CVE Tools
Sign in
month report

March 2022

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

March 2022 closed with 2,136 published CVEs. 391 criticals, 226 added to CISA KEV (48 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via debian gnu/linux. Top weakness class — CWE-79 (310 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
2,136
— MoM— YoY
Severity mix
391 / 760
critical / high
KEV added
226
48 ransomware-linked
Nuclei coverage
13.3%
284 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
1452.1
n=284
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
74
n=13
Detection gap

KEV pressure, no Nuclei coverage

March 2022 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in March 2022

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write89SQL Injection22Path Traversal434Unrestricted File Upload862Missing Authorization125Out-of-bounds Read78OS Command Injection200Information Exposure20Improper Input Validationсообщество свободного программного обеспечения51922564google201597ооо «русбитех-астра»4152563ао «нппкт»31611343fedoraproject91722146packagist4693132262debian5111763maven23127122apple18131microsoft5microsoft corp5ооо «ред софт»21024216

Most discussed CVEs — March 2022

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    160 CVE11 critCVSS 7.0
    NEWKEV 3Nuclei 1PoC 43
    debian gnu/linux (126) · linux (55) · wpe webkit (5)
  • 2google—
    137 CVE6 critCVSS 6.7
    NEWKEV 2Nuclei 1PoC 3
    android (133) · data transfer project (1) · firebase php-jwt (1)
  • 3unknown—
    128 CVE19 critCVSS 6.6
    NEWNuclei 128PoC 59
    amelia – events & appointments booking calendar (4) · custom content shortcode (3) · wordpress file upload (3)
  • 4ооо «русбитех-астра»—
    123 CVE7 critCVSS 6.9
    NEWKEV 3Nuclei 4PoC 30
    astra linux special edition (117) · astra linux special edition для «эльбрус» (35) · astra linux common edition (8)
  • 5ао "нппкт"—
    114 CVE12 critCVSS 7.1
    NEWKEV 3Nuclei 4PoC 32
    осон основа оnyx (114)
  • 6fedoraproject—
    111 CVE11 critCVSS 7.0
    NEWKEV 2Nuclei 7PoC 37
    fedora (111) · extra packages for enterprise linux (4)
  • 7packagist—
    110 CVE13 critCVSS 6.5
    NEWNuclei 26PoC 49
    showdoc/showdoc (19) · microweber/microweber (16) · moodle/moodle (8)
  • 8debian—
    99 CVE11 critCVSS 7.0
    NEWKEV 1Nuclei 4PoC 25
    debian linux (99)
  • 9maven—
    88 CVE13 critCVSS 6.5
    NEWKEV 1Nuclei 10PoC 9
    com.liferay.portal:release.dxp.bom (7) · org.jenkins-ci.plugins:proxmox (4) · com.surenpi.jenkins:phoenix-autotest (4)
  • 10apple—
    82 CVE8 critCVSS 7.3
    NEWKEV 2Nuclei 3PoC 4
    macos (55) · ipados (45) · iphone os (44)
  • 11redhat—
    78 CVE3 critCVSS 7.4
    NEWKEV 2Nuclei 3PoC 22
    red hat enterprise linux (42) · enterprise linux (30) · enterprise linux for power little endian (14)
  • 12microsoft—
    72 CVECVSS 6.9
    NEWPoC 4
    windows 10 (31) · windows 10 21h2 (31) · windows 10 21h1 (31)
  • 13ооо «ред софт»—
    64 CVE9 critCVSS 7.3
    NEWKEV 2Nuclei 6PoC 21
    ред ос (64)
  • 14tenda—
    61 CVE44 critCVSS 9.2
    NEWPoC 30
    ac6 firmware (17) · ax1806 firmware (13) · ac9 firmware (13)
  • 15adobe—
    54 CVE1 critCVSS 6.9
    NEW
    adobe audition (9) · adobe bridge (9) · bridge (9)
  • 16pypi—
    54 CVE7 critCVSS 7.2
    NEWNuclei 5PoC 8
    salt (4) · freetakserver-ui (4) · ansible (2)
  • 17jenkins—
    52 CVECVSS 6.0
    NEW
    jenkins pipeline: phoenix autotest plugin (4) · jenkins kubernetes continuous deploy plugin (4) · jenkins extended choice parameter plugin (4)
  • 18ао «ивк»—
    51 CVE6 critCVSS 7.2
    NEWKEV 1Nuclei 4PoC 13
    альт 8 сп (43) · альт сп 10 (10)
  • 19netapp—
    50 CVE1 critCVSS 7.3
    NEWKEV 2PoC 19
    h700s firmware (29) · h300s firmware (29) · h410s firmware (29)
  • 20npm—
    48 CVE8 critCVSS 7.0
    NEWNuclei 4PoC 17
    node-forge (3) · node-ipc (3) · vditor (2)
  • 21canonical—
    45 CVE5 critCVSS 7.4
    NEWKEV 2Nuclei 1PoC 18
    ubuntu (41) · ubuntu linux (5)
  • 22linux—
    43 CVE1 critCVSS 6.8
    NEWKEV 2PoC 14
    linux kernel (43) · kernel (2)
  • 23go—
    36 CVE5 critCVSS 7.3
