CVE Tools
Sign in
month report

May 2023

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

May 2023 closed with 2,766 published CVEs. 259 criticals, 19 added to CISA KEV (1 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via debian gnu/linux. Top weakness class — CWE-79 (462 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
2,766
— MoM— YoY
Severity mix
259 / 796
critical / high
KEV added
19
1 ransomware-linked
Nuclei coverage
16.2%
447 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
1025.5
n=447
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
14
n=8
Detection gap

KEV pressure, no Nuclei coverage

May 2023 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in May 2023

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write89SQL Injection352CSRF20Improper Input Validation22Path Traversal120Buffer Overflow125Out-of-bounds Read77Command Injection862Missing Authorizationсообщество свободного программного обеспечения51127411042google331281127maven2021113312intel713123ооо «ред софт»626211631ао «нппкт»711311ооо «русбитех-астра»712711apple82861unisoc (shanghai) technologies co., ltd.228326microsoft corp122sourcecodester1639microsoft22

Most discussed CVEs — May 2023

No CVE mentions in the news this month yet.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    149 CVE11 critCVSS 7.1
    NEWNuclei 2PoC 54
    debian gnu/linux (92) · linux (25) · openemr (10)
  • 2google—
    139 CVE1 critCVSS 6.4
    NEWNuclei 1PoC 4
    android (106) · google chrome (31) · chrome (31)
  • 3maven—
    99 CVE15 critCVSS 7.1
    NEWKEV 2Nuclei 4PoC 5
    com.liferay.portal:release.portal.bom (14) · org.apache.inlong:manager-service (8) · org.apache.inlong:manager-pojo (7)
  • 4intel—
    94 CVECVSS 5.9
    NEW
    server system m50cyp1ur212 firmware (10) · server system m50cyp2ur208 firmware (10) · server system d50tnp1mhcrac firmware (10)
  • 5ооо «ред софт»—
    92 CVE5 critCVSS 6.8
    NEWKEV 1Nuclei 1PoC 40
    ред ос (92)
  • 6ао "нппкт"—
    88 CVE3 critCVSS 6.8
    NEWPoC 17
    осон основа оnyx (88)
  • 7unknown—
    85 CVE7 critCVSS 6.3
    NEWNuclei 83PoC 83
    ai chatbot (5) · clock in portal- staff & attendance management (3) · product catalog feed by pixelyoursite (2)
  • 8ооо «русбитех-астра»—
    80 CVE1 critCVSS 6.6
    NEWPoC 14
    astra linux special edition (77) · astra linux special edition для «эльбрус» (4) · astra linux common edition (4)
  • 9apple—
    71 CVE4 critCVSS 6.5
    NEWPoC 3
    macos (64) · ipados (41) · iphone os (41)
  • 10unisoc (shanghai) technologies co., ltd.—
    66 CVECVSS 5.5
    NEW
    sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 (66)
  • 11microsoft—
    61 CVE3 critCVSS 7.4
    NEWKEV 2PoC 2
    windows 11 21h2 (38) · windows 10 20h2 (37) · windows 10 21h2 (37)
  • 12sourcecodester—
    57 CVECVSS 5.5
    NEWPoC 55
    lost and found information system (12) · online exam system (8) · online computer and laptop store (5)
  • 13packagist—
    51 CVE3 critCVSS 6.4
    NEWNuclei 4PoC 14
    pimcore/pimcore (11) · craftcms/cms (8) · thorsten/phpmyfaq (6)
  • 14debian—
    48 CVECVSS 6.4
    NEWPoC 8
    debian linux (48)
  • 15fedoraproject—
    45 CVE2 critCVSS 6.6
    NEWNuclei 1PoC 9
    fedora (45) · extra packages for enterprise linux (5)
  • 16redhat—
    38 CVE5 critCVSS 7.4
    NEWPoC 10
    red hat enterprise linux (23) · enterprise linux (18) · red hat jboss core services (4)
  • 17ао «ивк»—
    38 CVE1 critCVSS 6.2
    NEWPoC 8
    альт 8 сп (31) · альт сп 10 (27)
  • 18jenkins—
    36 CVECVSS 5.9
    NEW
    jenkins saml single sign on(sso) plugin (6) · saml single sign on (5) · code dx (5)
  • 19go—
