CVE Tools
Sign in
month report

January 2020

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

January 2020 closed with 1,984 published CVEs. 247 criticals, oracle led volume, mostly via enterprise manager base platform. Top weakness class — CWE-79 (242 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,984
— MoM— YoY
Severity mix
247 / 642
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
5.8%
116 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
2242.2
n=116
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
786
n=7
Weakness × Vendor

What's spreading where in January 2020

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write20Improper Input Validation78OS Command Injection200Information Exposure269Improper Privilege Mgmt22Path Traversal352CSRF89SQL Injection125Out-of-bounds Readoracle3411oracle corp.341oracle corporation1сообщество свободного программного обеспечения5216412117ооо «русбитех-астра»518316debian410211124opensuse214219ао «концерн вниинс»517513canonical39113novell inc.314321113redhat693121122red hat inc.513421

Most discussed CVEs — January 2020

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1oracle—
    222 CVE7 critCVSS 6.3
    NEWKEV 2Nuclei 13PoC 8
    enterprise manager base platform (43) · vm virtualbox (18) · mysql (16)
  • 2сообщество свободного программного обеспечения—
    125 CVE18 critCVSS 7.4
    NEWKEV 1Nuclei 3PoC 33
    debian gnu/linux (112) · linux (9) · libxml2 (2)
  • 3redhat—
    101 CVE13 critCVSS 7.0
    NEWNuclei 2PoC 15
    red hat enterprise linux (53) · enterprise linux (23) · enterprise linux desktop (20)
  • 4canonical—
    91 CVE8 critCVSS 6.8
    NEWKEV 1Nuclei 2PoC 21
    ubuntu linux (73) · ubuntu (60)
  • 5ооо «русбитех-астра»—
    81 CVE10 critCVSS 7.3
    NEWPoC 22
    astra linux special edition (75) · astra linux special edition для «эльбрус» (23) · astra linux common edition (21)
  • 6debian—
    80 CVE14 critCVSS 7.1
    NEWKEV 1Nuclei 3PoC 15
    debian linux (80)
  • 7opensuse—
    76 CVE5 critCVSS 6.8
    NEWNuclei 2PoC 20
    leap (59) · backports sle (19) · factory (7)
  • 8ао «концерн вниинс»—
    75 CVE8 critCVSS 7.3
    NEWPoC 22
    ос он «стрелец» (75)
  • 9novell inc.—
    64 CVE6 critCVSS 6.7
    NEWNuclei 1PoC 18
    opensuse leap (56) · suse linux enterprise server for sap applications (11) · suse linux enterprise server (11)
  • 10microsoft—
    61 CVE4 critCVSS 7.5
    NEWKEV 3Nuclei 1PoC 3
    windows server (36) · windows server 2016 (36) · windows server 2019 (35)
  • 11ао «ивк»—
    59 CVE2 critCVSS 7.4
    NEWPoC 18
    альт 8 сп (59) · альт сп 10 (1)
  • 12maven—
    56 CVE8 critCVSS 7.1
    NEWNuclei 7PoC 7
    org.jenkins-ci.main:jenkins-core (9) · org.opencastproject:opencast-kernel (3) · org.jenkins-ci.plugins:sounds (2)
  • 13cisco—
    48 CVE6 critCVSS 6.9
    NEWPoC 34
    cisco data center network manager (12) · data center network manager (12) · cisco ios xr software (5)
  • 14gitlab—
    48 CVE4 critCVSS 6.5
    NEWNuclei 2PoC 2
    gitlab (48) · gitlab ce/ee (7) · gitlab ee (4)
  • 15fedoraproject—
    45 CVE9 critCVSS 7.2
    NEWKEV 1Nuclei 2PoC 11
    fedora (44) · 389 directory server (1) · extra packages for enterprise linux (1)
  • 16mozilla—
    37 CVE1 critCVSS 7.7
    NEWPoC 11
    firefox (37) · firefox esr (22) · thunderbird (18)
  • 17pypi—
    37 CVE5 critCVSS 7.4
    NEWNuclei 1PoC 1
    plone (7) · pillow (5) · opencv-contrib-python-headless (2)
  • 18netapp—
