month report
June 2022
Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
June 2022 closed with 2,302 published CVEs. 331 criticals, 48 added to CISA KEV (7 ransomware-linked). unknown led volume, mostly via note press. Top weakness class — CWE-79 (336 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
2,302
— MoM— YoY
Severity mix
331 / 815
critical / high
KEV added
48
7 ransomware-linked
Nuclei coverage
12.7%
293 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
1362.3
n=293
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
276
n=2
Detection gap
KEV pressure, no Nuclei coverage
June 2022 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1qualcomm68 CVE
- KEV 1qualcomm, inc.68 CVE
- KEV 1microsoft63 CVE
Weakness × Vendor
What's spreading where in June 2022
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
79XSS89SQL Injection787Out-of-bounds Write352CSRF269Improper Privilege Mgmt125Out-of-bounds Read20Improper Input Validation200Information Exposure78OS Command Injection862Missing Authorizationgoogle17141411maven361131115unspecified221422420122jenkins331315jenkins project331315сообщество свободного программного обеспечения3192741ооо «русбитех-астра»91721qualcomm41042qualcomm, inc.41042ао «нппкт»151451microsoft corp1crates.io1
Most discussed CVEs — June 2022
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #1unknown145 CVE
- #2google121 CVE
- #3maven112 CVE
- #4unspecified99 CVE
- #5jenkins86 CVE
- #6сообщество свободного программного обеспечения82 CVE
- #7ооо «русбитех-астра»69 CVE
- #8qualcomm68 CVE
- #9qualcomm, inc.68 CVE
- #10ао "нппкт"68 CVE
Top vendors
Ranked by distinct CVE count this period.
- 145 CVE8 critCVSS 5.8NEWNuclei 145PoC 68note press (3) · html2wp (3) · five minute webshop (2)
- 121 CVE13 critCVSS 6.6NEWPoC 1android (119) · kctf (1) · protobuf-c (1)
- 112 CVE7 critCVSS 6.1NEWNuclei 4PoC 3org.jenkins-ci.main:jenkins-core (6) · org.jenkins-ci.plugins:ec2-deployment-dashboard (5) · com.geteasyqa:easyqa (3)
- 99 CVECVSS 5.4NEWNuclei 4PoC 44ffmpeg (24) · hindu matrimonial script (15) · phplist (8)
- 86 CVE1 critCVSS 5.7NEWjenkins (6) · deployment dashboard (5) · jenkins deployment dashboard plugin (5)
- 82 CVE6 critCVSS 7.0NEWNuclei 1PoC 21debian gnu/linux (55) · linux (20) · vim (16)
- 69 CVE3 critCVSS 7.1NEWNuclei 1PoC 15astra linux special edition (69) · astra linux special edition для «эльбрус» (26) · astra linux common edition (3)
- 68 CVE10 critCVSS 7.8NEWKEV 1PoC 1wsa8830 firmware (59) · wsa8835 firmware (58) · wcd9370 firmware (58)
- 68 CVE10 critCVSS 7.8NEWKEV 1PoC 1snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables (12) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile (12) · snapdragon connectivity, snapdragon mobile (3)
- 68 CVE2 critCVSS 6.9NEWNuclei 1PoC 16осон основа оnyx (68)
- 63 CVE1 critCVSS 7.4NEWKEV 1PoC 7windows server 2019 (server core installation) (30) · windows server 2019 (30) · windows 10 (29)