    NEWNuclei 5PoC 7
    gogs.io/gogs (5) · code.gitea.io/gitea (3) · github.com/argoproj/argo-cd (3)
  • 24ibm—
    30 CVE1 critCVSS 6.0
    NEW
    vios (6) · aix (6) · spectrum copy data management (4)
  • 25totolink—
    28 CVE20 critCVSS 9.5
    NEWNuclei 4PoC 12
    a3100r firmware (13) · a800r firmware (8) · a3000ru firmware (8)
  • 26novell inc.—
    27 CVE1 critCVSS 7.6
    NEWKEV 1PoC 9
    opensuse leap (20) · suse linux enterprise server (17) · suse linux enterprise server for sap applications (15)
  • 27oracle—
    26 CVE5 critCVSS 7.3
    NEWKEV 1Nuclei 6PoC 4
    communications cloud native core binding support function (15) · communications cloud native core network exposure function (11) · communications cloud native core policy (9)
  • 28siemens—
    26 CVE3 critCVSS 7.1
    NEWKEV 1PoC 3
    ruggedcom rs416p (7) · ruggedcom rs416 (7) · ruggedcom rmc8388 v4.x (7)
  • 29ао «концерн вниинс»—
    26 CVE3 critCVSS 7.1
    NEWNuclei 4PoC 5
    ос он «стрелец» (26)
  • 30fedora project—
    25 CVE4 critCVSS 7.4
    NEWPoC 9
    fedora (23) · 389 directory server (2)
  • 31samsung mobile—
    22 CVECVSS 4.1
    NEW
    samsung mobile devices (12) · galaxy watch plugin (2) · watch active plugin (1)
  • 32ао «нтц ит роса»—
    22 CVE3 critCVSS 7.5
    NEWKEV 1Nuclei 4PoC 5
    rosa virtualization (15) · роса хром (8) · rosa virtualization 3.0 (7)
  • 33hp—
    20 CVE2 critCVSS 8.8
    NEW
    pc bios (11) · probook 440 g8 firmware (6) · prodesk 405 g6 small form factor firmware (6)
  • 34delta electronics—
    19 CVE16 critCVSS 9.4
    NEW
    diaenergie (18) · cncsoft (1)
  • 35deltaww—
    19 CVE16 critCVSS 9.4
    NEW
    diaenergie (18) · cncsoft screeneditor (1)
  • 36huawei—
    19 CVE2 critCVSS 7.6
    NEW
    emui (18) · magic ui (18) · harmonyos (11)
  • 37showdoc—
    19 CVECVSS 5.5
    NEWPoC 10
    showdoc (19)
  • 38star7th—
    19 CVECVSS 5.5
    NEWPoC 10
    star7th/showdoc (19)
  • 39фссп россии—
    19 CVE6 critCVSS 8.1
    NEWNuclei 5PoC 7
    ос тд аис фссп россии (19)
  • 40microweber—
    17 CVE1 critCVSS 6.3
    NEWNuclei 10PoC 7
    microweber (16) · microweber/microweber (16) · whmcs (1)
  • 41rockwell automation—
    17 CVE10 critCVSS 8.8
    NEW
    factorytalk assetcentre (9) · isagraf runtime (5) · connected components workbench (3)
  • 42rockwellautomation—
    17 CVE10 critCVSS 7.8
    NEW
    factorytalk assetcentre (9) · micro810 firmware (5) · aadvance controller (5)
  • 43tp-link—
    17 CVE11 critCVSS 9.0
    NEWNuclei 1PoC 6
    tl-wr886n firmware (10) · tl-wr840n firmware (4) · tapo c200 (1)
  • 44ооо «открытая мобильная платформа»—
    17 CVE1 critCVSS 7.6
    NEWKEV 1PoC 7
    ос аврора (17)
  • 45schneider electric—
    16 CVE6 critCVSS 8.0
    NEW
    pacis gtw (5) · saitel dp (5) · saitel dr (5)
  • 46schneider-electric—
    16 CVE6 critCVSS 8.3
    NEW
    scd2200 firmware (5) · micom c264 firmware (5) · easergy t300 firmware (5)
  • 47gitlab—
    14 CVE1 critCVSS 5.3
    NEWNuclei 2PoC 3
    gitlab (14)
  • 48unspecified—
    14 CVECVSS 5.8
    NEWNuclei 1
    unspecified (7) · automatic question paper generator system (1) · cltphp (1)
  • 49mediatek, inc.—
    13 CVECVSS 6.9
    NEW
    mt6761, mt6762, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6885, mt6893, mt8183, mt8185, mt8321, mt8385, mt8666, mt8667, mt8675, mt8735a, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 (3) · mt5816, mt5835, mt6885, mt6893, mt9900, mt9901, mt9950, mt9969, mt9970, mt9980 (2) · mt6761, mt6762, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6885, mt6889, mt6893, mt8183, mt8185, mt8321, mt8385, mt8666, mt8667, mt8675, mt8735a, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 (1)
  • 50tp-link technologies co ltd.—
    13 CVE11 critCVSS 9.5
    NEWNuclei 1PoC 6
    wr-886n (10) · c20i (1) · omada sdn (1)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79310—
2CWE-787161—
3CWE-89134—
4CWE-2261—
5CWE-43459—
6CWE-86257—
7CWE-12555—
8CWE-7853—
9CWE-20050—
10CWE-2049—
11CWE-12044—
12CWE-11943—
13CWE-35242—
14CWE-28738—
15CWE-41634—
16CWE-47633—
17CWE-86333—
18CWE-27632—
19CWE-7731—
20CWE-36226—