    35 CVE1 critCVSS 5.6
    NEWNuclei 1PoC 3
    active iq unified manager (26) · oncommand workflow automation (22) · oncommand insight (22)
  • 19packagist—
    34 CVE6 critCVSS 6.9
    NEWNuclei 1PoC 12
    magento/community-edition (6) · magento/core (3) · dolibarr/dolibarr (3)
  • 20qualcomm—
    29 CVE11 critCVSS 8.7
    NEWPoC 1
    sm8150 firmware (25) · sdm845 firmware (23) · sxr2130 firmware (23)
  • 21google—
    28 CVE1 critCVSS 6.9
    NEWPoC 3
    android (19) · chrome (8) · google chrome (2)
  • 22qualcomm, inc.—
    28 CVE11 critCVSS 8.4
    NEW
    snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables (10) · snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music (2) · snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables (2)
  • 23ао "нппкт"—
    25 CVE5 critCVSS 7.2
    NEWNuclei 1PoC 6
    осон основа оnyx (25)
  • 24ibm—
    21 CVE2 critCVSS 6.3
    NEWNuclei 1
    security secret server (8) · mq appliance (3) · qradar security information and event manager (2)
  • 25jenkins—
    21 CVECVSS 6.6
    NEWNuclei 2PoC 1
    jenkins (7) · amazon ec2 (2) · cloudbees (2)
  • 26npm—
    21 CVE8 critCVSS 8.1
    NEW
    hashbrown-cms (2) · angular-expressions (1) · aws-lambda (1)
  • 27suse—
    21 CVECVSS 6.4
    NEWNuclei 1PoC 5
    linux enterprise server (5) · suse linux enterprise server 15 (4) · suse linux enterprise server (3)
  • 28fedora project—
    19 CVE4 critCVSS 7.8
    NEWPoC 4
    fedora (19)
  • 29adobe—
    17 CVE4 critCVSS 7.7
    NEWNuclei 1
    magento (6) · illustrator cc (5) · adobe illustrator cc (5)
  • 30apache—
    17 CVE5 critCVSS 7.7
    NEW
    nifi (2) · cxf (2) · spamassassin (2)
  • 31hp—
    17 CVE2 critCVSS 6.3
    NEWPoC 3
    sgi tempo (3) · simplivity 2600 gen10 firmware (2) · simplivity 380 gen10 firmware (2)
  • 32apache software foundation—
    16 CVE5 critCVSS 7.9
    NEWNuclei 1PoC 2
    netty (3) · cxf (2) · apache spamassassin (2)
  • 33huawei—
    15 CVE1 critCVSS 6.9
    NEWNuclei 1
    dp300 firmware (2) · te30 firmware (2) · te40 firmware (2)
  • 34linux—
    15 CVECVSS 6.8
    NEWPoC 4
    linux kernel (8) · tizen (7) · kernel (1)
  • 35gnu—
    13 CVE2 critCVSS 7.8
    NEWPoC 5
    libredwg (7) · coreutils (2) · cpio (1)
  • 36jetbrains—
    12 CVECVSS 6.5
    NEW
    teamcity (4) · intellij idea (3) · youtrack (2)
  • 37juniper—
    12 CVECVSS 7.2
    NEWPoC 9
    junos (11) · junos space (1)
  • 38symantec—
    12 CVECVSS 7.0
    NEWPoC 1
    it management suite (3) · norton mobile security (3) · norton mobile security for android (3)
  • 39dlink—
    11 CVE5 critCVSS 7.3
    NEWPoC 7
    dcs-2102 firmware (5) · dcs-2121 firmware (5) · dir-859 firmware (4)
  • 40juniper networks—
    11 CVECVSS 7.3
    NEWPoC 9
    junos os (10) · junos (10) · junos os evolved (3)
  • 41ruckuswireless—
    11 CVE7 critCVSS 8.7
    NEWPoC 2
    unleashed (10) · zonedirector 1200 firmware (10) · r310 firmware (1)
  • 42intel—
    10 CVECVSS 5.5
    NEWPoC 2
    core i3-7100h firmware (3) · core i3-7100e firmware (3) · core i3-7020u firmware (3)
  • 43lustre—
    10 CVE1 critCVSS 7.7
    NEWPoC 4
    lustre (10)
  • 44wso2—
    10 CVECVSS 5.1
    NEWNuclei 2PoC 6
    api manager (10) · identity server (4) · enterprise integrator (2)
  • 45bitdefender—
    9 CVE1 critCVSS 6.1
    NEWPoC 1
    antivirus (3) · box 2 firmware (3) · bitdefender box 2 (3)
  • 46samsung—
    9 CVE2 critCVSS 7.8
    NEWPoC 6
    kies (5) · gear 2 firmware (4) · gear fit 2 firmware (4)