- 61 CVE1 critCVSS 6.8NEWPoC 1arrow (3) · rulex (2) · crossbeam (2)
- 60 CVE6 critCVSS 6.1NEWNuclei 9PoC 26elefant/cms (8) · typo3/cms-core (5) · typo3/cms (5)
- 55 CVE8 critCVSS 7.1NEWNuclei 4PoC 16parse-url (4) · nocodb (4) · parse-server (3)
- 52 CVE4 critCVSS 7.1NEWNuclei 1PoC 17fedora (52) · extra packages for enterprise linux (2)
- 48 CVE3 critCVSS 7.3NEWNuclei 3PoC 20ред ос (48)
- 47 CVECVSS 7.5NEWadobe bridge (12) · bridge (12) · indesign (10)
- 45 CVE1 critCVSS 7.0NEWNuclei 1PoC 15debian linux (45)
- 44 CVE6 critCVSS 7.1NEWNuclei 1PoC 7red hat enterprise linux (27) · jboss core services (12) · red hat software collections (12)
- 43 CVE8 critCVSS 6.5NEWPoC 1jazz team server (8) · spectrum copy data management (5) · robotic process automation (4)
- 41 CVECVSS 4.6NEWsamsung mobile devices (21) · samsung account (8) · smart things (3)
- 40 CVE3 critCVSS 7.0NEWNuclei 1PoC 13fedora (39) · 389 directory server (1)
- 37 CVE16 critCVSS 8.4NEWPoC 9inventree (5) · oauthenticator (1) · perdido (1)
- 37 CVE2 critCVSS 6.9NEWNuclei 2PoC 9альт 8 сп (37) · альт сп 10 (2)
- 30 CVE3 critCVSS 8.0NEWNuclei 1PoC 1sinema remote connect server (15) · sicam gridedge (classic) (4) · sicam gridedge essential (4)
- 29 CVE6 critCVSS 7.0NEWNuclei 3PoC 6gogs.io/gogs (6) · github.com/argoproj/argo-cd (4) · github.com/argoproj/argo-cd/v2 (4)
- 28 CVE3 critCVSS 6.9NEWNuclei 1PoC 4clustered data ontap (15) · h410s firmware (11) · h700s firmware (11)
- 24 CVECVSS 5.6NEWffmpeg (24)
- 22 CVE2 critCVSS 6.6NEWpowerstoreos (6) · powerstore (6) · supportassist for home pcs (4)
- 21 CVE3 critCVSS 6.7NEWemui (17) · magic ui (15) · harmonyos (14)
- 21 CVE1 critCVSS 6.6NEWNuclei 1PoC 23d visual enterprise viewer (9) · adaptive server enterprise (2) · netweaver abap (2)
- 21 CVE1 critCVSS 6.0NEWNuclei 1PoC 2sap 3d visual enterprise viewer (9) · sap adaptive server enterprise (ase) (1) · sap business objects business intelligence platform (1)
- 20 CVECVSS 4.7NEWaccount (8) · smartthings (3) · internet (2)
- 20 CVE2 critCVSS 7.4NEWNuclei 2PoC 1rosa virtualization (14) · rosa virtualization 3.0 (9) · роса хром (6)
- 20 CVECVSS 7.3NEWPoC 10ос тд аис фссп россии (20)
- 19 CVE6 critCVSS 8.0NEWPoC 5badminton center management system (19)
- 19 CVECVSS 7.9NEWPoC 15prison management system (19)
- 18 CVE5 critCVSS 7.4NEWNuclei 3http server (8) · hadoop (2) · sling commons log (1)
- 18 CVE5 critCVSS 7.6NEWNuclei 3apache http server (8) · http server (8) · apache hadoop (2)
- 18 CVECVSS 5.8NEWmt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt9636, mt9638, mt9666 (3) · mt6580, mt6735, mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8167s, mt8168, mt8175, mt8183, mt8185, mt8362a, mt8365, mt8385, mt8667, mt8675, mt8695, mt8696, mt8766, mt8768, mt8786, mt8788, mt8789, mt8797 (2) · mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt6895, mt6983, mt6985, mt8167s, mt8168, mt8175, mt8183, mt8185, mt8362a, mt8365, mt8385, mt8667, mt8675, mt8695, mt8696, mt8766, mt8768, mt8786, mt8788, mt8789, mt8797 (1)
