CVE Tools
Sign in
month report

June 2020

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

June 2020 closed with 1,894 published CVEs. 213 criticals, mattermost led volume, mostly via mattermost server. Top weakness class — CWE-79 (175 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,894
— MoM— YoY
Severity mix
213 / 829
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
4.2%
80 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
2090.3
n=80
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
629
n=10
Detection gap

KEV pressure, no Nuclei coverage

June 2020 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in June 2020

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write125Out-of-bounds Read20Improper Input Validation119Memory Buffer Bounds78OS Command Injection22Path Traversal798Hard-coded Credentials200Information Exposure732Incorrect Permissionsmattermost17114921google253721221сообщество свободного программного обеспечения91515421microsoft107221microsoft corp107221adobe7412616adobe systems inc.7412616cisco systems inc.4168241813214cisco413241613214debian6912221go15661010ооо «русбитех-астра»3914311

Most discussed CVEs — June 2020

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1mattermost—
    159 CVE15 critCVSS 6.5
    NEW
    mattermost server (142) · mattermost desktop (7) · mattermost mobile (6)
  • 2google—
    141 CVE15 critCVSS 7.0
    NEWPoC 3
    android (122) · chrome (16) · google chrome (7)
  • 3сообщество свободного программного обеспечения—
    133 CVE7 critCVSS 6.5
    NEWKEV 1Nuclei 11PoC 21
    debian gnu/linux (112) · libvncserver (13) · linux (10)
  • 4microsoft—
    130 CVECVSS 7.5
    NEWKEV 1PoC 6
    windows 10 (94) · windows 10 version 1903 for x64-based systems (91) · windows server 2016 (91)
  • 5adobe—
    112 CVE11 critCVSS 7.3
    NEW
    adobe acrobat document cloud (24) · adobe acrobat reader 2015 (24) · adobe acrobat reader 2017 (24)
  • 6cisco—
    108 CVE7 critCVSS 6.9
    NEWKEV 1PoC 94
    ios xe (28) · cisco ios xe (27) · ios (18)
  • 7debian—
    90 CVE2 critCVSS 6.1
    NEWKEV 1Nuclei 12PoC 13
    debian linux (90)
  • 8go—
    90 CVE11 critCVSS 6.5
    NEWNuclei 4PoC 4
    github.com/mattermost/mattermost-server (62) · github.com/grafana/grafana (4) · github.com/hashicorp/consul (4)
  • 9canonical—
    87 CVE2 critCVSS 5.9
    NEWNuclei 3PoC 14
    ubuntu linux (76) · ubuntu (41)
  • 10ооо «русбитех-астра»—
    87 CVE4 critCVSS 6.3
    NEWNuclei 4PoC 11
    astra linux special edition (77) · astra linux special edition для «эльбрус» (49) · astra linux common edition (46)
  • 11fedoraproject—
    82 CVE5 critCVSS 6.2
    NEWKEV 1Nuclei 9PoC 7
    fedora (82)
  • 12opensuse—
    80 CVE7 critCVSS 6.6
    NEWNuclei 4PoC 14
    leap (77) · backports sle (7) · opensuse leap 15.1 (4)
  • 13ао «концерн вниинс»—
    66 CVE3 critCVSS 6.3
    NEWNuclei 3PoC 9
    ос он «стрелец» (66)
  • 14apple—
    63 CVE2 critCVSS 7.6
    NEWKEV 3
    macos (45) · ipados (44) · ios (44)
  • 15novell inc.—
    56 CVE3 critCVSS 6.6
    NEWNuclei 3PoC 8
    opensuse leap (37) · suse linux enterprise server (22) · suse linux enterprise server for sap applications (17)
  • 16ibm—
    53 CVE7 critCVSS 7.0
    NEW
    security guardium (10) · spectrum protect plus (6) · security secret server (6)
  • 17redhat—
    49 CVE3 critCVSS 6.9
    NEWNuclei 1PoC 5
    red hat enterprise linux (22) · red hat satellite (6) · red hat process automation (4)
  • 18foxitsoftware—
    48 CVE9 critCVSS 7.7
    NEW
    phantompdf (41) · reader (25) · foxit studio photo (3)
