CVE Tools
Sign in
month report

June 2023

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

June 2023 closed with 2,448 published CVEs. 297 criticals, 24 added to CISA KEV (2 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via debian gnu/linux. Top weakness class — CWE-79 (363 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
2,448
— MoM— YoY
Severity mix
297 / 872
critical / high
KEV added
24
2 ransomware-linked
Nuclei coverage
21.0%
514 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
998.3
n=514
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
7
n=14
Detection gap

KEV pressure, no Nuclei coverage

June 2023 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in June 2023

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write125Out-of-bounds Read862Missing Authorization89SQL Injection20Improper Input Validation416Use After Free863Incorrect Authorization434Unrestricted File Upload22Path Traversalсообщество свободного программного обеспечения12194252745google2549256111ооо «русбитех-астра»23522421ао «нппкт»123322421microsoft corp5569microsoft5567ао «ивк»18421311maven181124112mozilla162532ооо «ред софт»212231312mozilla corp.162632apple51761

Most discussed CVEs — June 2023

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    171 CVE21 critCVSS 7.1
    NEWKEV 1Nuclei 16PoC 26
    debian gnu/linux (93) · linux (36) · xwiki platform (17)
  • 2google—
    169 CVE4 critCVSS 6.6
    NEWKEV 2PoC 5
    android (153) · google chrome (10) · chrome (8)
  • 3ооо «русбитех-астра»—
    130 CVE6 critCVSS 7.0
    NEWKEV 7PoC 13
    astra linux special edition (129) · astra linux special edition для «эльбрус» (8)
  • 4ао "нппкт"—
    129 CVE5 critCVSS 7.1
    NEWKEV 2PoC 11
    осон основа оnyx (129)
  • 5microsoft—
    97 CVE4 critCVSS 7.6
    NEWKEV 3Nuclei 1PoC 5
    windows server 2022 (34) · windows server 2022 (server core installation) (34) · windows server 2019 (server core installation) (32)
  • 6ао «ивк»—
    93 CVE4 critCVSS 6.8
    NEWKEV 1Nuclei 1PoC 9
    альт 8 сп (85) · альт сп 10 (45)
  • 7mozilla—
    87 CVE8 critCVSS 7.3
    NEW
    firefox (82) · firefox esr (54) · thunderbird (50)
  • 8maven—
    86 CVE25 critCVSS 7.5
    NEWNuclei 11PoC 22
    org.jeecgframework.boot:jeecg-boot-parent (4) · io.grpc:grpc-protobuf (3) · org.xerial.snappy:snappy-java (3)
  • 9ооо «ред софт»—
    86 CVE7 critCVSS 7.2
    NEWNuclei 1PoC 9
    ред ос (86)
  • 10apple—
    73 CVE4 critCVSS 6.4
    NEWKEV 7PoC 2
    macos (64) · iphone os (48) · ipados (48)
  • 11redhat—
    65 CVE3 critCVSS 6.7
    NEWKEV 2Nuclei 1PoC 7
    red hat enterprise linux (52) · enterprise linux (10) · red hat enterprise linux 9 (3)
  • 12unknown—
    65 CVE3 critCVSS 6.1
    NEWNuclei 65PoC 61
    kivicare (4) · qubot (2) · wpbrutalai (2)
  • 13packagist—
    56 CVE9 critCVSS 6.5
    NEWNuclei 2PoC 13
    magento/community-edition (12) · magento/project-community-edition (12) · nilsteampassnet/teampass (6)
  • 14go—
    42 CVE4 critCVSS 6.5
    NEWNuclei 3PoC 4
    github.com/grafana/grafana (4) · github.com/rancher/rancher (3) · github.com/cosmos/cosmos-sdk (3)
  • 15canonical—
    40 CVE1 critCVSS 7.1
    NEWPoC 6
    ubuntu (35) · landscape (3) · ubuntu linux (2)
  • 16dell—
    38 CVECVSS 5.1
    NEW
    cpg bios (30) · inspiron 15 5510 firmware (29) · latitude 5530 firmware (29)
  • 17ао «нтц ит роса»—
    37 CVE5 critCVSS 6.7
    NEWKEV 1Nuclei 1PoC 6
