CVE Tools
Sign in
month report

October 2022

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

October 2022 closed with 1,936 published CVEs. 307 criticals, 12 added to CISA KEV (7 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via debian gnu/linux. Top weakness class — CWE-787 (226 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,936
— MoM— YoY
Severity mix
307 / 730
critical / high
KEV added
12
7 ransomware-linked
Nuclei coverage
7.0%
136 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
1235.9
n=136
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
156
n=5
Weakness × Vendor

What's spreading where in October 2022

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

787Out-of-bounds Write79XSS89SQL Injection119Memory Buffer Bounds125Out-of-bounds Read434Unrestricted File Upload862Missing Authorization20Improper Input Validation284CWE-28478OS Command Injectionсообщество свободного программного обеспечения961512google231132835microsoft corp11microsoft1ао «нппкт»911522ао «ивк»714211oracle35oracle corporation35maven2115411ооо «русбитех-астра»911222debian10110111sap28443

Most discussed CVEs — October 2022

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    110 CVE5 critCVSS 5.9
    NEWNuclei 8PoC 25
    debian gnu/linux (68) · linux (54) · opencats (4)
  • 2google—
    99 CVE1 critCVSS 6.3
    NEWNuclei 1PoC 1
    android (93) · android studio (2) · bazel (1)
  • 3microsoft—
    94 CVE1 critCVSS 7.5
    NEWKEV 4Nuclei 1PoC 8
    windows 11 version 21h2 (66) · windows 11 (66) · windows server 2022 (server core installation) (66)
  • 4ао "нппкт"—
    83 CVE4 critCVSS 6.1
    NEWPoC 16
    осон основа оnyx (83)
  • 5oracle—
    81 CVE2 critCVSS 5.7
    NEWKEV 1Nuclei 6PoC 2
    mysql (26) · mysql server (25) · vm virtualbox (10)
  • 6ао «ивк»—
    80 CVE4 critCVSS 5.9
    NEWPoC 15
    альт 8 сп (72) · альт сп 10 (35)
  • 7maven—
    73 CVE15 critCVSS 6.9
    NEWNuclei 1PoC 5
    commons-jxpath:commons-jxpath (6) · com.liferay.portal:release.dxp.bom (5) · org.jenkins-ci.plugins:katalon (4)
  • 8ооо «русбитех-астра»—
    69 CVE2 critCVSS 5.8
    NEWPoC 16
    astra linux special edition (66) · astra linux special edition для «эльбрус» (18) · astra linux common edition (4)
  • 9debian—
    66 CVE4 critCVSS 6.4
    NEWNuclei 1PoC 17
    debian linux (66)
  • 10unknown—
    65 CVE2 critCVSS 6.0
    NEWNuclei 65PoC 36
    frontend file manager plugin (3) · wp custom cursors (2) · wp all export pro (2)
  • 11sap—
    55 CVE1 critCVSS 7.1
    NEWPoC 1
    3d visual enterprise author (26) · 3d visual enterprise viewer (17) · businessobjects business intelligence (3)
  • 12sap se—
    55 CVE1 critCVSS 7.1
    NEWPoC 1
    sap 3d visual enterprise author (26) · sap 3d visual enterprise viewer (17) · sap customer data cloud (gigya) (2)
  • 13fedoraproject—
    54 CVE2 critCVSS 6.4
    NEWNuclei 1PoC 16
    fedora (53) · supybot-fedora (1)
  • 14ооо «ред софт»—
    53 CVE6 critCVSS 6.5
    NEWNuclei 1PoC 12
    ред ос (53)
  • 15redhat—
    51 CVE3 critCVSS 6.3
    NEWNuclei 1PoC 12
    red hat enterprise linux (35) · openshift (3) · red hat software collections (2)
  • 16netapp—
    47 CVE2 critCVSS 5.2
    NEWNuclei 1PoC 4
    oncommand workflow automation (32) · oncommand insight (29) · active iq unified manager (10)
  • 17linux—
    46 CVECVSS 4.7
    NEWPoC 6
    linux kernel (44) · kernel (33)
  • 18sourcecodester—
    40 CVECVSS 4.7
    NEWPoC 21
    human resource management system (9) · sanitization management system (7) · simple cold storage management system (7)