- 17 CVE17 critCVSS 9.8NEWPoC 4magic r100 firmware (17)
- 17 CVE1 critCVSS 7.4NEWPoC 3universal forwarder (10) · splunk (8) · splunk cloud platform (5)
- 16 CVE2 critCVSS 7.5NEWPoC 9hospital\'s patient records management system (16)
- 16 CVECVSS 6.7NEWPoC 5suse linux enterprise server (12) · suse linux enterprise server for sap applications (12) · opensuse leap (9)
- 16 CVECVSS 7.5NEWPoC 9vim/vim (16) · vim (16)
- 15 CVECVSS 6.4NEWPoC 15hindu matrimonial script (15)
- 14 CVECVSS 6.7NEWPoC 974cmsse (14)
- 14 CVECVSS 7.2NEWPoC 14advanced school management system (14)
- 14 CVE2 critCVSS 7.7NEWruntime toolkit (11) · plcwinnt (11) · gateway (4)
- 14 CVE14 critCVSS 9.8NEWPoC 7rescue dispatch management system (14)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | unknown | 145 | 8 | · | 145 | NEWNuclei 145PoC 68 | note press (3) · html2wp (3) · five minute webshop (2) | — | |
| 2 | 121 | 13 | · | · | NEWPoC 1 | android (119) · kctf (1) · protobuf-c (1) | — | ||
| 3 | maven | 112 | 7 | · | 4 | NEWNuclei 4PoC 3 | org.jenkins-ci.main:jenkins-core (6) · org.jenkins-ci.plugins:ec2-deployment-dashboard (5) · com.geteasyqa:easyqa (3) | — | |
| 4 | unspecified | 99 | · | · | 4 | NEWNuclei 4PoC 44 | ffmpeg (24) · hindu matrimonial script (15) · phplist (8) | — | |
| 5 | jenkins | 86 | 1 | · | · | NEW | jenkins (6) · deployment dashboard (5) · jenkins deployment dashboard plugin (5) | — | |
| 6 | сообщество свободного программного обеспечения | 82 | 6 | · | 1 | NEWNuclei 1PoC 21 | debian gnu/linux (55) · linux (20) · vim (16) | — | |
| 7 | ооо «русбитех-астра» | 69 | 3 | · | 1 | NEWNuclei 1PoC 15 | astra linux special edition (69) · astra linux special edition для «эльбрус» (26) · astra linux common edition (3) | — | |
| 8 | qualcomm | 68 | 10 | 1 | · | NEWKEV 1PoC 1 | wsa8830 firmware (59) · wsa8835 firmware (58) · wcd9370 firmware (58) | — | |
| 9 | qualcomm, inc. | 68 | 10 | 1 | · | NEWKEV 1PoC 1 | snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables (12) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile (12) · snapdragon connectivity, snapdragon mobile (3) | — | |
| 10 | ао "нппкт" | 68 | 2 | · | 1 | NEWNuclei 1PoC 16 | осон основа оnyx (68) | — | |
| 11 | microsoft | 63 | 1 | 1 | · | NEWKEV 1PoC 7 | windows server 2019 (server core installation) (30) · windows server 2019 (30) · windows 10 (29) | — | |
| 12 | crates.io | 61 | 1 | · | · | NEWPoC 1 | arrow (3) · rulex (2) · crossbeam (2) | — | |
| 13 | packagist | 60 | 6 | · | 9 | NEWNuclei 9PoC 26 | elefant/cms (8) · typo3/cms-core (5) · typo3/cms (5) | — | |
| 14 | npm | 55 | 8 | · | 4 | NEWNuclei 4PoC 16 | parse-url (4) · nocodb (4) · parse-server (3) | — | |
| 15 | fedoraproject | 52 | 4 | · | 1 | NEWNuclei 1PoC 17 | fedora (52) · extra packages for enterprise linux (2) | — | |
| 16 | ооо «ред софт» | 48 | 3 | · | 3 | NEWNuclei 3PoC 20 | ред ос (48) | — | |
