CVE Tools
Sign in
month report

August 2021

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

August 2021 closed with 2,317 published CVEs. 253 criticals, сообщество свободного программного обеспечения led volume, mostly via debian gnu/linux. Top weakness class — CWE-79 (322 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
2,317
— MoM— YoY
Severity mix
253 / 932
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
9.8%
227 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
1663.4
n=227
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
230
n=22
Detection gap

KEV pressure, no Nuclei coverage

August 2021 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in August 2021

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write125Out-of-bounds Read416Use After Free89SQL Injection352CSRF20Improper Input Validation362Race Condition476NULL Pointer Dereference22Path Traversalсообщество свободного программного обеспечения11181113255106apple119157311google19222312111fedoraproject4115203641debian56584313ао «нппкт»110694515ооо «русбитех-астра»1137275123crates.io21333pypi721326111adobe220241133adobe systems inc.219241033microsoft corp266

Most discussed CVEs — August 2021

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    227 CVE10 critCVSS 7.1
    KEV 3Nuclei 12PoC 57
    debian gnu/linux (202) · gpac (35) · linux (21)
  • 2apple—
    154 CVE3 critCVSS 7.0
    KEV 8PoC 7
    macos (130) · iphone os (106) · ipados (102)
  • 3google—
    137 CVE2 critCVSS 7.5
    KEV 1PoC 12
    tensorflow (58) · chrome (45) · google chrome (45)
  • 4fedoraproject—
    123 CVE5 critCVSS 7.2
    KEV 3Nuclei 5PoC 23
    fedora (123) · extra packages for enterprise linux (1)
  • 5debian—
    122 CVE3 critCVSS 7.5
    KEV 3Nuclei 9PoC 31
    debian linux (122)
  • 6ао "нппкт"—
    117 CVE4 critCVSS 7.6
    KEV 1Nuclei 4PoC 30
    осон основа оnyx (117)
  • 7ооо «русбитех-астра»—
    113 CVE3 critCVSS 7.3
    KEV 2Nuclei 5PoC 27
    astra linux special edition (109) · astra linux special edition для «эльбрус» (19) · astra linux common edition (11)
  • 8unknown—
    94 CVE4 critCVSS 6.1
    NEWNuclei 94PoC 42
    workreap (3) · photo gallery by 10web – mobile-friendly image gallery (2) · user registration & user profile – profile builder (2)
  • 9crates.io—
    90 CVE13 critCVSS 8.0
    PoC 18
    cgc (3) · libpulse-binding (3) · ckb (3)
  • 10pypi—
    86 CVE11 critCVSS 6.8
    Nuclei 1PoC 3
    tensorflow-gpu (58) · tensorflow (58) · tensorflow-cpu (58)
  • 11adobe—
    79 CVECVSS 6.5
    acrobat reader (22) · acrobat dc (22) · acrobat reader dc (22)
  • 12microsoft—
    63 CVE4 critCVSS 7.8
    KEV 5PoC 6
    windows server 2019 (27) · windows server 2016 (26) · windows 10 version 20h2 (25)
  • 13tensorflow—
    58 CVE1 critCVSS 6.6
    NEW
    tensorflow (58)
  • 14packagist—
    55 CVE3 critCVSS 7.1
    KEV 1Nuclei 6PoC 16
    shopware/platform (5) · shopware/core (5) · mautic/core (5)
  • 15ао «ивк»—
    55 CVE2 critCVSS 7.2
    KEV 1Nuclei 1PoC 10
    альт 8 сп (42) · альт сп 10 (10) · альт 8 сп рабочая станция (7)
  • 16maven—
    51 CVE2 critCVSS 6.7
    KEV 1Nuclei 5PoC 5
    com.liferay.portal:release.dxp.bom (17) · com.liferay.portal:release.portal.bom (14) · com.thoughtworks.xstream:xstream (14)
  • 17oracle—
    48 CVE2 critCVSS 7.9
    KEV 1Nuclei 8PoC 13
    communications cloud native core policy (16) · commerce guided search (16) · communications cloud native core binding support function (16)
  • 18redhat—
    46 CVE2 critCVSS 6.9
    KEV 2Nuclei 2PoC 9
    red hat enterprise linux (41) · enterprise linux (11) · red hat software collections (4)
