CVE Tools
Sign in
month report

July 2021

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

July 2021 closed with 1,650 published CVEs. 187 criticals, oracle led volume, mostly via mysql server. Top weakness class — CWE-79 (263 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,650
— MoM— YoY
Severity mix
187 / 612
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
8.4%
138 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
1698.1
n=138
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
112
n=16
Detection gap

KEV pressure, no Nuclei coverage

July 2021 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in July 2021

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write20Improper Input Validation89SQL Injection125Out-of-bounds Read22Path Traversal78OS Command Injection200Information Exposure120Buffer Overflow269Improper Privilege Mgmtoracle12112сообщество свободного программного обеспечения81834913471oracle corp.oracle corporationmicrosoft corp1113microsoft1113ibm1832111ооо «русбитех-астра»971131fedoraproject2911311siemens124241512netapp1311ао «ивк»2111

Most discussed CVEs — July 2021

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1oracle—
    156 CVE8 critCVSS 6.6
    NEWNuclei 13PoC 5
    mysql server (34) · mysql (33) · e-business suite (13)
  • 2сообщество свободного программного обеспечения—
    136 CVE8 critCVSS 6.9
    NEWKEV 1Nuclei 4PoC 38
    debian gnu/linux (118) · linux (7) · phplist (3)
  • 3microsoft—
    124 CVE3 critCVSS 7.4
    NEWKEV 10Nuclei 2PoC 5
    windows server 2016 (84) · windows server 2019 (80) · windows server 2004 (server core installation) (77)
  • 4ibm—
    74 CVE3 critCVSS 6.0
    NEWPoC 1
    security verify access docker (15) · security verify access (15) · cloud pak for applications (12)
  • 5ооо «русбитех-астра»—
    69 CVE1 critCVSS 5.6
    NEWKEV 2Nuclei 1PoC 13
    astra linux special edition (69) · astra linux special edition для «эльбрус» (9) · astra-openvpn-server (5)
  • 6fedoraproject—
    63 CVE2 critCVSS 6.1
    NEWKEV 1Nuclei 1PoC 14
    fedora (63)
  • 7siemens—
    58 CVECVSS 7.4
    NEWNuclei 1PoC 1
    teamcenter visualization (43) · jt2go (43) · solid edge (4)
  • 8netapp—
    50 CVE1 critCVSS 6.4
    NEWKEV 1Nuclei 1PoC 4
    oncommand insight (39) · active iq unified manager (10) · oncommand workflow automation (6)
  • 9redhat—
    50 CVE2 critCVSS 6.1
    NEWKEV 1Nuclei 2PoC 11
    red hat enterprise linux (43) · red hat software collections (22) · enterprise linux (4)
  • 10ао «ивк»—
    50 CVE2 critCVSS 5.8
    NEWKEV 1Nuclei 3PoC 3
    альт 8 сп (48) · альт сп 10 (2)
  • 11ао "нппкт"—
    48 CVE2 critCVSS 7.0
    NEWKEV 1Nuclei 3PoC 15
    осон основа оnyx (48)
  • 12debian—
    47 CVE2 critCVSS 6.9
    NEWNuclei 1PoC 16
    debian linux (47)
  • 13google—
    33 CVE1 critCVSS 7.4
    NEWKEV 1PoC 1
    android (29) · chrome (4) · google chrome (4)
  • 14qsan—
    30 CVE14 critCVSS 8.2
    NEW
    storage manager (23) · xevo (7) · sanos (7)
  • 15ао «концерн вниинс»—
    29 CVE1 critCVSS 7.0
    NEWKEV 1Nuclei 1PoC 8
    ос он «стрелец» (29)
  • 16maven—
    28 CVE1 critCVSS 6.4
    NEWNuclei 4PoC 1
    org.apache.commons:commons-compress (4) · org.webjars.npm:xlsx (3) · org.apache.tomcat:tomcat (3)
  • 17fedora project—
    27 CVE1 critCVSS 6.7
    NEWKEV 1PoC 5
    fedora (27)
  • 18ооо «ред софт»—
    27 CVE1 critCVSS 6.9
    NEWKEV 1Nuclei 1PoC 7
