CVE Tools
Sign in
month report

January 2022

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

January 2022 closed with 2,210 published CVEs. 210 criticals, 40 added to CISA KEV (9 ransomware-linked). oracle led volume, mostly via mysql. Top weakness class — CWE-79 (234 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
2,210
— MoM— YoY
Severity mix
210 / 821
critical / high
KEV added
40
9 ransomware-linked
Nuclei coverage
7.6%
169 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
1507.4
n=169
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
104
n=11
Detection gap

KEV pressure, no Nuclei coverage

January 2022 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in January 2022

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write20Improper Input Validation89SQL Injection416Use After Free476NULL Pointer Dereference125Out-of-bounds Read352CSRF22Path Traversal200Information Exposureoracle111121211oracle corp.111oracle corporation11ао «ивк»28111151debian31322551122сообщество свободного программного обеспечения31512851311netapp12211microsoft122packagist29141511microsoft corp1212reolink261bentley341923

Most discussed CVEs — January 2022

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1oracle—
    186 CVE15 critCVSS 6.2
    NEWKEV 2Nuclei 19PoC 7
    mysql (72) · mysql cluster (44) · mysql server (30)
  • 2ао «ивк»—
    123 CVE8 critCVSS 5.9
    NEWKEV 1PoC 13
    альт 8 сп (116) · альт сп 10 (9) · альт 8 сп сервер (5)
  • 3debian—
    111 CVE18 critCVSS 7.1
    NEWKEV 2Nuclei 6PoC 31
    debian linux (111)
  • 4сообщество свободного программного обеспечения—
    106 CVE16 critCVSS 6.9
    NEWKEV 4Nuclei 3PoC 29
    debian gnu/linux (93) · linux (15) · vim (14)
  • 5netapp—
    105 CVE2 critCVSS 5.5
    NEWKEV 1Nuclei 1PoC 5
    oncommand workflow automation (94) · oncommand insight (91) · active iq unified manager (33)
  • 6microsoft—
    103 CVE7 critCVSS 7.2
    NEWKEV 2Nuclei 1PoC 5
    windows server 2019 (79) · windows 10 (79) · windows server 2019 (server core installation) (79)
  • 7packagist—
    88 CVE5 critCVSS 6.3
    NEWNuclei 5PoC 25
    remdex/livehelperchat (11) · pimcore/pimcore (10) · moodle/moodle (9)
  • 8reolink—
    79 CVE3 critCVSS 7.7
    NEWKEV 1PoC 46
    rlc-410w firmware (79) · reolink rlc-410w (9)
  • 9bentley—
    78 CVECVSS 6.9
    NEW
    microstation (76) · bentley view (76) · view (76)
  • 10fedoraproject—
    77 CVE4 critCVSS 6.5
    NEWKEV 1Nuclei 4PoC 20
    fedora (77) · extra packages for enterprise linux (3)
  • 11maven—
    75 CVE15 critCVSS 7.0
    NEWNuclei 11PoC 14
    net.mingsoft:ms-mcms (6) · org.apache.kylin:kylin (6) · org.jenkins-ci.plugins:publish-over-ssh (5)
  • 12huawei—
    73 CVE10 critCVSS 7.3
    NEW
    harmonyos (66) · emui (32) · magic ui (28)
  • 13unknown—
    73 CVE2 critCVSS 6.5
    NEWNuclei 73PoC 33
    booster for woocommerce (3) · all in one seo – best wordpress seo plugin – easily improve seo rankings & increase traffic (2) · eventcalendar (2)
  • 14redhat—
    72 CVE9 critCVSS 6.7
    NEWKEV 1PoC 12
    red hat enterprise linux (57) · red hat software collections (25) · enterprise linux (7)
  • 15ооо «русбитех-астра»—
    71 CVE12 critCVSS 7.4
    NEWKEV 3Nuclei 1PoC 17
    astra linux special edition (71) · astra linux special edition для «эльбрус» (33) · astra linux common edition (3)
  • 16google—
    63 CVE4 critCVSS 6.5
    NEWKEV 1Nuclei 1PoC 1
    android (49) · google chrome (6) · android studio (5)
  • 17ао "нппкт"—
    59 CVE13 critCVSS 7.5
    NEWKEV 2Nuclei 1PoC 15
    осон основа оnyx (59)
  • 18ооо «ред софт»—
    53 CVE8 critCVSS 6.9
    NEWKEV 1Nuclei 1PoC 13
    ред ос (53)
  • 19ао «нтц ит роса»—
    52 CVE8 critCVSS 7.2
    NEWKEV 1Nuclei 1PoC 12
    rosa virtualization (19) · роса кобальт (18) · роса хром (16)
  • 20adobe—
    48 CVE1 critCVSS 6.3
    NEW
    acrobat (26) · acrobat dc (26) · acrobat reader (26)