  • 19packagist—
    47 CVE12 critCVSS 7.8
    NEWNuclei 3PoC 14
    magento/community-edition (16) · magento/core (16) · magento/project-community-edition (14)
  • 20qualcomm—
    45 CVE13 critCVSS 8.3
    NEW
    qcs605 firmware (35) · sm8150 firmware (35) · sdm845 firmware (32)
  • 21qualcomm, inc.—
    45 CVE13 critCVSS 8.1
    NEW
    snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables (6) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking (4) · snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables (4)
  • 22ао "нппкт"—
    43 CVE1 critCVSS 5.9
    NEWPoC 8
    осон основа оnyx (43)
  • 23fedora project—
    41 CVE2 critCVSS 6.0
    NEWKEV 1Nuclei 7PoC 4
    fedora (41)
  • 24zyxel—
    39 CVE9 critCVSS 7.0
    NEWPoC 20
    cloudcnm secumanager (35) · cloud cnm secumanager (2) · wap6806 firmware (1)
  • 25ао «ивк»—
    39 CVECVSS 6.0
    NEWNuclei 1PoC 4
    альт 8 сп (38) · альт сп 10 (1)
  • 26maven—
    37 CVE6 critCVSS 7.3
    NEWKEV 1Nuclei 6PoC 1
    com.fasterxml.jackson.core:jackson-databind (5) · com.liferay.portal:release.portal.bom (2) · org.jenkins-ci.plugins:swarm (2)
  • 27intel—
    32 CVE2 critCVSS 6.0
    NEWNuclei 6
    active management technology firmware (11) · active management technology (11) · converged security management engine firmware (7)
  • 28netapp—
    31 CVE2 critCVSS 5.9
    NEWNuclei 3PoC 3
    steelstore cloud integrated storage (15) · active iq unified manager (10) · cloud backup (5)
  • 29npm—
    28 CVE7 critCVSS 7.4
    NEWNuclei 1PoC 8
    jsrsasign (4) · apollo-server (1) · apollo-server-azure-functions (1)
  • 30oracle—
    22 CVE1 critCVSS 7.3
    NEWNuclei 3PoC 2
    sun zfs storage appliance kit (8) · communications diameter signaling router (7) · enterprise manager ops center (7)
  • 31schneider-electric—
    21 CVE5 critCVSS 8.0
    NEW
    easergy t300 firmware (11) · ecostruxure operator terminal expert (4) · mtn6260-0410 firmware (2)
  • 32atlassian—
    20 CVE1 critCVSS 5.7
    NEW
    jira (10) · jira software data center (9) · jira server (9)
  • 33treck—
    20 CVE4 critCVSS 6.6
    NEWKEV 1PoC 9
    tcp\/ip (20)
  • 34gitlab—
    19 CVECVSS 6.5
    NEWNuclei 3
    gitlab (18) · gitlab-vscode-extension (1)
  • 35pypi—
    19 CVE2 critCVSS 6.8
    NEWNuclei 2
    pillow (5) · django (2) · django-sendfile2 (1)
  • 36siemens—
    19 CVE2 critCVSS 6.8
    NEW
    simatic itc1500 pro firmware (12) · simatic itc2200 pro firmware (12) · simatic itc1900 firmware (12)
  • 37treck inc.—
    19 CVE4 critCVSS 6.7
    NEWKEV 1PoC 9
    treck tcp/ip (19)
  • 38netgear—
    18 CVECVSS 8.5
    NEWPoC 1
    rbk852 firmware (16) · rbk752 firmware (16) · rbk853 firmware (16)
  • 39schneider electric—
    17 CVE4 critCVSS 8.2
    NEW
    easergy t300 (hu250) (11) · mtn6260-0410 (2) · mtn6501-0001 (2)
  • 40baxter—
    16 CVE7 critCVSS 7.5
    NEW
    em1200 firmware (6) · em2400 firmware (6) · sigma spectrum infusion system firmware (6)
  • 41magento—
    16 CVE10 critCVSS 8.6
    NEW
    magento (16)
  • 42hp—
    13 CVE3 critCVSS 8.6
    NEWKEV 1PoC 7
    hp ilo 4 (7) · hp integrated lights-out 5 (ilo 5) (7) · hp integrated lights-out 3 (ilo 3) (7)
  • 43huawei—
    13 CVE1 critCVSS 5.7
    NEWPoC 1
    p30 firmware (3) · secospace usg6600 firmware (3) · nip6800 firmware (2)
  • 44vmware—
    13 CVECVSS 6.4
    NEWKEV 1Nuclei 1PoC 3
    esxi (10) · fusion (10) · vmware esxi (10)
  • 45apache—
    12 CVE5 critCVSS 7.9
    NEWNuclei 5PoC 1
    tomcat (2) · shiro (1) · activemq artemis (1)
  • 46mobile industrial robots a/s—