    ред ос (27)
  • 19nchsoftware—
    26 CVECVSS 5.8
    NEWPoC 26
    axon pbx (10) · quorum (8) · ivm attendant (7)
  • 20cisco—
    25 CVECVSS 6.5
    NEWPoC 24
    cisco identity services engine software (5) · cisco identity services engine (5) · identity services engine (5)
  • 21dell—
    24 CVE5 critCVSS 7.8
    NEW
    emc openmanage enterprise (4) · emc openmanage enterprise-modular (4) · emc unityvsa operating environment (3)
  • 22npm—
    24 CVE4 critCVSS 6.7
    NEWNuclei 1PoC 4
    xlsx (3) · curly-bracket-parser (1) · deepmergefn (1)
  • 23packagist—
    23 CVE4 critCVSS 6.9
    NEWPoC 7
    lavalite/cms (5) · typo3/cms (4) · typo3/cms-core (4)
  • 24qualcomm—
    23 CVE2 critCVSS 7.7
    NEWPoC 1
    wcn3998 firmware (22) · sdx55 firmware (22) · wcn3991 firmware (22)
  • 25qualcomm, inc.—
    23 CVE2 critCVSS 7.2
    NEWPoC 1
    snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables (4) · snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables (3) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking (2)
  • 26schneider-electric—
    23 CVE6 critCVSS 7.8
    NEWNuclei 1
    evlink parking evf2 firmware (13) · evlink parking evw2 firmware (13) · evlink smart wallbox evb1a firmware (13)
  • 27canonical—
    22 CVECVSS 5.3
    NEWPoC 2
    ubuntu (22)
  • 28juniper—
    19 CVE1 critCVSS 7.1
    NEWPoC 18
    junos (15) · junos os evolved (4) · contrail cloud (1)
  • 29juniper networks—
    19 CVE1 critCVSS 7.1
    NEWPoC 18
    junos (15) · junos os (15) · junos os evolved (7)
  • 30linux—
    18 CVE4 critCVSS 8.0
    NEWKEV 1PoC 3
    linux kernel (7) · acrn (6) · tizen (5)
  • 31sap—
    18 CVECVSS 6.0
    NEWNuclei 1PoC 3
    sap netweaver portal (4) · netweaver application server abap (3) · netweaver application server java (3)
  • 32fortinet inc.—
    17 CVE2 critCVSS 7.1
    NEW
    fortimail (9) · fortisandbox (2) · fortiap-s (1)
  • 33samsung mobile—
    17 CVE4 critCVSS 6.9
    NEWPoC 1
    samsung mobile devices (5) · tizen wearable devices (5) · samsung members (3)
  • 34apache—
    16 CVE1 critCVSS 6.7
    NEWNuclei 2PoC 1
    commons compress (4) · tomcat (3) · ant (2)
  • 35apache software foundation—
    16 CVE1 critCVSS 6.9
    NEWNuclei 2
    apache commons compress (4) · commons compress (4) · apache tomcat (3)
  • 36fortinet—
    16 CVE1 critCVSS 6.9
    NEW
    fortimail (9) · fortinet fortimail (9) · fortisandbox (2)
  • 37mikrotik—
    16 CVECVSS 6.5
    NEWPoC 10
    routeros (16)
  • 38schneider electric—
    16 CVE6 critCVSS 7.9
    NEWNuclei 1
    evlink city evc1s22p4 (8) · evlink smart wallbox evb1a (8) · evlink parking evw2 (8)
  • 39nextcloud—
    15 CVECVSS 5.1
    NEW
    security-advisories (15) · nextcloud server (11) · nextcloud (1)
  • 40nvidia—
    15 CVECVSS 6.7
    NEW
    gpu display driver (8) · nvidia gpu display driver (8) · nvidia virtual gpu software (7)
  • 41unknown—
    15 CVE1 critCVSS 6.1
    NEWNuclei 15PoC 7
    sign-up sheets (2) · yop poll (1) · joomsport – for sports: team & league, football, hockey & more (1)
  • 42arubanetworks—
    14 CVECVSS 6.6
    NEW
    clearpass policy manager (11) · aos-cx firmware (3)
  • 43flowpaper—
    13 CVECVSS 5.5
    NEWPoC 5
    pdf2json (13)
  • 44sap se—
    13 CVECVSS 6.1
    NEWNuclei 1PoC 3
    sap netweaver as abap and abap platform (2) · sap 3d visual enterprise viewer (2) · sap crm (1)
