CVE Tools
Sign in
month report

February 2023

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

February 2023 closed with 2,562 published CVEs. 261 criticals, 14 added to CISA KEV (9 ransomware-linked). unknown led volume, mostly via simple urls. Top weakness class — CWE-79 (288 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
2,562
— MoM— YoY
Severity mix
261 / 790
critical / high
KEV added
14
9 ransomware-linked
Nuclei coverage
12.1%
310 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
1117.3
n=310
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
4
n=9
Detection gap

KEV pressure, no Nuclei coverage

February 2023 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in February 2023

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write89SQL Injection77Command Injection125Out-of-bounds Read20Improper Input Validation352CSRF200Information Exposure22Path Traversal284CWE-284сообщество свободного программного обеспечения21431124132google1674711microsoft corp722832ао «нппкт»1107411ооо «русбитех-астра»1117431microsoft722932intel12441ооо «ред софт»341143312dell2323115sourcecodester104223packagist2311241red hat inc.1811722

Most discussed CVEs — February 2023

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1unknown—
    156 CVE3 critCVSS 5.8
    Nuclei 156PoC 156
    simple urls (2) · shoplentor (2) · intuitive custom post order (2)
  • 2сообщество свободного программного обеспечения—
    132 CVE6 critCVSS 7.1
    Nuclei 6PoC 29
    debian gnu/linux (98) · linux (20) · gss-ntlmssp (5)
  • 3google—
    106 CVE1 critCVSS 6.9
    PoC 1
    android (88) · chrome (18) · google chrome (18)
  • 4microsoft—
    93 CVE7 critCVSS 7.8
    KEV 4PoC 1
    windows 10 1809 (38) · windows 10 20h2 (38) · windows 10 21h2 (37)
  • 5ао "нппкт"—
    87 CVE3 critCVSS 7.2
    KEV 1PoC 17
    осон основа оnyx (87)
  • 6ооо «русбитех-астра»—
    85 CVE2 critCVSS 7.1
    KEV 1PoC 16
    astra linux special edition (85) · astra linux common edition (5) · astra linux special edition для «эльбрус» (3)
  • 7intel—
    74 CVECVSS 7.0
    xeon gold 6312u firmware (8) · xeon gold 5320t firmware (8) · xeon gold 5320h firmware (8)
  • 8ооо «ред софт»—
    72 CVE4 critCVSS 6.8
    Nuclei 2PoC 22
    ред ос (72)
  • 9dell—
    68 CVECVSS 6.2
    powerscale onefs (18) · emc powerscale onefs (15) · supportassist for home pcs (8)
  • 10sourcecodester—
    61 CVECVSS 5.6
    NEWPoC 37
    doctors appointment system (7) · music gallery site (6) · online pizza ordering system (5)
  • 11redhat—
    59 CVE4 critCVSS 7.1
    KEV 1Nuclei 2PoC 11
    red hat enterprise linux (48) · red hat satellite (5) · enterprise linux (4)
  • 12packagist—
    58 CVE3 critCVSS 6.7
    Nuclei 8PoC 20
    thorsten/phpmyfaq (10) · wallabag/wallabag (6) · pimcore/pimcore (5)
  • 13apple—
    56 CVE3 critCVSS 6.8
    KEV 1PoC 2
    macos (43) · iphone os (30) · ipados (29)
  • 14unisoc (shanghai) technologies co., ltd.—
    50 CVECVSS 5.6
    NEW
    sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 (50)
  • 15maven—
    48 CVE6 critCVSS 6.7
    Nuclei 4PoC 6
    org.jenkins-ci.plugins:azure-credentials (3) · org.jeecgframework.boot:jeecg-boot-base (3) · org.jenkins-ci.plugins:email-ext (3)
  • 16siemens—
    46 CVE1 critCVSS 7.6
    solid edge se2022 (20) · solid edge se2023 (19) · tecnomatix plant simulation (19)
  • 17npm—
    45 CVE4 critCVSS 6.8
    Nuclei 2PoC 13
    sequelize (5) · @sequelize/core (5) · undici (2)
  • 18go—
    44 CVE10 critCVSS 7.1
    Nuclei 2PoC 6
