CVE Tools
Sign in
month report

November 2019

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

November 2019 closed with 1,802 published CVEs. 210 criticals, сообщество свободного программного обеспечения led volume, mostly via debian gnu/linux. Top weakness class — CWE-79 (182 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,802
— MoM— YoY
Severity mix
210 / 673
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
2.8%
51 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
2304.9
n=51
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
925
n=9
Detection gap

KEV pressure, no Nuclei coverage

November 2019 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in November 2019

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS20Improper Input Validation787Out-of-bounds Write200Information Exposure401CWE-401732Incorrect Permissions125Out-of-bounds Read416Use After Free89SQL Injection400Resource Consumptionсообщество свободного программного обеспечения41230350892714debian9221215955325ао «концерн вниинс»929317762312ооо «русбитех-астра»162939782213novell inc.82322062232google12321582741red hat inc.28182882172redhat9165986122fedoraproject3106132146115packagist30569ао «ивк»12173284171google inc82415324

Most discussed CVEs — November 2019

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    239 CVE14 critCVSS 6.7
    NEWKEV 2Nuclei 2PoC 39
    debian gnu/linux (166) · linux (82) · portainer (6)
  • 2redhat—
    217 CVE18 critCVSS 6.9
    NEWNuclei 1PoC 29
    red hat enterprise linux (106) · enterprise linux (61) · red hat enterprise mrg (9)
  • 3debian—
    188 CVE27 critCVSS 7.0
    NEWNuclei 6PoC 41
    debian linux (188) · icoutils (3) · advanced package tool (1)
  • 4ао «концерн вниинс»—
    154 CVE9 critCVSS 6.7
    NEWKEV 2Nuclei 1PoC 25
    ос он «стрелец» (154)
  • 5ооо «русбитех-астра»—
    152 CVE12 critCVSS 7.0
    NEWKEV 2Nuclei 1PoC 26
    astra linux special edition (136) · astra linux special edition для «эльбрус» (49) · astra linux common edition (23)
  • 6novell inc.—
    141 CVE8 critCVSS 6.7
    NEWKEV 1PoC 17
    opensuse leap (134) · suse package hub for suse linux enterprise (84) · suse linux enterprise server (14)
  • 7google—
    138 CVE11 critCVSS 6.8
    NEWKEV 2PoC 4
    chrome (109) · google chrome (96) · android (24)
  • 8fedoraproject—
    109 CVE15 critCVSS 6.7
    NEWNuclei 2PoC 22
    fedora (107) · 389 directory server (2)
  • 9packagist—
    107 CVE15 critCVSS 7.1
    NEWNuclei 4PoC 64
    magento/community-edition (57) · typo3/cms (10) · symfony/symfony (6)
  • 10ао «ивк»—
    106 CVE7 critCVSS 6.7
    NEWKEV 1PoC 13
    альт 8 сп (103) · альт 8 сп сервер (3) · альт 8 сп рабочая станция (2)
  • 11canonical—
    97 CVE8 critCVSS 6.7
    NEWPoC 21
    ubuntu linux (83) · ubuntu (48) · cloud-init (1)
  • 12opensuse—
    88 CVE6 critCVSS 6.1
    NEWKEV 1PoC 17
    leap (56) · backports sle (19) · opensuse (14)
  • 13linux—
    80 CVE8 critCVSS 6.6
    NEWPoC 20
    linux kernel (78) · kernel (2) · dhcp6c (1)
  • 14microsoft—
    74 CVE5 critCVSS 7.3
    NEWKEV 4PoC 3
    windows server (51) · windows (51) · windows 10 (50)
  • 15adobe systems incorporated—
    64 CVE6 critCVSS 6.9
    NEWPoC 53
    magento 2 (52) · magento 1 (8) · magento 1 & 2 (3)
  • 16magento—
    64 CVE6 critCVSS 6.9
    NEWPoC 53
    magento (64)
  • 17intel—
    54 CVE2 critCVSS 6.7
    NEWPoC 3
    intel baseboard management controller (13) · baseboard management controller firmware (13) · ethernet controller x710-at2 firmware (11)
  • 18qualcomm—
    54 CVE24 critCVSS 8.5