  • 47cesnet—
    8 CVECVSS 7.5
    NEWPoC 2
    libyang (8)
  • 48go—
    8 CVE1 critCVSS 7.0
    NEW
    github.com/hashicorp/consul (2) · github.com/hashicorp/nomad (2) · github.com/hashicorp/vault (1)
  • 49python—
    8 CVE2 critCVSS 7.8
    NEW
    pillow (5) · python (2) · py-bcrypt (1)
  • 50siemens—
    8 CVE2 critCVSS 7.9
    NEWNuclei 1PoC 2
    apogee mec/mbc/pxc (p2) (1) · apogee modular building controller firmware (1) · apogee modular equiment controller firmware (1)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79242—
2CWE-78786—
3CWE-2065—
4CWE-7863—
5CWE-20046—
6CWE-26944—
7CWE-2243—
8CWE-35240—
9CWE-8940—
10CWE-12535—
11CWE-28735—
12CWE-12034—
13CWE-41634—
14CWE-43426—
15CWE-52225—
16CWE-79823—
17CWE-7421—
18CWE-40020—
19CWE-86320—
20CWE-29518—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems381 CVE
    248 crit135 KEV44 vendorsCVSS 8.2
    debian gnu/linux (112) · debian linux (80) · astra linux special edition (75)
  • OSS Libraries298 CVE
    65 crit3 KEV94 vendorsCVSS 8.1
    libyang (8) · libredwg (7) · pillow (5)
  • Databases234 CVE
    61 crit19 KEV15 vendorsCVSS 8.8
    enterprise manager base platform (104) · vm virtualbox (54) · weblogic server (33)
  • Enterprise Software217 CVE
    78 crit70 vendorsCVSS 8.0
    active iq unified manager (26) · oncommand insight (22) · oncommand workflow automation (22)
  • Networking Infrastructure170 CVE
    98 crit61 vendorsCVSS 9.3
    cisco data center network manager (24) · junos (21) · data center network manager (12)
  • Web & CMS Plugins170 CVE
    51 crit103 vendorsCVSS 7.5
    plone (8) · joomla\! (7) · mediawiki (6)
  • Security Products118 CVE
    19 crit52 vendorsCVSS 7.7
    epolicy orchestrator (5) · antivirus (3) · bitdefender box 2 (3)
  • DevTools & CI110 CVE
    15 crit30 vendorsCVSS 8.8
    gitlab (49) · gitlab ce/ee (7) · git (6)
  • Consumer Software110 CVE
    20 crit31 vendorsCVSS 8.8
    firefox (71) · firefox esr (44) · thunderbird (33)
  • Hardware Firmware86 CVE
    439 crit29 vendorsCVSS 8.7
    sm8150 firmware (25) · mdm9607 firmware (23) · sdm845 firmware (23)
  • Cloud & SaaS67 CVE
    11 crit31 vendorsCVSS 7.3
    spring framework (3) · brcmfmac driver (2) · brcmfmac wifi driver (2)
  • ICS / OT / IoT63 CVE
    59 crit32 vendorsCVSS 9.7
    pi vision (4) · 140cpu65150 firmware (3) · 140cpu65160 firmware (3)
  • Mobile Apps54 CVE
    13 crit6 vendorsCVSS 7.2
    android (19) · chrome (8) · kies (5)
  • Communications48 CVE
    6 crit2 KEV21 vendorsCVSS 9.8
    open-xchange appsuite (7) · zimbra collaboration server (4) · ftp server (3)
  • AI / ML3 CVE
    3 vendorsCVSS 6.4
    open source computer vision library (opencv) (1) · tensorflow (1) · the update framework (1)
  • Unclassified96 CVE
    22 crit74 vendorsCVSS 7.7
    stb truetype.h (7) · access analysis cgi an-analyzer (4) · cgi an-anlyzer (4)
Weakness × Sector

Which weaknesses hit which solution categories in January 2020

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write20Improper Input Validation78OS Command Injection200Information Exposure269Improper Privilege Mgmt22Path Traversal352CSRF89SQL Injection125Out-of-bounds ReadOperating Systems164414471223417OSS Libraries4222985310621Enterprise Software525543810610Web & CMS Plugins59618461315Networking Infrastructure1721622648153Databases561124Hardware Firmware1445535547Consumer Software1539212132Security Products1947766221DevTools & CI15271105341