    github.com/answerdev/answer (7) · github.com/rancher/rancher (5) · github.com/pion/dtls/v2 (2)
  • 19ао «ивк»—
    42 CVE3 critCVSS 7.0
    PoC 13
    альт 8 сп (30) · альт сп 10 (27) · альт рабочая станция к (1)
  • 20novell inc.—
    40 CVE2 critCVSS 7.4
    Nuclei 1PoC 10
    opensuse leap (27) · suse linux enterprise server for sap applications (24) · suse linux enterprise server (23)
  • 21fortinet—
    38 CVE4 critCVSS 6.5
    NEWNuclei 2
    fortiweb (18) · fortinac (8) · fortios (7)
  • 22ibm—
    37 CVE2 critCVSS 5.9
    KEV 1Nuclei 1PoC 1
    infosphere information server (5) · sterling b2b integrator standard edition (4) · sterling b2b integrator (4)
  • 23ао «нтц ит роса»—
    37 CVE2 critCVSS 6.9
    PoC 3
    роса хром (20) · rosa virtualization (14) · rosa virtualization 3.0 (13)
  • 24hpe—
    36 CVE9 critCVSS 7.8
    NEW
    aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central (32) · serviceguard for linux (3) · hpe serviceguard for linux (3)
  • 25pypi—
    34 CVE4 critCVSS 6.7
    Nuclei 1PoC 8
    modoboa (3) · markdown-it-py (2) · apache-airflow-providers-google (2)
  • 26aruba networks—
    32 CVE6 critCVSS 7.6
    NEW
    arubaos (32) · sd-wan (32)
  • 27arubanetworks—
    32 CVE6 critCVSS 7.6
    NEW
    arubaos (32) · sd-wan (32)
  • 28samsung mobile—
    32 CVECVSS 5.2
    NEW
    samsung mobile devices (19) · samsung cloud (2) · galaxy store (2)
  • 29samsung—
    31 CVECVSS 5.2
    NEW
    android (22) · cloud (2) · flow (2)
  • 30mediatek, inc.—
    29 CVE5 critCVSS 6.9
    NEW
    en7528, en7580 (6) · mt6879, mt6895, mt6983 (3) · mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8321, mt8385, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 (3)
  • 31totolink—
    29 CVE28 critCVSS 9.7
    NEWPoC 26
    ca300-poe firmware (15) · ca300-poe (11) · t8 firmware (8)
  • 32adobe—
    28 CVECVSS 7.1
    NEWNuclei 1PoC 1
    bridge (7) · adobe bridge (7) · adobe framemaker (5)
  • 33dell technologies—
    27 CVECVSS 7.3
    NEW
    powerscale onefs (11) · dell update (3) · alienware update (3)
  • 34qualcomm—
    27 CVE4 critCVSS 8.1
    wcd9380 firmware (24) · wsa8815 firmware (23) · wsa8810 firmware (23)
  • 35qualcomm, inc.—
    27 CVE4 critCVSS 7.9
    snapdragon (27)
  • 36huawei—
    26 CVE5 critCVSS 7.3
    harmonyos (16) · emui (15) · bisheng-wnm firmware (5)
  • 37fortinet inc.—
    24 CVE4 critCVSS 7.0
    NEWNuclei 2
    fortiweb (15) · fortinac (5) · fortios (4)
  • 38sap—
    22 CVECVSS 6.2
    Nuclei 1
    netweaver application server abap (7) · solution manager (4) · netweaver as abap (bsp framework) (3)
  • 39fedora project—
    21 CVE2 critCVSS 6.9
    Nuclei 1PoC 5
    fedora (20) · 389 directory server (1)
  • 40dlink—
    20 CVE5 critCVSS 8.7
    NEWPoC 3
    dir-605l firmware (10) · dir-605l (10) · dap-1360 (8)
  • 41wickedplugins—
    19 CVECVSS 5.4
    NEWNuclei 19
    wicked folders (19) · wicked folders – folder organizer for pages, posts, and custom post types (19)
  • 42crates.io—
    18 CVECVSS 6.8
    PoC 1
    openssl-src (8) · ckb (2) · deno (2)
  • 43linux—
    18 CVECVSS 6.3
    PoC 2
    linux kernel (18)
  • 44oretnom23—
    18 CVE5 critCVSS 7.3
    NEWPoC 10
    simple customer relationship management system (7) · raffle draw system (5) · online eyewear shop (4)
  • 45cisco—
    17 CVE1 critCVSS 6.7
    PoC 15
    nx-os (3) · ucs 64108 firmware (3) · cisco unified computing system (managed) (3)
  • 46f5—
    17 CVECVSS 7.1
    big-ip (14) · big-ip access policy manager (13) · big-ip application security manager (11)
  • 47splunk—