  • 21netapp inc.—
    48 CVE1 critCVSS 5.5
    NEWNuclei 1
    oncommand workflow automation (46) · oncommand insight (45) · active iq unified manager for vmware vsphere (22)
  • 22gpac—
    46 CVECVSS 5.8
    NEWPoC 13
    gpac (46)
  • 23ао «концерн вниинс»—
    45 CVE6 critCVSS 7.0
    NEWKEV 2Nuclei 2PoC 8
    ос он «стрелец» (45)
  • 24cesanta—
    44 CVECVSS 6.1
    NEWPoC 23
    mjs (44)
  • 25npm—
    41 CVE5 critCVSS 7.2
    NEWNuclei 2PoC 14
    node-forge (4) · marked (2) · shelljs (2)
  • 26pypi—
    40 CVE3 critCVSS 6.4
    NEWPoC 4
    onionshare-cli (9) · calibreweb (6) · pillow (3)
  • 27qualcomm—
    40 CVE4 critCVSS 7.8
    NEW
    wcd9375 firmware (39) · wcd9370 firmware (39) · wcd9380 firmware (39)
  • 28qualcomm, inc.—
    40 CVE4 critCVSS 7.7
    NEW
    snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking (6) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking (4) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables (3)
  • 29apache—
    32 CVE7 critCVSS 7.6
    NEWNuclei 4PoC 2
    kylin (6) · james (4) · shenyu (4)
  • 30apache software foundation—
    32 CVE7 critCVSS 7.8
    NEWNuclei 4PoC 2
    apache kylin (6) · apache shenyu (incubating) (4) · apache james (4)
  • 31jsish—
    31 CVECVSS 5.6
    NEWPoC 13
    jsish (31)
  • 32jerryscript—
    27 CVECVSS 6.0
    NEWPoC 13
    jerryscript (27)
  • 33juniper—
    27 CVECVSS 6.9
    NEWPoC 26
    junos (25) · junos os evolved (4) · contrail service orchestration (1)
  • 34juniper networks—
    27 CVECVSS 6.9
    NEWPoC 26
    junos os (25) · junos (22) · junos os evolved (5)
  • 35f5—
    25 CVECVSS 6.8
    NEW
    big-ip advanced firewall manager (18) · big-ip access policy manager (17) · big-ip application acceleration manager (16)
  • 36ibm corp.—
    24 CVE9 critCVSS 8.1
    NEWPoC 3
    ibm qradar siem (8) · ibm cloud pak system (6) · cognos controller (4)
  • 37jenkins—
    24 CVECVSS 5.7
    NEWNuclei 1PoC 7
    publish over ssh (5) · jenkins publish over ssh plugin (5) · jenkins bitbucket branch source plugin (2)
  • 38ibm—
    23 CVE2 critCVSS 6.8
    NEW
    security verify access (5) · cognos controller (4) · security guardium insights (3)
  • 39siemens—
    23 CVE4 critCVSS 7.7
    NEWKEV 1PoC 5
    sinema remote connect server (10) · comos (5) · comos v10.2 (4)
  • 40fedora project—
    22 CVE3 critCVSS 6.8
    NEWKEV 2Nuclei 2PoC 5
    fedora (22)
  • 41novell inc.—
    21 CVE6 critCVSS 7.0
    NEWKEV 1Nuclei 1PoC 1
    opensuse leap (12) · suse linux enterprise server (10) · suse linux enterprise desktop (8)
  • 42schneider-electric—
    21 CVE1 critCVSS 7.3
    NEW
    network management card 3 firmware (6) · network management card 2 firmware (6) · evlink parking evw2 firmware (5)
  • 43ооо «открытая мобильная платформа»—
    20 CVE10 critCVSS 8.8
    NEWKEV 2PoC 3
    ос аврора (20)
  • 44canonical—
    19 CVE5 critCVSS 6.9
    NEWKEV 2PoC 5
    ubuntu (16) · ubuntu linux (4)
  • 45cisco—
    18 CVE1 critCVSS 6.0
    NEWPoC 16
    security manager (13) · cisco security manager (13) · adaptive security appliance software (2)
  • 46dell—
    18 CVE1 critCVSS 7.5
    NEW
    emc unity operating environment (5) · vnx control station (4) · emc appsync (3)
  • 47samsung mobile—
    18 CVECVSS 5.0
    NEWKEV 1
    samsung mobile devices (10) · samsung internet (2) · reminder (1)
  • 48vim—
    16 CVE1 critCVSS 7.2
    NEWPoC 5
    vim/vim (16) · vim (16)
  • 49linux—
    14 CVECVSS 6.5
    NEWKEV 1PoC 3
    linux kernel (11) · linux (5) · kernel (1)
  • 50gitlab—
    13 CVECVSS 5.7
    NEW
    gitlab (13)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79234—
2CWE-787143—
3CWE-20108—
4CWE-8992—
5CWE-41669—
6CWE-47667—
7CWE-12565—
8CWE-35244—
9CWE-2243—
10CWE-20038—
11CWE-61738—
12CWE-86235—
13CWE-40033—
14CWE-28729—
15CWE-7829—
16CWE-43428—
17CWE-12025—
18CWE-28424—
19CWE-19023—
20CWE-12222—

