CVE Tools
Sign in
month report

January 2021

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

January 2021 closed with 1,970 published CVEs. 202 criticals, oracle led volume, mostly via mysql. Top weakness class — CWE-79 (190 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,970
— MoM— YoY
Severity mix
202 / 695
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
4.6%
90 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
1881.6
n=90
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
361
n=9
Detection gap

KEV pressure, no Nuclei coverage

January 2021 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in January 2021

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write121CWE-12120Improper Input Validation269Improper Privilege Mgmt22Path Traversal125Out-of-bounds Read502Deserialization78OS Command Injection89SQL Injectionoracle21312cisco1861612612127cisco systems inc.1861612612127oracle corp.1oracle corporationсообщество свободного программного обеспечения31815138121ао «нппкт»221413812ао «концерн вниинс»22241811ооо «русбитех-астра»21641381ibm172141microsoft13311microsoft corp1331

Most discussed CVEs — January 2021

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1oracle—
    169 CVE11 critCVSS 7.3
    NEWKEV 1Nuclei 8PoC 9
    mysql (38) · mysql server (38) · vm virtualbox (17)
  • 2cisco—
    156 CVE10 critCVSS 7.0
    NEWPoC 155
    cisco rv130 (74) · cisco small business rv series router firmware (74) · rv110w firmware (73)
  • 3сообщество свободного программного обеспечения—
    120 CVE15 critCVSS 7.2
    NEWKEV 4Nuclei 1PoC 22
    debian gnu/linux (108) · linux (7) · openjpeg (6)
  • 4ао "нппкт"—
    112 CVE14 critCVSS 7.5
    NEWKEV 4Nuclei 1PoC 27
    осон основа оnyx (112)
  • 5ао «концерн вниинс»—
    99 CVE14 critCVSS 7.6
    NEWKEV 4Nuclei 1PoC 19
    ос он «стрелец» (99)
  • 6ооо «русбитех-астра»—
    96 CVE14 critCVSS 6.8
    NEWKEV 4Nuclei 1PoC 15
    astra linux special edition (91) · astra linux special edition для «эльбрус» (34) · astra linux common edition (22)
  • 7microsoft—
    86 CVECVSS 7.5
    NEWKEV 1PoC 2
    windows 10 version 2004 (63) · windows 10 (63) · windows 10 2004 (62)
  • 8ibm—
    84 CVE4 critCVSS 5.6
    NEW
    rhapsody model manager (10) · engineering lifecycle optimization (10) · engineering lifecycle management (10)
  • 9debian—
    82 CVE9 critCVSS 7.4
    NEWKEV 2Nuclei 2PoC 15
    debian linux (82)
  • 10google—
    78 CVE16 critCVSS 7.9
    NEWKEV 3PoC 9
    chrome (46) · google chrome (45) · android (29)
  • 11ао «ивк»—
    76 CVE11 critCVSS 7.6
    NEWKEV 1Nuclei 1PoC 14
    альт 8 сп (71) · альт 8 сп сервер (3) · альт сп 10 (2)
  • 12fedoraproject—
    72 CVE9 critCVSS 6.6
    NEWKEV 2Nuclei 1PoC 10
    fedora (72) · extra packages for enterprise linux (1)
  • 13netapp—
    72 CVE4 critCVSS 5.8
    NEWKEV 1Nuclei 2PoC 7
    oncommand workflow automation (40) · oncommand insight (39) · snapcenter (35)
  • 14redhat—
    57 CVE8 critCVSS 6.5
    NEWKEV 3Nuclei 1PoC 7
    red hat enterprise linux (47) · red hat software collections (11) · enterprise linux (4)
  • 15maven—
    52 CVE6 critCVSS 7.3
    NEWKEV 1Nuclei 5PoC 9
    com.fasterxml.jackson.core:jackson-databind (12) · org.jenkins-ci.main:jenkins-core (11) · com.mikesamuel:json-sanitizer (2)
  • 16novell inc.—
    43 CVE8 critCVSS 8.1
    NEWKEV 2PoC 6
    opensuse leap (43) · suse linux enterprise server (5) · suse linux enterprise server for sap applications (5)
  • 17npm—