    17 CVE1 critCVSS 6.4
    NEWPoC 2
    splunk enterprise (12) · splunk (12) · splunk cloud platform (11)
  • 48apache—
    16 CVE5 critCVSS 8.3
    Nuclei 1PoC 1
    inlong (2) · apache-airflow-providers-google (2) · sling jcr base (1)
  • 49apache software foundation—
    16 CVE5 critCVSS 8.3
    Nuclei 1PoC 1
    apache airflow google provider (2) · apache inlong (2) · apache airflow hive provider (1)
  • 50ibm corp.—
    16 CVE1 critCVSS 5.9
    KEV 1Nuclei 1PoC 1
    ibm db2 (3) · infosphere information server (3) · ibm sterling secure proxy (2)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79288—
2CWE-787146—
3CWE-89146—
4CWE-7782—
5CWE-12576—
6CWE-2067—
7CWE-35266—
8CWE-20057—
9CWE-2257—
10CWE-28445—
11CWE-86245—
12CWE-40037—
13CWE-41637—
14CWE-7836—
15CWE-12132—
16CWE-43430—
17CWE-12229—
18CWE-30627—
19CWE-50227—
20CWE-9427—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins452 CVE
    55 crit2 KEV249 vendorsCVSS 7.7
    music gallery site (12) · thorsten/phpmyfaq (10) · doctors appointment system (7)
  • OSS Libraries417 CVE
    60 crit2 KEV127 vendorsCVSS 7.6
    openssl (16) · gss-ntlmssp (10) · libtiff (10)
  • Enterprise Software397 CVE
    52 crit3 KEV101 vendorsCVSS 7.4
    checkmk (18) · powerscale onefs (18) · emc powerscale onefs (15)
  • Operating Systems380 CVE
    273 crit122 KEV37 vendorsCVSS 9.6
    debian gnu/linux (98) · осон основа оnyx (87) · astra linux special edition (85)
  • Hardware Firmware319 CVE
    560 crit2 KEV45 vendorsCVSS 8.7
    sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 (50) · system usage report (8) · xeon gold 5317 firmware (8)
  • Mobile Apps222 CVE
    11 crit9 KEV10 vendorsCVSS 6.8
    android (112) · chrome (18) · google chrome (18)
  • Networking Infrastructure222 CVE
    153 crit5 KEV63 vendorsCVSS 7.9
    ca300-poe firmware (15) · ca300-poe (11) · dir-605l (10)
  • ICS / OT / IoT119 CVE
    112 crit56 vendorsCVSS 9.8
    smartpower web (15) · screen creator advance 2 (14) · xbc-dn32u (7)
  • Security Products111 CVE
    12 crit35 vendorsCVSS 7.2
    fortiweb (18) · fortinac (8) · fortios (7)
  • Consumer Software73 CVE
    3 crit35 vendorsCVSS 7.0
    photoshop (8) · adobe bridge (7) · bridge (7)
  • Cloud & SaaS68 CVE
    9 crit35 vendorsCVSS 7.4
    security-advisories (12) · nextcloud server (9) · mail (3)
  • Databases62 CVE
    1 crit1 KEV28 vendorsCVSS 7.5
    oracle exadata (4) · ibm db2 (3) · infosphere information server (3)
  • DevTools & CI45 CVE
    5 crit26 vendorsCVSS 7.2
    azure credentials (3) · email extension (3) · jenkins azure credentials plugin (3)
  • Communications21 CVE
    4 crit14 vendorsCVSS 9.8
    misskey (8) · mattermost (4) · mattermost server (2)
  • AI / ML9 CVE
    1 crit5 vendorsCVSS 6.6
    containerd (2) · backstage catalog-model (1) · backstage core-components (1)
  • Unclassified154 CVE
    28 crit1 KEV114 vendorsCVSS 6.7
    апекс-вуз (10) · doctors appointment system (7) · devolutions server (4)
Weakness × Sector

Which weaknesses hit which solution categories in February 2023

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write89SQL Injection77Command Injection125Out-of-bounds Read20Improper Input Validation352CSRF200Information Exposure22Path Traversal284CWE-284Web & CMS Plugins10080211433159Operating Systems73824321623311OSS Libraries6626125141491172Hardware Firmware152712922171963Enterprise Software9055571212887Networking Infrastructure152615471281ICS / OT / IoT1628831542726Consumer Software8228198123Security Products91111153481Cloud & SaaS91432149