    rosa virtualization 3.0 (20) · роса хром (17) · роса кобальт (6)
  • 18debian—
    34 CVECVSS 7.2
    NEWKEV 2PoC 11
    debian linux (34)
  • 19huawei—
    34 CVE3 critCVSS 7.1
    NEW
    emui (26) · harmonyos (18) · bisheng-wnm (3)
  • 20linux—
    34 CVECVSS 6.8
    NEWKEV 1PoC 7
    linux kernel (34) · kernel (2)
  • 21fedoraproject—
    33 CVE4 critCVSS 6.7
    NEWKEV 2Nuclei 1PoC 8
    fedora (33) · extra packages for enterprise linux (3)
  • 22trendmicro—
    33 CVE2 critCVSS 7.2
    NEWPoC 1
    apex one (12) · apex central (11) · apex one as a service (11)
  • 23trend micro, inc.—
    33 CVE2 critCVSS 7.1
    NEWPoC 1
    trend micro apex one (12) · trend micro apex central (11) · trend micro moibile security for enterprise (9)
  • 24hp—
    32 CVE5 critCVSS 8.0
    NEWPoC 1
    zhan 66 pro 13 g2 firmware (15) · elitebook 840 g6 firmware (15) · zbook firefly 14 g7 firmware (15)
  • 25qualcomm—
    32 CVECVSS 7.5
    NEWPoC 2
    wcd9380 firmware (28) · wsa8810 firmware (27) · wcn685x-5 firmware (27)
  • 26qualcomm, inc.—
    32 CVECVSS 7.4
    NEWPoC 2
    snapdragon (32)
  • 27ibm—
    31 CVECVSS 5.6
    NEW
    security directory suite va (6) · qradar security information and event manager (4) · txseries for multiplatforms (4)
  • 28mediatek, inc.—
    31 CVECVSS 6.0
    NEW
    mt6789, mt6855, mt8185, mt8195, mt8365, mt8395, mt8781, mt8786, mt8789, mt8791, mt8797 (3) · mt6768, mt6769, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8168, mt8365, mt8395 (3) · mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt8321, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8797 (2)
  • 29npm—
    30 CVE3 critCVSS 6.6
    NEWNuclei 2PoC 6
    @openzeppelin/contracts (2) · @openzeppelin/contracts-upgradeable (2) · joplin (2)
  • 30pypi—
    30 CVE3 critCVSS 6.9
    NEWPoC 7
    pypdf2 (3) · grpcio (3) · langchain (2)
  • 31sourcecodester—
    28 CVECVSS 5.3
    NEWPoC 28
    online discussion forum site (10) · online school fees system (3) · lost and found information system (2)
  • 32novell inc.—
    23 CVE1 critCVSS 6.7
    NEWPoC 1
    suse linux enterprise server for sap applications (21) · suse linux enterprise server (20) · suse linux enterprise desktop (17)
  • 33linuxfoundation—
    22 CVECVSS 6.3
    NEW
    yocto (21) · iot-yocto (15) · backstage (1)
  • 34xwiki—
    22 CVE17 critCVSS 9.1
    NEWNuclei 8PoC 6
    xwiki (21) · xwiki-platform (21) · ckeditor integration (1)
  • 35fortinet—
    21 CVE2 critCVSS 6.4
    NEWKEV 1Nuclei 1
    fortios (11) · fortiproxy (11) · fortinac (3)
  • 36fortinet inc.—
    21 CVE2 critCVSS 6.4
    NEWKEV 1Nuclei 1
    fortiproxy (11) · fortios (11) · fortisiem (3)
  • 37unisoc (shanghai) technologies co., ltd.—
    20 CVECVSS 5.8
    NEW
    sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 (20)
  • 38fedora project—
    19 CVE2 critCVSS 7.2
    NEWPoC 3
    fedora (19)
  • 39adobe—
    18 CVE1 critCVSS 5.5
    NEW
    magento (12) · adobe commerce (12) · commerce (12)
  • 40apache software foundation—
    18 CVE1 critCVSS 6.6
    NEWPoC 2
    traffic server (3) · apache traffic server (3) · apache airflow odbc provider (2)
  • 41apache—
    16 CVE1 critCVSS 6.9
    NEWPoC 2
    traffic server (3) · apache-airflow-providers-odbc (2) · struts (2)
  • 42gitlab—
    16 CVECVSS 5.6
    NEWPoC 1
    gitlab (16)
  • 43siemens—
    16 CVE2 critCVSS 5.8
    NEWPoC 3