Sectors

Solution categories ranked by distinct CVE count this period.

  • OSS Libraries545 CVE
    54 crit107 vendorsCVSS 7.2
    gpac (46) · mjs (44) · jsish (31)
  • Operating Systems463 CVE
    271 crit148 KEV41 vendorsCVSS 7.3
    альт 8 сп (116) · debian linux (111) · fedora (99)
  • Enterprise Software402 CVE
    52 crit19 KEV72 vendorsCVSS 9.8
    oncommand workflow automation (94) · oncommand insight (91) · active iq unified manager (33)
  • Web & CMS Plugins270 CVE
    55 crit133 vendorsCVSS 7.8
    kylin (10) · moodle (10) · pimcore (10)
  • Databases214 CVE
    97 crit5 KEV11 vendorsCVSS 6.3
    mysql cluster (88) · mysql (72) · mysql server (60)
  • Mobile Apps168 CVE
    22 crit2 KEV11 vendorsCVSS 7.3
    harmonyos (66) · android (50) · emui (32)
  • Hardware Firmware166 CVE
    1,085 crit33 vendorsCVSS 8.3
    oncommand workflow automation (46) · oncommand insight (45) · active iq unified manager for microsoft windows (22)
  • ICS / OT / IoT164 CVE
    58 crit4 KEV36 vendorsCVSS 8.1
    rlc-410w firmware (79) · reolink rlc-410w (9) · access management system (2)
  • Consumer Software98 CVE
    6 crit22 vendorsCVSS 7.8
    acrobat (26) · acrobat dc (26) · acrobat reader (26)
  • Networking Infrastructure95 CVE
    48 crit1 KEV40 vendorsCVSS 9.6
    junos (47) · cisco security manager (25) · junos os (25)
  • Security Products75 CVE
    1 crit2 KEV31 vendorsCVSS 7.6
    big-ip advanced firewall manager (18) · big-ip access policy manager (17) · big-ip application acceleration manager (16)
  • Cloud & SaaS65 CVE
    9 crit2 KEV35 vendorsCVSS 9.0
    xen (6) · halo (2) · istio (2)
  • DevTools & CI54 CVE
    1 crit21 vendorsCVSS 9.9
    jenkins publish over ssh plugin (5) · publish over ssh (5) · bitbucket branch source (2)
  • Communications38 CVE
    14 crit21 vendorsCVSS 8.3
    livehelperchat/livehelperchat (12) · live helper chat (8) · convos (4)
  • AI / ML9 CVE
    2 crit7 vendorsCVSS 8.1
    spinnaker (2) · stanfordnlp/corenlp (2) · containerd (1)
  • Unclassified98 CVE
    27 crit1 KEV57 vendorsCVSS 7.3
    nessus (10) · single connect (8) · ос тд аис фссп россии (7)
Weakness × Sector

Which weaknesses hit which solution categories in January 2022

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write20Improper Input Validation89SQL Injection416Use After Free476NULL Pointer Dereference125Out-of-bounds Read352CSRF22Path Traversal200Information ExposureOSS Libraries52417102532811176Operating Systems93996161824387Enterprise Software39346271923348Web & CMS Plugins11713461112189Hardware Firmware61492685144ICS / OT / IoT111265413315Databases23123122Networking Infrastructure1987218611Consumer Software14223114414124Security Products72641214