month report
August 2020
Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
August 2020 closed with 1,297 published CVEs. 129 criticals, microsoft led volume, mostly via windows 10 version 2004. Top weakness class — CWE-79 (153 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
1,297
— MoM— YoY
Severity mix
129 / 512
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
4.4%
57 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
2023.3
n=57
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
447
n=10
Detection gap
KEV pressure, no Nuclei coverage
August 2020 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 3microsoft121 CVE
- KEV 1adobe28 CVE
- KEV 1ао "нппкт"9 CVE
Weakness × Vendor
What's spreading where in August 2020
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
79XSS787Out-of-bounds Write20Improper Input Validation125Out-of-bounds Read287Improper Authentication120Buffer Overflow22Path Traversal78OS Command Injection89SQL Injection269Improper Privilege Mgmtmicrosoft3121microsoft corp3121ibm107321112сообщество свободного программного обеспечения116246322ооо «русбитех-астра»116246222canonical1513612debian15156321canonical ltd.1513612ао «концерн вниинс»1614621intel156359cisco8113221cisco systems inc.8113221
Most discussed CVEs — August 2020
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #1microsoft121 CVE
- #2ibm74 CVE
- #3сообщество свободного программного обеспечения74 CVE
- #4ооо «русбитех-астра»72 CVE
- #5canonical66 CVE
- #6debian59 CVE
- #7ао «концерн вниинс»55 CVE
- #8cisco53 CVE
- #9intel52 CVE
- #10npm48 CVE
Top vendors
Ranked by distinct CVE count this period.
- 121 CVE1 critCVSS 7.5NEWKEV 3PoC 7windows 10 version 2004 (86) · windows 10 1909 (86) · windows 10 (86)
- 74 CVE4 critCVSS 6.3NEWsecurity guardium data encryption (13) · guardium data encryption (13) · guardium for cloud key management (12)
- 74 CVE5 critCVSS 6.6NEWKEV 1Nuclei 5PoC 24debian gnu/linux (70) · linux (2) · net-snmp (2)
- 72 CVE3 critCVSS 6.0NEWKEV 1Nuclei 3PoC 23astra linux special edition (60) · astra linux special edition для «эльбрус» (52) · astra linux common edition (17)
- 66 CVE1 critCVSS 6.2NEWKEV 1Nuclei 4PoC 26ubuntu linux (61) · ubuntu (57) · apport (2)
- 59 CVE5 critCVSS 6.4NEWKEV 1Nuclei 5PoC 24debian linux (59)
- 55 CVE2 critCVSS 6.4NEWKEV 1Nuclei 3PoC 21ос он «стрелец» (55)
- 53 CVE2 critCVSS 6.8NEWKEV 2Nuclei 4PoC 52nx-os (8) · cisco webex meetings (7) · data center network manager (7)
- 52 CVECVSS 7.5NEWintel server board s2600st (24) · intel server board s2600bp (24) · intel server board s2600wf (24)
- 48 CVE11 critCVSS 8.4NEWPoC 6keystone (2) · highcharts (2) · tinymce (2)
- 43 CVE11 critCVSS 7.5NEWPoC 1android (40) · asylo (2) · go-tpm (1)
- 42 CVE3 critCVSS 7.0NEWKEV 1Nuclei 3PoC 13fedora (41) · selinux-policy (1)
- 34 CVE3 critCVSS 7.5NEWKEV 1Nuclei 3PoC 11leap (33) · backports sle (7) · opensuse leap 15.1 (2)
- 30 CVE3 critCVSS 7.1NEWNuclei 4PoC 3red hat enterprise linux (9) · cloudforms management engine (8) · cloudforms (5)
- 29 CVE3 critCVSS 7.0NEWKEV 1Nuclei 3PoC 11opensuse leap (27) · suse linux enterprise server (4) · suse linux enterprise desktop (2)
- 28 CVECVSS 6.7NEWKEV 1acrobat dc (26) · acrobat reader dc (26) · adobe acrobat and reader (26)
- 26 CVECVSS 5.7NEWPoC 15ghostscript (25) · mujs (1)