Sectors

Solution categories ranked by distinct CVE count this period.

  • OSS Libraries482 CVE
    72 crit4 KEV109 vendorsCVSS 8.7
    showdoc/showdoc (19) · microweber/microweber (16) · moodle/moodle (8)
  • Web & CMS Plugins395 CVE
    104 crit225 vendorsCVSS 7.6
    star7th/showdoc (19) · microweber (16) · microweber/microweber (16)
  • Operating Systems385 CVE
    133 crit79 KEV44 vendorsCVSS 7.8
    fedora (134) · debian gnu/linux (126) · astra linux special edition (117)
  • Enterprise Software337 CVE
    373 crit18 KEV83 vendorsCVSS 9.1
    h300s firmware (29) · h410s firmware (29) · h500s firmware (29)
  • Mobile Apps246 CVE
    43 crit18 KEV6 vendorsCVSS 7.3
    android (136) · emui (18) · magic ui (18)
  • Networking Infrastructure212 CVE
    255 crit6 KEV58 vendorsCVSS 8.8
    ac6 firmware (17) · a3100r firmware (13) · ac9 firmware (13)
  • ICS / OT / IoT127 CVE
    255 crit47 vendorsCVSS 8.2
    factorytalk assetcentre (22) · isagraf runtime (14) · centum vp (12)
  • Consumer Software113 CVE
    11 crit34 vendorsCVSS 9.0
    adobe audition (9) · adobe bridge (9) · audition (9)
  • DevTools & CI112 CVE
    14 crit31 vendorsCVSS 7.8
    continuous integration with toad edge (4) · extended choice parameter (4) · jenkins continuous integration with toad edge plugin (4)
  • Security Products109 CVE
    13 crit8 KEV52 vendorsCVSS 7.5
    epolicy orchestrator (6) · safe (3) · antivirus plus (2)
  • Cloud & SaaS105 CVE
    14 crit11 KEV42 vendorsCVSS 7.2
    qemu (7) · xen (7) · tcpreplay (5)
  • Hardware Firmware60 CVE
    247 crit30 vendorsCVSS 8.5
    8th generation intel core (3) · celeron j4005 (3) · celeron j4025 (3)
  • Databases58 CVE
    25 crit9 KEV23 vendorsCVSS 7.7
    communications cloud native core binding support function (17) · communications cloud native core network exposure function (12) · communications cloud native core policy (10)
  • Communications57 CVE
    14 crit4 KEV27 vendorsCVSS 8.2
    bigant server (7) · mattermost (4) · x\/p messenger (4)
  • AI / ML9 CVE
    2 crit8 vendorsCVSS 8.0
    containerd (1) · grpc swift (1) · horovod (1)
  • Unclassified161 CVE
    45 crit92 vendorsCVSS 7.3
    ос тд аис фссп россии (19) · diaenergie (18) · htmldoc (7)
Weakness × Sector

Which weaknesses hit which solution categories in March 2022

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write89SQL Injection22Path Traversal434Unrestricted File Upload862Missing Authorization125Out-of-bounds Read78OS Command Injection200Information Exposure20Improper Input ValidationOperating Systems137043204221814OSS Libraries8425132016181881613Web & CMS Plugins1673689438583Enterprise Software6115081571149Networking Infrastructure95914316ICS / OT / IoT1110219234104Consumer Software111818132Hardware Firmware1525442Security Products16155111538DevTools & CI1667115313