  • 19ао «концерн вниинс»—
    46 CVE3 critCVSS 7.6
    Nuclei 1PoC 7
    ос он «стрелец» (46)
  • 20huawei—
    44 CVE7 critCVSS 7.8
    NEW
    magic ui (25) · emui (25) · harmonyos (11)
  • 21npm—
    42 CVE4 critCVSS 7.4
    PoC 8
    tar (5) · node-tar (5) · ckeditor4 (3)
  • 22foxitsoftware—
    40 CVE9 critCVSS 8.1
    PoC 1
    pdf reader (31) · pdf editor (28) · foxit reader (9)
  • 23gpac—
    36 CVECVSS 8.2
    NEWPoC 15
    gpac (36)
  • 24netapp—
    35 CVE2 critCVSS 7.1
    KEV 1Nuclei 7PoC 11
    snapmanager (14) · solidfire (11) · hci management node (11)
  • 25siemens—
    35 CVE2 critCVSS 5.9
    Nuclei 3PoC 7
    sinec infrastructure network services (16) · simatic rtu3031c firmware (3) · sinec ins (3)
  • 26ibm—
    32 CVE4 critCVSS 6.7
    cloud pak for security (5) · aix (4) · vios (4)
  • 27dell—
    31 CVE3 critCVSS 6.8
    powerscale onefs (15) · emc powerscale onefs (12) · emc idrac9 firmware (6)
  • 28cisco—
    29 CVE4 critCVSS 7.3
    PoC 29
    nx-os (8) · cloud application policy infrastructure controller (6) · cisco application policy infrastructure controller (apic) (6)
  • 29netgear—
    28 CVE5 critCVSS 6.0
    r6700 firmware (12) · r6400 firmware (11) · r6900 firmware (11)
  • 30ооо «ред софт»—
    28 CVE2 critCVSS 6.9
    PoC 4
    ред ос (28)
  • 31fedora project—
    27 CVECVSS 6.7
    KEV 2Nuclei 1PoC 6
    fedora (27)
  • 32cybozu—
    23 CVECVSS 4.9
    garoon (23)
  • 33cybozu, inc.—
    23 CVECVSS 4.9
    NEW
    cybozu garoon (23)
  • 34mozilla—
    23 CVE3 critCVSS 8.3
    PoC 1
    firefox (20) · thunderbird (13) · firefox esr (9)
  • 35linux—
    21 CVECVSS 5.7
    PoC 3
    linux kernel (21)
  • 36novell inc.—
    21 CVE1 critCVSS 6.7
    KEV 1PoC 4
    opensuse leap (18) · suse linux enterprise server (2) · suse linux enterprise server for sap applications (2)
  • 37gitlab—
    20 CVE1 critCVSS 5.6
    PoC 2
    gitlab (20) · gitlab ee (1)
  • 38gitlab inc.—
    20 CVE1 critCVSS 5.6
    NEWPoC 2
    gitlab (20)
  • 39liferay—
    20 CVECVSS 5.8
    NEW
    liferay portal (20) · digital experience platform (18) · dxp (1)
  • 40schneider electric—
    19 CVE9 critCVSS 8.9
    PoC 7
    ecostruxure control expert (12) · scadapack remoteconnect (12) · ecostruxure process expert (10)
  • 41fortinet—
    18 CVE2 critCVSS 6.6
    NEW
    fortisandbox (7) · fortiportal (6) · fortinet fortiportal (6)
  • 42exiv2—
    16 CVECVSS 5.4
    NEWPoC 1
    exiv2 (16)
  • 43exiv2 authors—
    16 CVECVSS 5.7
    NEWPoC 1
    exiv2 (16)
  • 44intel—
    16 CVECVSS 6.7
    NEW
    ethernet controller e810 firmware (9) · graphics drivers (3) · atom c3336 (1)
  • 45jetbrains—
    16 CVE3 critCVSS 7.0
    teamcity (6) · youtrack (6) · hub (3)
  • 46canonical—
    15 CVECVSS 6.7
    KEV 1PoC 3
    ubuntu (15)
  • 47go—
    15 CVE1 critCVSS 6.5
    github.com/argoproj/argo-workflows/v3 (3) · istio.io/istio (2) · github.com/hashicorp/vault (2)
  • 48dlink—
    14 CVE6 critCVSS 7.9
    PoC 5
    dap-2330 firmware (3) · dap-2310 firmware (3) · dap-2360 firmware (3)
  • 49hcc embedded—
    14 CVE3 critCVSS 7.9
    NEW
    interniche (14) · nichelite (14)
  • 50hcc-embedded—
    14 CVE3 critCVSS 7.9
    NEW
    nichestack (9) · nichestack tcp\/ip (3) · interniche (1)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79322—
2CWE-787140—
3CWE-12590—
4CWE-41688—
5CWE-8983—
6CWE-35269—
7CWE-2063—
8CWE-36253—
9CWE-47649—
10CWE-2245—
11CWE-12044—
12CWE-7743—
13CWE-43441—
14CWE-7839—
15CWE-86337—
16CWE-50236—
17CWE-11930—
18CWE-68030—
19CWE-28729—
20CWE-26927—