- 25 CVECVSS 5.6NEWPoC 14ghostscript (25)
- 24 CVE3 critCVSS 7.3NEWPoC 4альт 8 сп (24)
- 21 CVECVSS 7.0NEWPoC 1big-ip application security manager (14) · big-ip access policy manager (13) · big-ip advanced firewall manager (12)
- 21 CVE2 critCVSS 7.0NEWNuclei 2PoC 4org.jenkins-ci.main:jenkins-core (3) · org.jenkins-ci.plugins:pipeline-maven (3) · net.sf.mpxj:mpxj (1)
- 16 CVE3 critCVSS 7.1NEWKEV 1Nuclei 4PoC 8fedora (16)
- 16 CVE1 critCVSS 7.0NEWPoC 4go.etcd.io/etcd (3) · github.com/aws/aws-sdk-go (2) · github.com/hashicorp/vault (2)
- 16 CVE1 critCVSS 6.6NEWfusioncompute (6) · p30 pro firmware (4) · p30 firmware (3)
- 16 CVECVSS 6.6NEWyoutrack (7) · teamcity (6) · toolbox (1)
- 16 CVE1 critCVSS 6.5NEWNuclei 4PoC 11rosa virtualization 3.0 (14) · rosa virtualization (5) · роса хром (1)
- 15 CVECVSS 5.9NEWPoC 8dbhcms (15)
- 15 CVECVSS 7.0NEWfirefox (13) · firefox esr (10) · thunderbird (9)
- 15 CVE2 critCVSS 7.7NEWKEV 1Nuclei 4PoC 7zfs storage appliance kit (5) · enterprise manager ops center (5) · hyperion infrastructure technology (5)
- 15 CVE1 critCVSS 6.9NEWPoC 4baserproject/basercms (3) · codiad/codiad (3) · dolibarr/dolibarr (2)
- 13 CVE1 critCVSS 6.4NEWgitlab (12) · gitlab runner (1) · runner (1)
- 13 CVE1 critCVSS 7.5NEWNuclei 2PoC 7steelstore cloud integrated storage (5) · active iq unified manager (4) · cloud backup (3)
- 13 CVECVSS 7.6NEWdesktop (13) · parallels desktop (13)
- 13 CVE2 critCVSS 6.6NEWsap netweaver (5) · netweaver application server abap (3) · abap platform (3)
- 13 CVE2 critCVSS 6.8NEWsap netweaver (abap server) and abap platform (3) · sap netweaver (knowledge management) (2) · sap adaptive server enterprise (1)
- 12 CVE3 critCVSS 8.0NEWPoC 2scalyr-agent-2 (2) · openapi-python-client (2) · red-discordbot (2)
- 12 CVE1 critCVSS 6.0NEWaleos (12)
- 11 CVECVSS 5.5NEWdata loss prevention (8) · dlp epo extension (6) · total protection (2)
- 10 CVE1 critCVSS 8.6NEWqconvergeconsole (10)
- 9 CVECVSS 5.9NEWPoC 3jenkins pipeline maven integration plugin (3) · jenkins (3) · pipeline maven integration (3)
- 9 CVECVSS 6.5NEWKEV 1PoC 2осон основа оnyx (9)
- 8 CVE2 critCVSS 7.9NEWNuclei 5PoC 3http server (4) · skywalking (1) · solr (1)
- 8 CVECVSS 7.2NEWtpeditor (5) · cncsoft screeneditor (3)
- 8 CVECVSS 7.0NEWfoxit studio photo (6) · studio photo (6) · phantompdf (2)
- 7 CVE1 critCVSS 7.8NEWwebaccess\/hmi designer (6) · iview (1)
- 7 CVE1 critCVSS 7.1NEWNuclei 5PoC 3http server (5) · traffic server (1) · shiro (1)
- 7 CVECVSS 5.5NEWPoC 1suresigns vs4 (3) · suresigns vs4 firmware (3) · dtr3502bfta dvb-t2 firmware (2)
- 7 CVECVSS 6.6NEWgraphics agent (3) · pcoip standard agent (3) · cloud access connector legacy (2)
- 7 CVE2 critCVSS 7.5NEWNuclei 2api manager (7) · identity server analytics (5) · api manager analytics (5)
- 6 CVECVSS 6.4NEWetcd (6)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 121 | 1 | 3 | · | NEWKEV 3PoC 7 | windows 10 version 2004 (86) · windows 10 1909 (86) · windows 10 (86) | — | |
| 2 | ibm | 74 | 4 | · | · | NEW | security guardium data encryption (13) · guardium data encryption (13) · guardium for cloud key management (12) | — | |
| 3 | сообщество свободного программного обеспечения | 74 | 5 | 1 | 5 | NEWKEV 1Nuclei 5PoC 24 | debian gnu/linux (70) · linux (2) · net-snmp (2) | — | |