| 17 | adobe | 47 | · | · | · | NEW | adobe bridge (12) · bridge (12) · indesign (10) | — | |
| 18 | debian | 45 | 1 | · | 1 | NEWNuclei 1PoC 15 | debian linux (45) | — | |
| 19 | redhat | 44 | 6 | · | 1 | NEWNuclei 1PoC 7 | red hat enterprise linux (27) · jboss core services (12) · red hat software collections (12) | — | |
| 20 | ibm | 43 | 8 | · | · | NEWPoC 1 | jazz team server (8) · spectrum copy data management (5) · robotic process automation (4) | — | |
| 21 | samsung mobile | 41 | · | · | · | NEW | samsung mobile devices (21) · samsung account (8) · smart things (3) | — | |
| 22 | fedora project | 40 | 3 | · | 1 | NEWNuclei 1PoC 13 | fedora (39) · 389 directory server (1) | — | |
| 23 | pypi | 37 | 16 | · | · | NEWPoC 9 | inventree (5) · oauthenticator (1) · perdido (1) | — | |
| 24 | ао «ивк» | 37 | 2 | · | 2 | NEWNuclei 2PoC 9 | альт 8 сп (37) · альт сп 10 (2) | — | |
| 25 | siemens | 30 | 3 | · | 1 | NEWNuclei 1PoC 1 | sinema remote connect server (15) · sicam gridedge (classic) (4) · sicam gridedge essential (4) | — | |
| 26 | go | 29 | 6 | · | 3 | NEWNuclei 3PoC 6 | gogs.io/gogs (6) · github.com/argoproj/argo-cd (4) · github.com/argoproj/argo-cd/v2 (4) | — | |
| 27 | netapp | 28 | 3 | · | 1 | NEWNuclei 1PoC 4 | clustered data ontap (15) · h410s firmware (11) · h700s firmware (11) | — | |
| 28 | ffmpeg | 24 | · | · | · | NEW | ffmpeg (24) | — | |
| 29 | dell | 22 | 2 | · | · | NEW | powerstoreos (6) · powerstore (6) · supportassist for home pcs (4) | — | |
| 30 | huawei | 21 | 3 | · | · | NEW | emui (17) · magic ui (15) · harmonyos (14) | — | |
| 31 | sap | 21 | 1 | · | 1 | NEWNuclei 1PoC 2 | 3d visual enterprise viewer (9) · adaptive server enterprise (2) · netweaver abap (2) | — | |
| 32 | sap se | 21 | 1 | · | 1 | NEWNuclei 1PoC 2 | sap 3d visual enterprise viewer (9) · sap adaptive server enterprise (ase) (1) · sap business objects business intelligence platform (1) | — | |
| 33 | samsung | 20 | · | · | · | NEW | account (8) · smartthings (3) · internet (2) | — | |
| 34 | ао «нтц ит роса» | 20 | 2 | · | 2 | NEWNuclei 2PoC 1 | rosa virtualization (14) · rosa virtualization 3.0 (9) · роса хром (6) | — | |
| 35 | фссп россии | 20 | · | · | · | NEWPoC 10 | ос тд аис фссп россии (20) | — | |
| 36 | badminton center management system project | 19 | 6 | · | · | NEWPoC 5 | badminton center management system (19) | — | |
| 37 | prison management system project | 19 | · | · | · | NEWPoC 15 | prison management system (19) | — | |
| 38 | apache | 18 | 5 | · | 3 | NEWNuclei 3 | http server (8) · hadoop (2) · sling commons log (1) | — | |
| 39 | apache software foundation | 18 | 5 | · | 3 | NEWNuclei 3 | apache http server (8) · http server (8) · apache hadoop (2) | — | |