Sectors

Solution categories ranked by distinct CVE count this period.

  • OSS Libraries562 CVE
    63 crit6 KEV123 vendorsCVSS 8.8
    gpac (36) · exiv2 (32) · xstream (16)
  • Operating Systems428 CVE
    158 crit171 KEV36 vendorsCVSS 8.1
    debian gnu/linux (202) · fedora (150) · debian linux (122)
  • Mobile Apps342 CVE
    26 crit66 KEV7 vendorsCVSS 7.4
    tensorflow (58) · chrome (45) · google chrome (45)
  • Enterprise Software330 CVE
    70 crit8 KEV69 vendorsCVSS 7.6
    powerscale onefs (15) · snapmanager (14) · emc powerscale onefs (12)
  • Web & CMS Plugins310 CVE
    35 crit2 KEV191 vendorsCVSS 7.7
    liferay portal (20) · digital experience platform (18) · movable type (16)
  • Consumer Software176 CVE
    33 crit2 KEV32 vendorsCVSS 8.1
    pdf reader (31) · pdf editor (28) · acrobat dc (22)
  • Networking Infrastructure154 CVE
    145 crit10 KEV36 vendorsCVSS 7.8
    nx-os (14) · r6700 firmware (12) · r6400 firmware (11)
  • ICS / OT / IoT123 CVE
    109 crit37 vendorsCVSS 8.3
    ecostruxure control expert (12) · scadapack remoteconnect (12) · sapphireims (11)
  • Cloud & SaaS89 CVE
    14 crit1 KEV39 vendorsCVSS 7.7
    vmware cloud foundation (10) · cloud foundation (9) · vmware aria suite lifecycle (8)
  • Security Products87 CVE
    9 crit33 vendorsCVSS 7.3
    fortisandbox (7) · connect secure (6) · fortinet fortiportal (6)
  • DevTools & CI84 CVE
    14 crit26 vendorsCVSS 7.8
    xmill (12) · fig2dev (8) · cyclone data distribution service (2)
  • Hardware Firmware68 CVE
    25 crit6 KEV21 vendorsCVSS 9.0
    ethernet controller e810 firmware (9) · jetson linux (9) · jetson agx xavier series, jetson xavier nx, jetson tx2 series, jetson tx2 nx, jetson nano, jetson nano 2gb, jetson tx1 (5)
  • AI / ML63 CVE
    7 crit5 vendorsCVSS 9.4
    tensorflow (58) · cortex (1)
  • Databases59 CVE
    25 crit19 KEV13 vendorsCVSS 8.2
    commerce guided search (17) · communications cloud native core binding support function (17) · communications cloud native core policy (17)
  • Communications43 CVE
    12 crit20 vendorsCVSS 8.5
    xmill (12) · live555 (5) · screenshare (1)
  • Unclassified117 CVE
    23 crit91 vendorsCVSS 7.0
    flygo (10) · мсвсфера (4) · catchet (3)
Weakness × Sector

Which weaknesses hit which solution categories in August 2021

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write125Out-of-bounds Read416Use After Free89SQL Injection352CSRF20Improper Input Validation362Race Condition476NULL Pointer Dereference22Path TraversalOperating Systems1264384012320125OSS Libraries542614114138351213Web & CMS Plugins165149384110Enterprise Software653111914141210Consumer Software839286422545Networking Infrastructure191041534122ICS / OT / IoT32372235169Hardware Firmware555391DevTools & CI1015322Security Products8221324113