 crit22 vendorsCVSS 8.9
    combi-stream mslq firmware (5) · fs-210 firmware (3) · coldcard mk1 firmware (1)
  • AI / ML2 CVE
    2 vendorsCVSS 7.5
    harbor (1)
  • Unclassified101 CVE
    22 crit2 KEV72 vendorsCVSS 7.5
    chicken (12) · explorer 710 (6) · rexpert (6)
Weakness × Sector

Which weaknesses hit which solution categories in October 2019

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS89SQL Injection125Out-of-bounds Read787Out-of-bounds Write20Improper Input Validation22Path Traversal416Use After Free78OS Command Injection200Information Exposure352CSRFOperating Systems1413220206282OSS Libraries24831161255449Networking Infrastructure2291812291964Enterprise Software5418244315Web & CMS Plugins99312641312Consumer Software413039174532Databases211121Security Products175652313Hardware Firmware1314221DevTools & CI10114110