| 40 | mediatek, inc. | 18 | · | · | · | NEW | mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt9636, mt9638, mt9666 (3) · mt6580, mt6735, mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8167s, mt8168, mt8175, mt8183, mt8185, mt8362a, mt8365, mt8385, mt8667, mt8675, mt8695, mt8696, mt8766, mt8768, mt8786, mt8788, mt8789, mt8797 (2) · mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt6895, mt6983, mt6985, mt8167s, mt8168, mt8175, mt8183, mt8185, mt8362a, mt8365, mt8385, mt8667, mt8675, mt8695, mt8696, mt8766, mt8768, mt8786, mt8788, mt8789, mt8797 (1) | — | |
| 41 | h3c | 17 | 17 | · | · | NEWPoC 4 | magic r100 firmware (17) | — | |
| 42 | splunk | 17 | 1 | · | · | NEWPoC 3 | universal forwarder (10) · splunk (8) · splunk cloud platform (5) | — | |
| 43 | hospital\'s patient records management system project | 16 | 2 | · | · | NEWPoC 9 | hospital\'s patient records management system (16) | — | |
| 44 | novell inc. | 16 | · | · | · | NEWPoC 5 | suse linux enterprise server (12) · suse linux enterprise server for sap applications (12) · opensuse leap (9) | — | |
| 45 | vim | 16 | · | · | · | NEWPoC 9 | vim/vim (16) · vim (16) | — | |
| 46 | hindu matrimonial script project | 15 | · | · | · | NEWPoC 15 | hindu matrimonial script (15) | — | |
| 47 | 74cms | 14 | · | · | · | NEWPoC 9 | 74cmsse (14) | — | |
| 48 | advanced school management system project | 14 | · | · | · | NEWPoC 14 | advanced school management system (14) | — | |
| 49 | codesys | 14 | 2 | · | · | NEW | runtime toolkit (11) · plcwinnt (11) · gateway (4) | — | |
| 50 | rescue dispatch management system project | 14 | 14 | · | · | NEWPoC 7 | rescue dispatch management system (14) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- OSS Libraries540 CVE58 crit113 vendorsCVSS 8.4ffmpeg (24) · curl (18) · dcmtk (14)
- Web & CMS Plugins388 CVE57 crit212 vendorsCVSS 8.3http server (16) · hindu matrimonial script (15) · 74cmsse (14)
- Enterprise Software345 CVE117 crit3 KEV90 vendorsCVSS 8.2prison management system (19) · clustered data ontap (15) · h300s firmware (11)
- Operating Systems335 CVE78 crit61 KEV31 vendorsCVSS 7.4fedora (91) · astra linux special edition (69) · осон основа оnyx (68)
- Consumer Software205 CVE5 crit33 vendorsCVSS 7.6ffmpeg (24) · hindu matrimonial script (15) · phplist (8)
- Mobile Apps173 CVE23 crit7 vendorsCVSS 7.1android (129) · emui (17) · magic ui (15)
- ICS / OT / IoT162 CVE316 crit60 vendorsCVSS 9.8v-sft (14) · plcwinnt (12) · runtime toolkit (11)
- Hardware Firmware147 CVE820 crit97 KEV31 vendorsCVSS 8.6wsa8830 firmware (59) · wcd9370 firmware (58) · wcd9375 firmware (58)
- Networking Infrastructure133 CVE85 crit47 vendorsCVSS 8.8magic r100 firmware (17) · ex1200t firmware (12) · r1510 (10)
- DevTools & CI126 CVE9 crit30 vendorsCVSS 7.4jenkins (12) · deployment dashboard (5) · jenkins deployment dashboard plugin (5)
- Cloud & SaaS96 CVE18 crit45 vendorsCVSS 8.1ca automic automation (7) · xen (5) · argo cd (4)
- Security Products82 CVE63 crit42 vendorsCVSS 7.8ldap account manager (10) · ep4502 (8) · ep4502 firmware (8)
- Communications67 CVE12 crit29 vendorsCVSS 7.0bigbluebutton (9) · server (8) · trueconf server (8)