  • 19abode systems, inc.—
    38 CVE24 critCVSS 9.3
    NEWPoC 14
    iota all-in-one security kit (38)
  • 20goabode—
    38 CVE24 critCVSS 9.3
    NEWPoC 14
    iota all-in-one security kit firmware (38)
  • 21unisoc (shanghai) technologies co., ltd.—
    38 CVECVSS 6.1
    NEW
    sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 (38)
  • 22juniper—
    37 CVE1 critCVSS 6.5
    NEWNuclei 2PoC 36
    junos (29) · junos os evolved (16) · paragon active assurance control center (1)
  • 23autodesk—
    36 CVE1 critCVSS 7.8
    NEW
    autocad plant 3d (26) · autocad (26) · autocad advance steel (26)
  • 24juniper networks—
    36 CVECVSS 6.4
    NEWNuclei 1PoC 35
    junos os (29) · junos (28) · junos os evolved (16)
  • 25siemens—
    36 CVE11 critCVSS 8.2
    NEW
    scalance w1750d firmware (12) · scalance w1750d (9) · desigo pxm40-1 firmware (7)
  • 26huawei—
    35 CVE9 critCVSS 6.7
    NEW
    harmonyos (34) · emui (31)
  • 27jenkins—
    35 CVE6 critCVSS 6.4
    NEWPoC 1
    jenkins compuware topaz for total test plugin (4) · pipeline\ (4) · jenkins katalon plugin (4)
  • 28ао «нтц ит роса»—
    35 CVE3 critCVSS 6.4
    NEWPoC 9
    роса хром (18) · роса кобальт (12) · rosa virtualization 3.0 (6)
  • 29adobe—
    34 CVE7 critCVSS 7.3
    NEW
    coldfusion (13) · dimension (9) · acrobat reader dc (6)
  • 30tenda—
    34 CVE18 critCVSS 8.6
    NEWNuclei 1PoC 12
    ac10 firmware (9) · tx3 firmware (6) · ac1206 firmware (5)
  • 31dell—
    33 CVECVSS 6.6
    NEW
    cpg bios (12) · alienware area 51m r2 firmware (8) · alienware m17 r3 firmware (8)
  • 32npm—
    33 CVE13 critCVSS 8.1
    NEWNuclei 4PoC 7
    browserify-shim (3) · feathers-sequelize (3) · loader-utils (3)
  • 33samsung mobile—
    33 CVECVSS 4.7
    NEW
    samsung mobile devices (12) · smartthings (8) · samsung account (3)
  • 34go—
    32 CVE5 critCVSS 6.2
    NEWNuclei 1PoC 7
    github.com/grafana/grafana (4) · github.com/openfga/openfga (3) · go.etcd.io/etcd/client/v3 (2)
  • 35oretnom23—
    32 CVE1 critCVSS 5.4
    NEWPoC 20
    simple cold storage management system (12) · human resource management system (10) · online birth certificate management system (4)
  • 36pypi—
    31 CVE9 critCVSS 7.7
    NEWPoC 9
    rdiffweb (9) · twisted (2) · powerline-gitstatus (1)
  • 37gitlab—
    30 CVE2 critCVSS 5.6
    NEWNuclei 1PoC 3
    gitlab (30)
  • 38axiosys—
    28 CVECVSS 6.7
    NEWPoC 16
    bento4 (28)
  • 39packagist—
    28 CVE5 critCVSS 7.3
    NEWNuclei 2PoC 9
    thorsten/phpmyfaq (4) · magento/community-edition (3) · noumo/easyii (2)
  • 40canonical—
    22 CVE2 critCVSS 5.9
    NEWPoC 4
    ubuntu (21) · ubuntu linux (1)
  • 41samsung—
    22 CVECVSS 4.7
    NEW
    smartthings (8) · account (3) · factorycamera (2)
  • 42f5—
    21 CVE1 critCVSS 6.3
    NEWPoC 1
    big-ip application security manager (10) · big-ip advanced firewall manager (9) · big-ip domain name system (8)
  • 43fedora project—
    21 CVE1 critCVSS 6.8
    NEWPoC 9
    fedora (20) · 389 directory server (1)
  • 44qualcomm—
    21 CVE3 critCVSS 7.9
    NEWPoC 1
    wcd9380 firmware (18) · wsa8835 firmware (18) · wsa8830 firmware (18)
  • 45qualcomm, inc.—
    21 CVE3 critCVSS 7.6
    NEWPoC 1
    snapdragon mobile (4) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables (3) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking (2)
  • 46apache software foundation—
    20 CVE7 critCVSS 7.9
    NEWNuclei 1PoC 1
    commons jxpath (3) · batik (2) · cassandra (2)
  • 47deltaww—