    12 CVE7 critCVSS 8.5
    NEWPoC 2
    mir100 (12)
  • 47nvidia—
    12 CVECVSS 6.8
    NEW
    nvidia vgpu software (6) · nvidia gpu display driver (6) · quadro firmware (5)
  • 48sap—
    12 CVE3 critCVSS 7.5
    NEW
    solution manager (2) · commerce (2) · netweaver application server abap (2)
  • 49sap se—
    12 CVE3 critCVSS 7.5
    NEW
    sap commerce (2) · sap commerce (data hub) (1) · sap erp (statutory reporting for insurance companies) (1)
  • 50uvd-robots—
    12 CVE7 critCVSS 8.5
    NEWPoC 2
    uvd robots firmware (7) · uvd firmware (5)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79175—
2CWE-787164—
3CWE-125125—
4CWE-20107—
5CWE-11940—
6CWE-7839—
7CWE-2238—
8CWE-79838—
9CWE-20036—
10CWE-73235—
11CWE-27634—
12CWE-7733—
13CWE-41632—
14CWE-19030—
15CWE-35230—
16CWE-86230—
17CWE-12028—
18CWE-47628—
19CWE-28727—
20CWE-8927—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems402 CVE
    86 crit57 KEV35 vendorsCVSS 7.8
    fedora (123) · debian gnu/linux (112) · debian linux (90)
  • OSS Libraries348 CVE
    72 crit4 KEV74 vendorsCVSS 7.8
    tcp\/ip (20) · freerdp (18) · jackson-databind (8)
  • Networking Infrastructure249 CVE
    70 crit8 KEV49 vendorsCVSS 7.9
    ios xe (28) · cisco ios xe (27) · treck tcp/ip (19)
  • Enterprise Software232 CVE
    470 crit6 KEV55 vendorsCVSS 7.9
    steelstore cloud integrated storage (15) · active iq unified manager (10) · jira (10)
  • Mobile Apps217 CVE
    46 crit29 KEV5 vendorsCVSS 7.6
    android (124) · chrome (16) · google chrome (7)
  • Communications214 CVE
    26 crit2 KEV31 vendorsCVSS 9.8
    mattermost server (142) · libvncserver (10) · mattermost desktop (7)
  • Consumer Software185 CVE
    58 crit27 vendorsCVSS 8.7
    phantompdf (41) · adobe bridge (34) · reader (25)
  • Web & CMS Plugins125 CVE
    27 crit56 vendorsCVSS 8.3
    navigate cms (10) · lexiglot (9) · wordpress (9)
  • Hardware Firmware121 CVE
    527 crit22 vendorsCVSS 8.3
    qcs605 firmware (35) · sm8150 firmware (35) · sdm845 firmware (32)
  • ICS / OT / IoT105 CVE
    122 crit42 vendorsCVSS 8.3
    easergy t300 (hu250) (11) · easergy t300 firmware (11) · ecostruxure operator terminal expert (5)
  • Security Products67 CVE
    9 crit4 KEV32 vendorsCVSS 7.3
    mcafee virusscan enterprise (3) · mcafee virusscan enterprise (vse) (3) · virusscan enterprise (3)
  • Cloud & SaaS61 CVE
    4 crit1 KEV27 vendorsCVSS 7.6
    vmware esxi (20) · cloud foundation (10) · esxi (10)
  • DevTools & CI37 CVE
    2 crit10 vendorsCVSS 6.7
    gitlab (18) · github (1) · github enterprise server (1)
  • Databases35 CVE
    2 crit11 vendorsCVSS 7.7
    enterprise manager ops center (10) · communications calendar server (8) · communications diameter signaling router (8)
  • AI / ML5 CVE
    1 vendorsCVSS 6.8
    ceph (2) · cni network plugins (1) · indy-node (1)
  • Unclassified60 CVE
    7 crit40 vendorsCVSS 7.0
    mk-auth (5) · bsa radar (4) · nextgen dvr firmware (4)
Weakness × Sector

Which weaknesses hit which solution categories in June 2020

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write125Out-of-bounds Read20Improper Input Validation119Memory Buffer Bounds78OS Command Injection22Path Traversal798Hard-coded Credentials200Information Exposure732Incorrect PermissionsOperating Systems18637037111232OSS Libraries41213110103101312Networking Infrastructure10321027182341745Consumer Software55830661114Communications22931271122Enterprise Software56872236242Hardware Firmware21621148121Web & CMS Plugins5212372ICS / OT / IoT1925141341Security Products1521413423