| 4 | ооо «русбитех-астра» | 72 | 3 | 1 | 3 | NEWKEV 1Nuclei 3PoC 23 | astra linux special edition (60) · astra linux special edition для «эльбрус» (52) · astra linux common edition (17) | — | |
| 5 | canonical | 66 | 1 | 1 | 4 | NEWKEV 1Nuclei 4PoC 26 | ubuntu linux (61) · ubuntu (57) · apport (2) | — | |
| 6 | debian | 59 | 5 | 1 | 5 | NEWKEV 1Nuclei 5PoC 24 | debian linux (59) | — | |
| 7 | ао «концерн вниинс» | 55 | 2 | 1 | 3 | NEWKEV 1Nuclei 3PoC 21 | ос он «стрелец» (55) | — | |
| 8 | cisco | 53 | 2 | 2 | 4 | NEWKEV 2Nuclei 4PoC 52 | nx-os (8) · cisco webex meetings (7) · data center network manager (7) | — | |
| 9 | intel | 52 | · | · | · | NEW | intel server board s2600st (24) · intel server board s2600bp (24) · intel server board s2600wf (24) | — | |
| 10 | npm | 48 | 11 | · | · | NEWPoC 6 | keystone (2) · highcharts (2) · tinymce (2) | — | |
| 11 | 43 | 11 | · | · | NEWPoC 1 | android (40) · asylo (2) · go-tpm (1) | — | ||
| 12 | fedoraproject | 42 | 3 | 1 | 3 | NEWKEV 1Nuclei 3PoC 13 | fedora (41) · selinux-policy (1) | — | |
| 13 | opensuse | 34 | 3 | 1 | 3 | NEWKEV 1Nuclei 3PoC 11 | leap (33) · backports sle (7) · opensuse leap 15.1 (2) | — | |
| 14 | redhat | 30 | 3 | · | 4 | NEWNuclei 4PoC 3 | red hat enterprise linux (9) · cloudforms management engine (8) · cloudforms (5) | — | |
| 15 | novell inc. | 29 | 3 | 1 | 3 | NEWKEV 1Nuclei 3PoC 11 | opensuse leap (27) · suse linux enterprise server (4) · suse linux enterprise desktop (2) | — | |
| 16 | adobe | 28 | · | 1 | · | NEWKEV 1 | acrobat dc (26) · acrobat reader dc (26) · adobe acrobat and reader (26) | — | |
| 17 | artifex | 26 | · | · | · | NEWPoC 15 | ghostscript (25) · mujs (1) | — | |
| 18 | artifex software inc. | 25 | · | · | · | NEWPoC 14 | ghostscript (25) | — | |
| 19 | ао «ивк» | 24 | 3 | · | · | NEWPoC 4 | альт 8 сп (24) | — | |
| 20 | f5 | 21 | · | · | · | NEWPoC 1 | big-ip application security manager (14) · big-ip access policy manager (13) · big-ip advanced firewall manager (12) | — | |
| 21 | maven | 21 | 2 | · | 2 | NEWNuclei 2PoC 4 | org.jenkins-ci.main:jenkins-core (3) · org.jenkins-ci.plugins:pipeline-maven (3) · net.sf.mpxj:mpxj (1) | — | |
| 22 | fedora project | 16 | 3 | 1 | 4 | NEWKEV 1Nuclei 4PoC 8 | fedora (16) | — | |
| 23 | go | 16 | 1 | · | · | NEWPoC 4 | go.etcd.io/etcd (3) · github.com/aws/aws-sdk-go (2) · github.com/hashicorp/vault (2) | — | |
| 24 | huawei | 16 | 1 | · | · | NEW | fusioncompute (6) · p30 pro firmware (4) · p30 firmware (3) | — | |
| 25 | jetbrains | 16 | · | · | · | NEW | youtrack (7) · teamcity (6) · toolbox (1) | — | |
| 26 | ао «нтц ит роса» | 16 | 1 | · | 4 | NEWNuclei 4PoC 11 | rosa virtualization 3.0 (14) · rosa virtualization (5) · роса хром (1) | — | |
| 27 | dbhcms project | 15 | · | · | · | NEWPoC 8 | dbhcms (15) | — | |
| 28 | mozilla | 15 | · | · | · | NEW | firefox (13) · firefox esr (10) · thunderbird (9) | — | |
| 29 | oracle | 15 | 2 | 1 | 4 | NEWKEV 1Nuclei 4PoC 7 | zfs storage appliance kit (5) · enterprise manager ops center (5) · hyperion infrastructure technology (5) | — | |
| 30 | packagist | 15 | 1 | · | · | NEWPoC 4 | baserproject/basercms (3) · codiad/codiad (3) · dolibarr/dolibarr (2) | — | |
| 31 | gitlab | 13 | 1 | · | · | NEW | gitlab (12) · gitlab runner (1) · runner (1) | — | |