    NEW
    qcs605 firmware (42) · msm8996au firmware (41) · sdm660 firmware (40)
  • 19qualcomm, inc.—
    54 CVE24 critCVSS 8.3
    NEW
    snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables (11) · snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables (5) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking (3)
  • 20fedora project—
    47 CVE7 critCVSS 7.0
    NEWNuclei 2PoC 17
    fedora (46) · 389 directory server (1)
  • 21samsung—
    35 CVECVSS 7.6
    NEW
    galaxy j7 neo firmware (4) · galaxy xcover4 firmware (3) · galaxy s7 firmware (3)
  • 22cisco—
    33 CVE1 critCVSS 6.5
    NEWKEV 1PoC 30
    firepower services software for asa (4) · firepower threat defense (4) · secure firewall management center (4)
  • 23huawei—
    32 CVECVSS 7.1
    NEW
    p30 firmware (9) · p30 pro firmware (4) · p20 firmware (3)
  • 24maven—
    32 CVE4 critCVSS 7.1
    NEWNuclei 6PoC 5
    org.jenkins-ci.plugins:google-compute-engine (3) · org.jenkins-ci.main:jenkins-core (2) · org.apache.cxf:cxf (2)
  • 25typo3—
    29 CVE3 critCVSS 6.5
    NEW
    typo3 (28) · typo3 core (1) · wec_discussion (1)
  • 26asus—
    28 CVE2 critCVSS 7.7
    NEW
    zenfone 4 selfie firmware (5) · zenfone ar firmware (3) · zenfone 5q firmware (3)
  • 27netapp—
    28 CVE2 critCVSS 6.7
    NEWPoC 8
    steelstore cloud integrated storage (21) · data availability services (20) · active iq unified manager (17)
  • 28pypi—
    28 CVE3 critCVSS 7.3
    NEWPoC 6
    ansible (3) · pyarrow (2) · ipa (2)
  • 29ibm—
    23 CVECVSS 5.7
    NEW
    smartcloud analytics log analysis (4) · qradar (4) · qradar security information and event manager (4)
  • 30ао "нппкт"—
    22 CVE1 critCVSS 6.9
    NEWPoC 7
    осон основа оnyx (22)
  • 31broadcom—
    21 CVE2 critCVSS 7.0
    NEWPoC 5
    brocade fabric operating system firmware (8) · brocade sannav (6) · fabric operating system (4)
  • 32f5—
    21 CVE2 critCVSS 7.0
    NEW
    big-ip access policy manager (16) · big-ip advanced firewall manager (16) · big-ip application security manager (15)
  • 33gitlab—
    19 CVECVSS 5.4
    NEW
    gitlab (19)
  • 34cryptocat project—
    17 CVE5 critCVSS 7.5
    NEWPoC 1
    cryptocat (17)
  • 35oracle—
    17 CVE1 critCVSS 6.2
    NEWPoC 5
    graalvm enterprise edition (4) · retail order broker (3) · sd-wan edge (3)
  • 36apache—
    16 CVE3 critCVSS 7.9
    NEWNuclei 3PoC 4
    nifi (3) · cxf (2) · arrow (2)
  • 37jenkins—
    15 CVE1 critCVSS 7.0
    NEWNuclei 3
    jenkins (4) · jenkins google compute engine plugin (3) · google compute engine (3)
  • 38mi—
    15 CVECVSS 4.5
    NEW
    a2 lite firmware (3) · mix 2s firmware (2) · mix firmware (1)
  • 39cloudera—
    14 CVECVSS 7.2
    NEW
    cdh (7) · cloudera manager (6) · data science workbench (1)
  • 40lavamobiles—
    14 CVECVSS 4.2
    NEW
    iris 88 firmware (3) · z92 firmware (2) · z60s firmware (2)
  • 41npm—
    14 CVE2 critCVSS 6.8
    NEWNuclei 1PoC 4
    angular (1) · chartkick (1) · cookie-signature (1)
  • 42huawei technologies co., ltd.—
    13 CVECVSS 7.1
    NEW
    huawei ws5100-10 (2) · huawei hirouter-cd30-11 (2) · huawei hirouter-h1-10 (2)
  • 43nvidia—
    12 CVECVSS 6.7
    NEWPoC 1
    gpu driver (6) · nvidia gpu display driver (5) · geforce experience (3)
  • 44tecno-mobile—
    12 CVECVSS 7.6
    NEW
    camon iclick firmware (4) · camon iclick 2 firmware (2) · tecno\/h622\/tecno-id5b\ (2)
  • 45adobe—
    11 CVE3 critCVSS 7.0
    NEW
    media encoder (5) · adobe media encoder (5) · illustrator cc (3)
  • 46cryptocat—
    11 CVE3 critCVSS 7.3