    36 CVE4 critCVSS 7.0
    NEWNuclei 2PoC 4
    jointjs (2) · asciitable.js (1) · async-git (1)
  • 18siemens—
    36 CVE2 critCVSS 8.0
    NEW
    jt2go (24) · teamcenter visualization (24) · solid edge se2021 (6)
  • 19canonical—
    34 CVE7 critCVSS 7.7
    NEWKEV 3Nuclei 1PoC 9
    ubuntu (32) · linux kernel (1) · remote-login-service (1)
  • 20crates.io—
    34 CVE4 critCVSS 7.0
    NEWPoC 9
    raw-cpuid (2) · abi_stable (2) · late-static (1)
  • 21qualcomm—
    34 CVE15 critCVSS 8.7
    NEW
    qet5100 (31) · wcd9341 (31) · qca6574a (30)
  • 22qualcomm, inc.—
    34 CVE15 critCVSS 8.3
    NEW
    snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking (9) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables (7) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking (3)
  • 23ао «нтц ит роса»—
    32 CVE1 critCVSS 7.7
    NEWKEV 1Nuclei 1PoC 7
    rosa virtualization (13) · роса хром (13) · роса кобальт (11)
  • 24packagist—
    30 CVE6 critCVSS 7.0
    NEWKEV 2Nuclei 4PoC 10
    moodle/moodle (5) · mautic/core (4) · wp-premium/gravityforms (3)
  • 25sap—
    27 CVE1 critCVSS 7.8
    NEWPoC 3
    3d visual enterprise viewer (16) · business warehouse (3) · commerce cloud (1)
  • 26sap se—
    27 CVE1 critCVSS 7.7
    NEWPoC 3
    sap 3d visual enterprise viewer (16) · sap business warehouse (3) · sap businessobjects business intelligence platform (web intelligence html interface) (1)
  • 27nvidia—
    21 CVECVSS 6.8
    NEW
    virtual gpu manager (10) · nvidia virtual gpu manager (8) · gpu driver (6)
  • 28ооо «ред софт»—
    20 CVE1 critCVSS 7.0
    NEWKEV 1Nuclei 1PoC 1
    ред ос (20)
  • 29apache—
    19 CVE3 critCVSS 7.7
    NEWKEV 1Nuclei 4PoC 2
    activemq artemis (2) · traffic server (2) · flink (2)
  • 30juniper—
    19 CVE1 critCVSS 7.5
    NEWPoC 18
    junos (16) · junos os evolved (3) · junos space (1)
  • 31juniper networks—
    19 CVE1 critCVSS 7.4
    NEWPoC 18
    junos (16) · junos os (16) · junos os evolved (3)
  • 32dell—
    18 CVE4 critCVSS 7.4
    NEW
    emc powerstore firmware (3) · emc unity operating environment (3) · emc unity vsa operating environment (3)
  • 33hpe—
    16 CVECVSS 7.8
    NEW
    cloudline cl3100 gen10 server firmware (16) · cloudline cl4100 gen10 server firmware (16) · cloudline cl5200 gen9 server firmware (16)
  • 34pypi—
    15 CVE2 critCVSS 7.2
    NEWPoC 2
    pillow (3) · pysaml2 (2) · crmsh (1)
  • 35jenkins—
    14 CVECVSS 6.0
    NEW
    jenkins (11) · tracetronic ecu-test (1) · jenkins tics plugin (1)
  • 36mozilla—
    14 CVE1 critCVSS 7.6
    NEWPoC 2
    firefox (14) · firefox esr (8) · thunderbird (8)
  • 37apache software foundation—
    13 CVE3 critCVSS 8.0
    NEWKEV 1Nuclei 4PoC 2
    traffic server (2) · apache flink (2) · apache dolphinscheduler (1)
  • 38fedora project—
    13 CVE1 critCVSS 7.7
    NEWKEV 1Nuclei 1PoC 5
    fedora (13)
  • 39go—
    13 CVECVSS 6.3
    NEWPoC 2
    github.com/tidwall/gjson (2) · github.com/go-vela/compiler (1) · github.com/hashicorp/vault-csi-provider (1)
  • 40k7computing—
    13 CVECVSS 7.1
    NEW
    ultimate security (13) · antivrius (13) · enterprise security (13)
  • 41quest—
    13 CVE1 critCVSS 6.1
    NEWPoC 8
    policy authority for unified communications (13)
  • 42fasterxml—
    12 CVECVSS 8.1
    NEWPoC 5
    jackson-databind (12)
  • 43huawei—
    12 CVE6 critCVSS 7.3
    NEW
    emui (8) · magic ui (8) · cloudengine 5800 firmware (1)
  • 44open-xchange—
    12 CVECVSS 6.1
    NEWNuclei 10PoC 12