    19 CVE7 critCVSS 9.0
    NEW
    diaenergie (10) · infrasuite device master (9)
  • 48otfcc project—
    19 CVECVSS 6.5
    NEWPoC 19
    otfcc (19)
  • 49apache—
    17 CVE6 critCVSS 7.9
    NEWNuclei 1PoC 1
    isis (2) · batik (2) · commons jxpath (2)
  • 50democritus—
    17 CVE17 critCVSS 9.8
    NEWPoC 8
    d8s-asns (2) · d8s-utility (2) · d8s-domains (1)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-787226—
2CWE-79202—
3CWE-89110—
4CWE-11976—
5CWE-12563—
6CWE-43462—
7CWE-86259—
8CWE-2054—
9CWE-28454—
10CWE-7850—
11CWE-2249—
12CWE-35242—
13CWE-70741—
14CWE-41640—
15CWE-28737—
16CWE-20034—
17CWE-50233—
18CWE-40029—
19CWE-12028—
20CWE-40127—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Enterprise Software397 CVE
    170 crit83 vendorsCVSS 8.2
    oncommand workflow automation (32) · oncommand insight (29) · cpg bios (12)
  • Operating Systems387 CVE
    73 crit120 KEV38 vendorsCVSS 7.5
    осон основа оnyx (83) · fedora (73) · альт 8 сп (72)
  • OSS Libraries348 CVE
    104 crit3 KEV87 vendorsCVSS 8.5
    bento4 (39) · axiom axiomjdk (6) · exiv2 (6)
  • Web & CMS Plugins250 CVE
    55 crit126 vendorsCVSS 7.8
    semcms (10) · human resource management system (9) · liferay portal (9)
  • Networking Infrastructure206 CVE
    102 crit5 KEV45 vendorsCVSS 8.6
    junos (57) · junos os evolved (48) · junos os (29)
  • Mobile Apps165 CVE
    18 crit10 vendorsCVSS 7.0
    android (93) · harmonyos (34) · emui (31)
  • Security Products130 CVE
    65 crit7 KEV50 vendorsCVSS 8.8
    iota all-in-one security kit (38) · iota all-in-one security kit firmware (38) · fortinet fortitester (5)
  • Hardware Firmware109 CVE
    608 crit19 vendorsCVSS 8.9
    sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 (38) · zgr tps200 ng (4) · mt6580, mt6739, mt6753, mt6757, mt6761, mt6762, mt6763, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6885, mt6893, mt6895, mt6983, mt8321, mt8385, mt8666, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 (1)
  • DevTools & CI107 CVE
    34 crit32 vendorsCVSS 7.6
    octopus server (14) · gocd (8) · compuware topaz for total test (4)
  • Consumer Software92 CVE
    18 crit20 vendorsCVSS 8.8
    autocad (27) · autocad architecture (27) · autocad electrical (27)
  • ICS / OT / IoT91 CVE
    58 crit44 vendorsCVSS 8.0
    otfcc (19) · iot platform (3) · iot platform and lorawan network server (3)
  • Databases90 CVE
    9 crit4 KEV12 vendorsCVSS 9.9
    mysql server (48) · vm virtualbox (30) · mysql (26)
  • Cloud & SaaS84 CVE
    30 crit27 vendorsCVSS 8.9
    d8s-asns (2) · d8s-utility (2) · boundary (1)
  • Communications28 CVE
    12 crit16 vendorsCVSS 9.5
    exim (2) · mail sqr expert (2) · ox app suite (2)
  • AI / ML9 CVE
    1 crit6 vendorsCVSS 8.2
    yocto (4) · flyteadmin (2) · dapr dashboard (1)
  • Unclassified109 CVE
    16 crit58 vendorsCVSS 7.0
    opencats (10) · diaenergie (8) · infrasuite device master (8)
Weakness × Sector

Which weaknesses hit which solution categories in October 2022

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

787Out-of-bounds Write79XSS89SQL Injection119Memory Buffer Bounds125Out-of-bounds Read434Unrestricted File Upload862Missing Authorization20Improper Input Validation284CWE-28478OS Command InjectionOperating Systems50412028301182OSS Libraries32331611677943Enterprise Software297154433204565Web & CMS Plugins28442204212Networking Infrastructure521011115411Hardware Firmware2711017122954ICS / OT / IoT31175123212112Security Products111419323Consumer Software483118911341DevTools & CI2916284