| 32 | netapp | 13 | 1 | · | 2 | NEWNuclei 2PoC 7 | steelstore cloud integrated storage (5) · active iq unified manager (4) · cloud backup (3) | — | |
| 33 | parallels | 13 | · | · | · | NEW | desktop (13) · parallels desktop (13) | — | |
| 34 | sap | 13 | 2 | · | · | NEW | sap netweaver (5) · netweaver application server abap (3) · abap platform (3) | — | |
| 35 | sap se | 13 | 2 | · | · | NEW | sap netweaver (abap server) and abap platform (3) · sap netweaver (knowledge management) (2) · sap adaptive server enterprise (1) | — | |
| 36 | pypi | 12 | 3 | · | · | NEWPoC 2 | scalyr-agent-2 (2) · openapi-python-client (2) · red-discordbot (2) | — | |
| 37 | sierrawireless | 12 | 1 | · | · | NEW | aleos (12) | — | |
| 38 | mcafee | 11 | · | · | · | NEW | data loss prevention (8) · dlp epo extension (6) · total protection (2) | — | |
| 39 | marvell | 10 | 1 | · | · | NEW | qconvergeconsole (10) | — | |
| 40 | jenkins | 9 | · | · | · | NEWPoC 3 | jenkins pipeline maven integration plugin (3) · jenkins (3) · pipeline maven integration (3) | — | |
| 41 | ао "нппкт" | 9 | · | 1 | · | NEWKEV 1PoC 2 | осон основа оnyx (9) | — | |
| 42 | apache | 8 | 2 | · | 5 | NEWNuclei 5PoC 3 | http server (4) · skywalking (1) · solr (1) | — | |
| 43 | deltaww | 8 | · | · | · | NEW | tpeditor (5) · cncsoft screeneditor (3) | — | |
| 44 | foxitsoftware | 8 | · | · | · | NEW | foxit studio photo (6) · studio photo (6) · phantompdf (2) | — | |
| 45 | advantech | 7 | 1 | · | · | NEW | webaccess\/hmi designer (6) · iview (1) | — | |
| 46 | apache software foundation | 7 | 1 | · | 5 | NEWNuclei 5PoC 3 | http server (5) · traffic server (1) · shiro (1) | — | |
| 47 | philips | 7 | · | · | · | NEWPoC 1 | suresigns vs4 (3) · suresigns vs4 firmware (3) · dtr3502bfta dvb-t2 firmware (2) | — | |
| 48 | teradici | 7 | · | · | · | NEW | graphics agent (3) · pcoip standard agent (3) · cloud access connector legacy (2) | — | |
| 49 | wso2 | 7 | 2 | · | 2 | NEWNuclei 2 | api manager (7) · identity server analytics (5) · api manager analytics (5) | — | |
| 50 | etcd | 6 | · | · | · | NEW | etcd (6) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems278 CVE106 crit117 KEV37 vendorsCVSS 8.5debian gnu/linux (70) · ubuntu linux (61) · astra linux special edition (60)
- OSS Libraries189 CVE29 crit48 vendorsCVSS 9.1ghostscript (25) · lua (5) · wolfssl (4)
- Enterprise Software169 CVE43 crit1 KEV46 vendorsCVSS 8.9guardium data encryption (13) · security guardium data encryption (13) · guardium for cloud key management (12)
- Networking Infrastructure116 CVE19 crit9 KEV28 vendorsCVSS 9.1nx-os (15) · cisco data center network manager (14) · cisco webex meetings (13)
- Web & CMS Plugins101 CVE24 crit3 KEV64 vendorsCVSS 9.3dbhcms (15) · http server (9) · basercms (6)
- Consumer Software87 CVE11 KEV15 vendorsCVSS 8.2acrobat dc (26) · acrobat reader dc (26) · adobe acrobat and reader (26)
- Hardware Firmware86 CVE3 crit16 vendorsCVSS 7.9intel server board s2600bp (24) · intel server board s2600st (24) · intel server board s2600wf (24)
- Cloud & SaaS77 CVE13 crit28 vendorsCVSS 7.6desktop (13) · parallels desktop (13) · xenmobile server (5)
- Security Products70 CVE8 crit2 KEV31 vendorsCVSS 8.5data loss prevention (8) · dlp epo extension (6) · deep security manager (4)