- Databases38 CVE4 crit17 vendorsCVSS 7.5couchbase server (10) · bleve (1) · elasticsearch (1)
- AI / ML14 CVE5 vendorsCVSS 6.7mindspore (8) · kubeedge (2) · containerd (1)
- Unclassified241 CVE89 crit120 vendorsCVSS 7.6ос тд аис фссп россии (20) · badminton center management system (19) · hospital\'s patient records management system (16)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| OSS Libraries▸ 10 | 540 | 58 | · | 113 | 400 | 8.4 | ffmpeg (24) · curl (18) · dcmtk (14) |
| Web & CMS Plugins▸ 6 | 388 | 57 | · | 212 | 265 | 8.3 | http server (16) · hindu matrimonial script (15) · 74cmsse (14) |
| Enterprise Software▸ 7 | 345 | 117 | 3 | 90 | 392 | 8.2 | prison management system (19) · clustered data ontap (15) · h300s firmware (11) |
| Operating Systems▸ 5 | 335 | 78 | 61 | 31 | 271 | 7.4 | fedora (91) · astra linux special edition (69) · осон основа оnyx (68) |
| Consumer Software▸ 5 | 205 | 5 | · | 33 | 126 | 7.6 | ffmpeg (24) · hindu matrimonial script (15) · phplist (8) |
| Mobile Apps▸ 2 | 173 | 23 | · | 7 | 23 | 7.1 | android (129) · emui (17) · magic ui (15) |
| ICS / OT / IoT▸ 6 | 162 | 316 | · | 60 | 431 | 9.8 | v-sft (14) · plcwinnt (12) · runtime toolkit (11) |
| Hardware Firmware▸ 5 | 147 | 820 | 97 | 31 | 1,224 | 8.6 | wsa8830 firmware (59) · wcd9370 firmware (58) · wcd9375 firmware (58) |
| Networking Infrastructure▸ 6 | 133 | 85 | · | 47 | 130 | 8.8 | magic r100 firmware (17) · ex1200t firmware (12) · r1510 (10) |
| DevTools & CI▸ 4 | 126 | 9 | · | 30 | 133 | 7.4 | jenkins (12) · deployment dashboard (5) · jenkins deployment dashboard plugin (5) |
| Cloud & SaaS▸ 5 | 96 | 18 | · | 45 | 61 | 8.1 | ca automic automation (7) · xen (5) · argo cd (4) |
| Security Products▸ 6 | 82 | 63 | · | 42 | 78 | 7.8 | ldap account manager (10) · ep4502 (8) · ep4502 firmware (8) |
| Communications▸ 4 | 67 | 12 | · | 29 | 38 | 7.0 | bigbluebutton (9) · server (8) · trueconf server (8) |
| Databases▸ 5 | 38 | 4 | · | 17 | 27 | 7.5 | couchbase server (10) · bleve (1) · elasticsearch (1) |
| AI / ML▸ 2 | 14 | · | · | 5 | 7 | 6.7 | mindspore (8) · kubeedge (2) · containerd (1) |
| Unclassified | 241 | 89 | · | 120 | 130 | 7.6 | ос тд аис фссп россии (20) · badminton center management system (19) · hospital\'s patient records management system (16) |
Weakness × Sector
Which weaknesses hit which solution categories in June 2022
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS89SQL Injection787Out-of-bounds Write352CSRF269Improper Privilege Mgmt125Out-of-bounds Read20Improper Input Validation200Information Exposure78OS Command Injection862Missing AuthorizationOSS Libraries81339224144201215Web & CMS Plugins14988601813629Enterprise Software5811729121131274Operating Systems41308231718212Consumer Software2745408231410633ICS / OT / IoT14109671123Hardware Firmware9311215136143Networking Infrastructure10220361310231DevTools & CI40121414216Security Products101352412