    open-xchange appsuite (12)
  • 45foxitsoftware—
    11 CVECVSS 7.7
    NEWPoC 1
    phantompdf (9) · reader (8) · foxit reader (2)
  • 46veritas—
    11 CVE9 critCVSS 9.0
    NEW
    opscenter (2) · desktop and laptop option (2) · netbackup (2)
  • 47ооо «открытая мобильная платформа»—
    11 CVECVSS 7.4
    NEWPoC 1
    ос аврора (8) · sailfish browser (5) · аврора центр (3)
  • 48apple—
    10 CVECVSS 7.5
    NEW
    macos (10) · mac os x (7)
  • 49deltaww—
    10 CVECVSS 7.8
    NEW
    cncsoft-b (4) · dopsoft (2) · tpeditor (2)
  • 50onedev project—
    10 CVE7 critCVSS 9.3
    NEWNuclei 1
    onedev (10)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79190—
2CWE-787186—
3CWE-12171—
4CWE-2059—
5CWE-26953—
6CWE-2245—
7CWE-12542—
8CWE-50239—
9CWE-7839—
10CWE-8937—
11CWE-41633—
12CWE-12028—
13CWE-35228—
14CWE-11926—
15CWE-40024—
16CWE-86320—
17CWE-36218—
18CWE-47618—
19CWE-12217—
20CWE-43417—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems344 CVE
    146 crit58 KEV36 vendorsCVSS 7.9
    осон основа оnyx (112) · debian gnu/linux (108) · ос он «стрелец» (99)
  • Enterprise Software337 CVE
    184 crit7 KEV49 vendorsCVSS 8.1
    oncommand workflow automation (40) · oncommand insight (39) · snapcenter (35)
  • OSS Libraries288 CVE
    43 crit15 KEV82 vendorsCVSS 8.0
    jackson-databind (24) · drawings software development kit (6) · openjpeg (6)
  • Networking Infrastructure230 CVE
    71 crit7 KEV35 vendorsCVSS 8.2
    cisco rv130 (74) · cisco small business rv series router firmware (74) · rv110w firmware (73)
  • Databases175 CVE
    41 crit7 KEV10 vendorsCVSS 9.8
    mysql server (72) · vm virtualbox (51) · mysql (38)
  • Web & CMS Plugins135 CVE
    29 crit4 KEV79 vendorsCVSS 9.6
    moodle (10) · revive adserver (5) · ckeditor (4)
  • Mobile Apps100 CVE
    41 crit6 KEV5 vendorsCVSS 7.7
    chrome (46) · google chrome (45) · android (30)
  • Hardware Firmware94 CVE
    6,757 crit19 vendorsCVSS 8.7
    qet5100 (31) · wcd9341 (31) · qca6574a (30)
  • Security Products82 CVE
    10 crit3 KEV35 vendorsCVSS 8.2
    antivrius (13) · enterprise security (13) · total security (13)
  • Cloud & SaaS64 CVE
    25 crit30 vendorsCVSS 8.6
    brocade fabric operating system firmware (4) · qemu (3) · secure mail (2)
  • ICS / OT / IoT60 CVE
    39 crit1 KEV32 vendorsCVSS 8.0
    kepserver enterprise (6) · v-server (5) · v-simulator (5)
  • Consumer Software49 CVE
    5 crit25 vendorsCVSS 8.5
    phantompdf (9) · reader (8) · magento commerce (4)
  • DevTools & CI48 CVE
    11 crit20 vendorsCVSS 8.7
    onedev (10) · gitlab (5) · git large file storage (1)
  • Communications33 CVE
    4 crit14 vendorsCVSS 7.8
    open-xchange appsuite (12) · dovecot (4) · mutt (2)
  • AI / ML1 CVE
    1 vendorsCVSS 4.5
    jupyterhub (1)
  • Unclassified90 CVE
    25 crit62 vendorsCVSS 7.3
    ос тд аис фссп россии (10) · star practice management (5) · 720p firmware (4)
Weakness × Sector

Which weaknesses hit which solution categories in January 2021

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write121CWE-12120Improper Input Validation269Improper Privilege Mgmt22Path Traversal125Out-of-bounds Read502Deserialization78OS Command Injection89SQL InjectionOperating Systems638211353121222Enterprise Software5118253442028OSS Libraries29281711291784Networking Infrastructure2463612734311197Hardware Firmware2981615122Web & CMS Plugins4912288111Consumer Software438419Databases11111ICS / OT / IoT8286235132Security Products771922632