- ICS / OT / IoT62 CVE49 crit30 vendorsCVSS 9.6webaccess\/hmi designer (6) · apc easy ups online software (2) · b/m9000 vp (2)
- Mobile Apps61 CVE14 crit4 vendorsCVSS 9.8android (40) · fusioncompute (6) · p30 pro firmware (4)
- DevTools & CI54 CVE1 crit15 vendorsCVSS 6.7youtrack (7) · teamcity (6) · codiad (3)
- Communications35 CVE1 crit25 vendorsCVSS 7.3dovecot (6) · cybermail (4) · open-xchange appsuite (4)
- Databases34 CVE15 crit1 KEV14 vendorsCVSS 8.1enterprise manager ops center (7) · hyperion infrastructure technology (6) · instantis enterprisetrack (6)
- AI / ML2 CVE2 vendorsCVSS 8.2acrn (1) · robot operating system (1)
- Unclassified65 CVE19 crit52 vendorsCVSS 7.0aptra xfs (5) · selfserv atm (5) · da-70254 firmware (4)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 5 | 278 | 106 | 117 | 37 | 255 | 8.5 | debian gnu/linux (70) · ubuntu linux (61) · astra linux special edition (60) |
| OSS Libraries▸ 10 | 189 | 29 | · | 48 | 151 | 9.1 | ghostscript (25) · lua (5) · wolfssl (4) |
| Enterprise Software▸ 7 | 169 | 43 | 1 | 46 | 184 | 8.9 | guardium data encryption (13) · security guardium data encryption (13) · guardium for cloud key management (12) |
| Networking Infrastructure▸ 6 | 116 | 19 | 9 | 28 | 234 | 9.1 | nx-os (15) · cisco data center network manager (14) · cisco webex meetings (13) |
| Web & CMS Plugins▸ 6 | 101 | 24 | 3 | 64 | 70 | 9.3 | dbhcms (15) · http server (9) · basercms (6) |
| Consumer Software▸ 4 | 87 | · | 11 | 15 | 38 | 8.2 | acrobat dc (26) · acrobat reader dc (26) · adobe acrobat and reader (26) |
| Hardware Firmware▸ 5 | 86 | 3 | · | 16 | 359 | 7.9 | intel server board s2600bp (24) · intel server board s2600st (24) · intel server board s2600wf (24) |
| Cloud & SaaS▸ 5 | 77 | 13 | · | 28 | 56 | 7.6 | desktop (13) · parallels desktop (13) · xenmobile server (5) |
| Security Products▸ 5 | 70 | 8 | 2 | 31 | 95 | 8.5 | data loss prevention (8) · dlp epo extension (6) · deep security manager (4) |
| ICS / OT / IoT▸ 6 | 62 | 49 | · | 30 | 127 | 9.6 | webaccess\/hmi designer (6) · apc easy ups online software (2) · b/m9000 vp (2) |
| Mobile Apps▸ 2 | 61 | 14 | · | 4 | 20 | 9.8 | android (40) · fusioncompute (6) · p30 pro firmware (4) |
| DevTools & CI▸ 5 | 54 | 1 | · | 15 | 31 | 6.7 | youtrack (7) · teamcity (6) · codiad (3) |
| Communications▸ 4 | 35 | 1 | · | 25 | 41 | 7.3 | dovecot (6) · cybermail (4) · open-xchange appsuite (4) |
| Databases▸ 3 | 34 | 15 | 1 | 14 | 58 | 8.1 | enterprise manager ops center (7) · hyperion infrastructure technology (6) · instantis enterprisetrack (6) |
| AI / ML▸ 1 | 2 | · | · | 2 | 2 | 8.2 | acrn (1) · robot operating system (1) |
| Unclassified | 65 | 19 | · | 52 | 69 | 7.0 | aptra xfs (5) · selfserv atm (5) · da-70254 firmware (4) |
Weakness × Sector
Which weaknesses hit which solution categories in August 2020
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS787Out-of-bounds Write20Improper Input Validation125Out-of-bounds Read287Improper Authentication120Buffer Overflow22Path Traversal78OS Command Injection89SQL Injection269Improper Privilege MgmtOperating Systems53489266715OSS Libraries2116105272322Enterprise Software3512322124106Networking Infrastructure185153542624Hardware Firmware2575512722Consumer Software11121416111Security Products114526236Web & CMS Plugins481241382ICS / OT / IoT4751634413Cloud & SaaS82222211