    35 CVE4 critCVSS 5.8
    NEWNuclei 1PoC 5
    github.com/kyverno/kyverno (2) · github.com/sigstore/rekor (2) · github.com/pydio/cells (2)
  • 20ibm—
    32 CVE1 critCVSS 6.2
    NEW
    mq (5) · infosphere information server (4) · mq appliance (3)
  • 21samsung—
    32 CVECVSS 5.6
    NEWKEV 1
    android (21) · samsung blockchain keystore (6) · galaxy store (3)
  • 22apache—
    31 CVE10 critCVSS 7.9
    NEWKEV 1Nuclei 1PoC 1
    inlong (11) · streampark (3) · openmeetings (3)
  • 23apache software foundation—
    31 CVE10 critCVSS 7.8
    NEWKEV 1Nuclei 1PoC 1
    apache inlong (11) · inlong (6) · apache streampark (incubating) (3)
  • 24pypi—
    31 CVE5 critCVSS 6.9
    NEWNuclei 1PoC 5
    vyper (5) · mlflow (3) · matrix-synapse (3)
  • 25samsung mobile—
    31 CVECVSS 5.9
    NEWKEV 1
    samsung mobile devices (21) · samsung blockchain keystore (6) · galaxy store (3)
  • 26canonical—
    29 CVE1 critCVSS 7.2
    NEWPoC 26
    ubuntu (29) · ubuntu linux (1) · ubuntu-linux (1)
  • 27cisco—
    28 CVE1 critCVSS 8.5
    NEWPoC 28
    identity services engine (11) · cisco identity services engine software (11) · cisco identity services engine (11)
  • 28npm—
    27 CVE4 critCVSS 7.3
    NEWNuclei 2PoC 3
    n8n (3) · vm2 (2) · ghost (2)
  • 29amd—
    26 CVE6 critCVSS 7.4
    NEW
    epyc 7443 firmware (14) · epyc 7413 firmware (14) · epyc 7543p firmware (14)
  • 30oretnom23—
    26 CVE3 critCVSS 6.3
    NEWPoC 22
    lost and found information system (12) · online computer and laptop store (6) · establishment billing management system (2)
  • 31mediatek, inc.—
    25 CVECVSS 5.7
    NEW
    mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt8183, mt8195 (4) · mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8185, mt8321, mt8385, mt8666, mt8667, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 (3) · mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8185, mt8321, mt8385, mt8666, mt8667, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 (2)
  • 32openlinksw—
    25 CVECVSS 7.5
    NEWPoC 25
    virtuoso (25)
  • 33fedora project—
    24 CVE2 critCVSS 7.2
    NEWNuclei 1PoC 9
    fedora (24)
  • 34hpe—
    24 CVE8 critCVSS 7.5
    NEW
    aruba access points running instantos and arubaos 10 (13) · aruba edgeconnect enterprise software (10) · hpe proliant rl300 gen11 (1)
  • 35openlink software—
    24 CVECVSS 7.5
    NEWPoC 24
    virtuoso-opensource (24)
  • 36ао «нтц ит роса»—
    24 CVE1 critCVSS 6.5
    NEWPoC 8
    роса хром (10) · rosa virtualization 3.0 (9) · rosa virtualization (7)
  • 37h3c—
    20 CVE2 critCVSS 7.3
    NEWNuclei 1PoC 3
    magic r300-2100m firmware (17) · gr-1200w firmware (2) · magic r160 firmware (1)
  • 38schweitzer engineering laboratories—
    20 CVE2 critCVSS 5.1
    NEW
    sel-3560s (19) · sel-3350 (19) · sel-3505 (19)
  • 39selinc—
    20 CVE2 critCVSS 5.2
    NEW
    sel-3555 firmware (20) · sel-3350 firmware (20) · sel-3532 firmware (20)
  • 40huawei—
    19 CVE3 critCVSS 7.4
    NEW
    emui (17) · harmonyos (17)
  • 41linux—
    19 CVECVSS 6.5
    NEWPoC 3
    linux kernel (19)
  • 42codesys—
    18 CVECVSS 8.2
    NEW
    control for pfc100 sl (17) · control for pfc200 sl (17) · control for plcnext sl (17)
  • 43siemens—
    18 CVE3 critCVSS 6.9
    NEWPoC 1
    simatic cloud connect 7 cc712 (7) · simatic cloud connect 7 cc716 (7) · 6gk1411-5ac00 firmware (7)
  • 44codesys gmbh—
    17 CVECVSS 8.3
    NEW
    codesys control for beaglebone sl (16) · codesys control for empc-a/imx6 sl (16) · codesys control for iot2000 sl (16)
  • 45novell inc.—
    17 CVE1 critCVSS 6.9
    NEWPoC 4