  • 45ао «нтц ит роса»—
    13 CVECVSS 6.0
    NEWNuclei 1PoC 3
    роса хром (9) · роса кобальт (3) · rosa virtualization (1)
  • 46novell inc.—
    12 CVECVSS 6.3
    NEWPoC 3
    opensuse leap (6) · suse linux enterprise server (5) · opensuse factory (1)
  • 47phplist—
    12 CVE1 critCVSS 5.7
    NEWPoC 5
    phplist (12)
  • 48cmsmadesimple—
    11 CVECVSS 5.3
    NEWPoC 6
    cms made simple (11)
  • 49gitlab—
    11 CVECVSS 5.4
    NEWNuclei 1PoC 1
    gitlab (11)
  • 50gitlab inc.—
    11 CVECVSS 5.4
    NEWNuclei 1PoC 1
    gitlab (11)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79263—
2CWE-78799—
3CWE-2064—
4CWE-8963—
5CWE-12545—
6CWE-2245—
7CWE-7837—
8CWE-20036—
9CWE-12033—
10CWE-26929—
11CWE-41628—
12CWE-47625—
13CWE-35223—
14CWE-79823—
15CWE-28721—
16CWE-19020—
17CWE-43419—
18CWE-28418—
19CWE-91818—
20CWE-86216—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems424 CVE
    63 crit264 KEV35 vendorsCVSS 7.5
    debian gnu/linux (118) · fedora (90) · astra linux special edition (69)
  • Enterprise Software341 CVE
    70 crit25 KEV63 vendorsCVSS 8.0
    oncommand insight (39) · security verify access (15) · security verify access docker (15)
  • Web & CMS Plugins243 CVE
    57 crit130 vendorsCVSS 9.8
    pdf2json (13) · cms made simple (11) · mediawiki (9)
  • OSS Libraries214 CVE
    27 crit95 vendorsCVSS 7.9
    mbed tls (7) · bento4 (6) · eclipse mosquitto (4)
  • Databases165 CVE
    27 crit12 vendorsCVSS 7.5
    mysql server (61) · mysql (39) · outside in technology (30)
  • Networking Infrastructure140 CVE
    51 crit1 KEV31 vendorsCVSS 8.4
    junos (30) · junos os evolved (17) · routeros (16)
  • Hardware Firmware93 CVE
    280 crit20 vendorsCVSS 8.1
    storage manager (23) · qts (7) · sanos (7)
  • Security Products88 CVE
    31 crit19 KEV43 vendorsCVSS 7.8
    fortimail (9) · fortinet fortimail (9) · client connector (3)
  • Communications75 CVE
    4 crit30 vendorsCVSS 7.5
    axon pbx (12) · quorum (9) · ivm attendant (7)
  • ICS / OT / IoT59 CVE
    95 crit27 vendorsCVSS 8.9
    evlink city evc1s22p4 firmware (13) · evlink city evc1s7p4 firmware (13) · evlink parking ev.2 firmware (13)
  • Mobile Apps57 CVE
    5 crit2 KEV8 vendorsCVSS 7.1
    android (30) · cx2 firmware (6) · chrome (4)
  • Cloud & SaaS53 CVE
    9 crit25 vendorsCVSS 8.2
    security-advisories (15) · nextcloud server (11) · remotepc (6)
  • Consumer Software40 CVE
    4 crit26 vendorsCVSS 8.6
    autodesk design review (7) · design review (7) · phantompdf (3)
  • DevTools & CI25 CVE
    1 crit13 vendorsCVSS 7.6
    gitlab (22) · enterprise server (1) · fossil (1)
  • AI / ML4 CVE
    1 vendorsCVSS 6.9
    grpc swift (3) · containerd (1)
  • Unclassified85 CVE
    24 crit3 KEV51 vendorsCVSS 7.6
    casap automated enrollment system (7) · metinfo (6) · sharecare (5)
Weakness × Sector

Which weaknesses hit which solution categories in July 2021

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write20Improper Input Validation89SQL Injection125Out-of-bounds Read22Path Traversal78OS Command Injection200Information Exposure120Buffer Overflow269Improper Privilege MgmtOperating Systems2281631313101015Enterprise Software5852212631113Web & CMS Plugins11131324722OSS Libraries2225466635121Hardware Firmware56610610252Databases1111241ICS / OT / IoT1028271532762Security Products1234146223Networking Infrastructure131021311153Communications42131101