    NEW
    cryptocat (10) · message handling (1)
  • 47mcafee—
    11 CVE1 critCVSS 6.7
    NEW
    advanced threat defense (atd) (7) · advanced threat defense (7) · data loss prevention (1)
  • 48mcafee inc.—
    11 CVE1 critCVSS 6.5
    NEW
    mcafee advanced threat defense (7) · client proxy (1) · mcafee anti-virus plus (1)
  • 49rubygems—
    11 CVECVSS 6.3
    NEWPoC 9
    nokogiri (2) · red-arrow (2) · katello (1)
  • 50apache software foundation—
    10 CVE2 critCVSS 7.5
    NEWNuclei 1PoC 3
    cxf (2) · apache arrow (2) · http server (1)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79182—
2CWE-20124—
3CWE-78798—
4CWE-20076—
5CWE-40153—
6CWE-73249—
7CWE-12543—
8CWE-41643—
9CWE-8940—
10CWE-40035—
11CWE-2233—
12CWE-35228—
13CWE-47628—
14CWE-7828—
15CWE-26926—
16CWE-28725—
17CWE-61025—
18CWE-5923—
19CWE-12022—
20CWE-19022—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems653 CVE
    307 crit125 KEV56 vendorsCVSS 7.7
    debian linux (188) · debian gnu/linux (166) · ос он «стрелец» (154)
  • OSS Libraries316 CVE
    52 crit95 vendorsCVSS 7.7
    magento/community-edition (57) · typo3/cms (10) · symfony/symfony (6)
  • Hardware Firmware232 CVE
    1,273 crit41 vendorsCVSS 8.5
    baseboard management controller firmware (13) · intel baseboard management controller (13) · ethernet 700 series controller (11)
  • Web & CMS Plugins225 CVE
    42 crit76 vendorsCVSS 7.2
    typo3 (28) · moodle (10) · drupal (5)
  • Mobile Apps210 CVE
    16 crit4 KEV9 vendorsCVSS 7.8
    chrome (109) · google chrome (96) · android (26)
  • Enterprise Software167 CVE
    94 crit67 vendorsCVSS 7.9
    steelstore cloud integrated storage (21) · data availability services (20) · active iq unified manager (17)
  • Security Products119 CVE
    34 crit2 KEV44 vendorsCVSS 7.2
    advanced threat defense (7) · advanced threat defense (atd) (7) · clamav (7)
  • Networking Infrastructure117 CVE
    82 crit10 KEV51 vendorsCVSS 8.1
    firepower threat defense (7) · brocade sannav (6) · cisco firepower management center (4)
  • Cloud & SaaS84 CVE
    15 crit34 vendorsCVSS 7.5
    brocade fabric operating system firmware (8) · brocade sannav (6) · fabric operating system (4)
  • DevTools & CI60 CVE
    8 crit25 vendorsCVSS 8.5
    gitlab (19) · djblets (1) · gitolite (1)
  • Communications59 CVE
    14 crit2 KEV33 vendorsCVSS 8.8
    cryptocat (10) · web chat (4) · statusnet (3)
  • Consumer Software53 CVE
    13 crit26 vendorsCVSS 7.9
    adobe media encoder (10) · media encoder (5) · adobe bridge cc (3)
  • ICS / OT / IoT45 CVE
    27 crit21 vendorsCVSS 9.8
    twincat (4) · relion 670 firmware (2) · twincat 2 (2)
  • Databases30 CVE
    9 crit15 vendorsCVSS 8.0
    graalvm enterprise edition (4) · postgresql (4) · sqlite (4)
  • AI / ML2 CVE
    1 vendorsCVSS 5.5
    foomatic-filters (2)
  • Unclassified103 CVE
    19 crit75 vendorsCVSS 7.3
    ktsuss (4) · proftpd (4) · basic laboratory information system (3)
Weakness × Sector

Which weaknesses hit which solution categories in November 2019

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS20Improper Input Validation787Out-of-bounds Write200Information Exposure401CWE-401732Incorrect Permissions125Out-of-bounds Read416Use After Free89SQL Injection400Resource ConsumptionOperating Systems206255405016193279Hardware Firmware414231111114101OSS Libraries45243191510116Web & CMS Plugins69124172123Consumer Software313409179262Networking Infrastructure132036612155Enterprise Software3061621111Security Products141128132112ICS / OT / IoT921491114Cloud & SaaS1641613114