    suse linux enterprise server (14) · opensuse leap (13) · suse linux enterprise server for sap applications (13)
  • 46schneider electric—
    17 CVECVSS 8.4
    NEW
    modicon m262 (15) · hmiscu (15) · modicon lmc058 (15)
  • 47netbox—
    16 CVE1 critCVSS 5.6
    NEWPoC 8
    netbox (16)
  • 48rockwell automation—
    16 CVE1 critCVSS 6.4
    NEW
    armorstart st (10) · arena simulation (3) · kinetix 5500 ethernet/ip servo drive (1)
  • 49rockwellautomation—
    16 CVE1 critCVSS 6.0
    NEW
    armorstart st 281e firmware (10) · armorstart st 284ee firmware (10) · arena (3)
  • 50rockwell automation inc.—
    16 CVE1 critCVSS 6.0
    NEW
    armorstart st 281e (10) · armorstart st 284e (8) · rockwell automation arena (3)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79462—
2CWE-787154—
3CWE-89144—
4CWE-352143—
5CWE-2089—
6CWE-2274—
7CWE-12069—
8CWE-12563—
9CWE-7755—
10CWE-86253—
11CWE-86351—
12CWE-28445—
13CWE-7841—
14CWE-41640—
15CWE-43439—
16CWE-27635—
17CWE-28734—
18CWE-40034—
19CWE-20029—
20CWE-73228—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins591 CVE
    77 crit3 KEV394 vendorsCVSS 6.8
    inlong (17) · digital experience platform (14) · dxp (14)
  • OSS Libraries381 CVE
    75 crit4 KEV105 vendorsCVSS 8.6
    jerryscript (11) · c-ares (8) · qt (8)
  • Enterprise Software340 CVE
    62 crit104 vendorsCVSS 6.8
    instantos (13) · faronics insight (10) · insight (10)
  • Operating Systems332 CVE
    203 crit39 KEV37 vendorsCVSS 7.4
    debian gnu/linux (92) · ред ос (92) · осон основа оnyx (88)
  • Hardware Firmware327 CVE
    1,078 crit41 vendorsCVSS 8.8
    sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 (66) · epyc 72f3 firmware (14) · epyc 7313 firmware (14)
  • Mobile Apps272 CVE
    17 crit1 KEV12 vendorsCVSS 6.8
    android (128) · chrome (31) · google chrome (31)
  • Networking Infrastructure181 CVE
    178 crit72 KEV52 vendorsCVSS 8.7
    magic r300-2100m firmware (17) · cisco identity services engine (11) · cisco identity services engine software (11)
  • ICS / OT / IoT154 CVE
    156 crit68 vendorsCVSS 8.2
    sel-3350 (19) · sel-3505 (19) · sel-3530 (19)
  • DevTools & CI108 CVE
    6 crit29 vendorsCVSS 6.5
    jenkins saml single sign on(sso) plugin (6) · code dx (5) · jenkins code dx plugin (5)
  • Security Products95 CVE
    14 crit6 KEV51 vendorsCVSS 8.4
    fortinac (6) · fortinac-f (5) · avalanche (4)
  • Cloud & SaaS86 CVE
    10 crit44 vendorsCVSS 7.0
    security-advisories (6) · pydio cells (4) · mstore api (3)
  • Databases74 CVE
    3 crit20 vendorsCVSS 7.9
    virtuoso (25) · qradar wincollect agent (2) · sqlite (2)
  • Communications73 CVE
    15 crit1 KEV29 vendorsCVSS 9.8
    rocket.chat (8) · hermes (7) · synapse (6)
  • Consumer Software60 CVE
    8 crit31 vendorsCVSS 9.8
    adobe substance 3d painter (14) · substance 3d painter (14) · substance3d - painter (14)
  • AI / ML20 CVE
    11 crit10 vendorsCVSS 9.0
    mage-ai (2) · rekor (2) · beipyvideoresolution (1)
  • Unclassified287 CVE
    57 crit5 KEV199 vendorsCVSS 6.2
    sel-3350 firmware (20) · sel-3532 firmware (20) · sel-3555 firmware (20)
Weakness × Sector

Which weaknesses hit which solution categories in May 2023

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write89SQL Injection352CSRF20Improper Input Validation22Path Traversal120Buffer Overflow125Out-of-bounds Read77Command Injection862Missing AuthorizationWeb & CMS Plugins260731136172110Operating Systems2632722423533729OSS Libraries77238151712510126Hardware Firmware145213792520428Enterprise Software7526064739Networking Infrastructure202931513235231ICS / OT / IoT311774116347Consumer Software111126428Security Products12103334142DevTools & CI1431242611