    jt2go (5) · teamcenter visualization (5) · teamcenter visualization v13.3 (4)
  • 44tp-link—
    15 CVE5 critCVSS 8.1
    NEWKEV 1PoC 7
    tl-wr940n firmware (9) · tl-wr841n firmware (8) · tl-wr740n firmware (5)
  • 45tp-link technologies co ltd.—
    15 CVE5 critCVSS 8.1
    NEWKEV 1PoC 7
    tl-wr940n (9) · tl-wr841n (8) · tl-wr941nd (5)
  • 46netapp—
    14 CVECVSS 7.2
    NEWPoC 7
    h700s firmware (6) · h300s firmware (6) · h500s firmware (6)
  • 47tenda—
    14 CVE6 critCVSS 8.1
    NEWPoC 4
    ac8 firmware (6) · ac10 firmware (6) · ac6 firmware (1)
  • 48dlink—
    13 CVE8 critCVSS 9.1
    NEWPoC 5
    dir-823g (4) · dir-823g firmware (4) · dir-842v2 firmware (2)
  • 49vcita—
    13 CVECVSS 6.1
    NEWNuclei 13PoC 4
    online booking & scheduling calendar for wordpress by vcita (5) · online booking \& scheduling calendar (5) · contact form builder by vcita (2)
  • 50фссп россии—
    13 CVE2 critCVSS 7.5
    NEW
    ос тд аис фссп россии (13)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79363—
2CWE-787161—
3CWE-125112—
4CWE-862109—
5CWE-89102—
6CWE-2067—
7CWE-41661—
8CWE-86361—
9CWE-43459—
10CWE-2257—
11CWE-35249—
12CWE-7747—
13CWE-12046—
14CWE-20040—
15CWE-9439—
16CWE-7837—
17CWE-40031—
18CWE-28729—
19CWE-77029—
20CWE-27625—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins663 CVE
    150 crit393 vendorsCVSS 7.8
    frontend file manager plugin (16) · metform elementor contact form builder (11) · directory listings wordpress plugin – ulisting (9)
  • Operating Systems442 CVE
    232 crit54 KEV44 vendorsCVSS 7.7
    astra linux special edition (129) · осон основа оnyx (129) · debian gnu/linux (93)
  • OSS Libraries413 CVE
    78 crit114 vendorsCVSS 8.6
    imagemagick (7) · libtiff (7) · node.js (5)
  • Enterprise Software332 CVE
    1,204 crit4 KEV112 vendorsCVSS 7.3
    cpg bios (30) · alienware m15 r7 firmware (29) · g15 5510 firmware (29)
  • Mobile Apps297 CVE
    36 crit67 KEV14 vendorsCVSS 7.6
    android (160) · emui (26) · harmonyos (18)
  • Hardware Firmware170 CVE
    72 crit44 vendorsCVSS 8.6
    sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 (20) · z\/ip gateway sdk (4) · gecko software development kit (3)
  • Security Products159 CVE
    36 crit6 KEV57 vendorsCVSS 7.5
    apex one (23) · trend micro apex central (21) · trend micro apex one (12)
  • Networking Infrastructure143 CVE
    213 crit15 KEV44 vendorsCVSS 7.9
    magic b1st firmware (10) · tl-wr940n (9) · tl-wr940n firmware (9)
  • Consumer Software143 CVE
    42 crit3 KEV36 vendorsCVSS 7.8
    firefox (160) · firefox esr (101) · thunderbird (92)
  • ICS / OT / IoT142 CVE
    317 crit68 vendorsCVSS 9.5
    cscape (30) · cscape envisionrv (30) · factorytalk system services (9)
  • Cloud & SaaS80 CVE
    11 crit5 KEV43 vendorsCVSS 7.5
    nextcloud server (10) · mstore api (7) · mstore api – create native android & ios apps on the cloud (6)
  • DevTools & CI61 CVE
    6 crit26 vendorsCVSS 8.8
    renderdoc (3) · wireshark (3) · gradle (2)
  • Communications56 CVE
    3 crit29 vendorsCVSS 8.5
    open-xchange appsuite backend (9) · ox app suite (9) · zimbra collaboration suite (3)
  • Databases43 CVE
    2 crit1 KEV21 vendorsCVSS 7.6
    monetdb (10) · ibm qradar siem (4) · postgresql (4)
  • AI / ML31 CVE
    4 crit11 vendorsCVSS 8.7
    yocto (21) · iot-yocto (15) · langchain (2)
  • Unclassified169 CVE
    40 crit133 vendorsCVSS 7.0
    ос тд аис фссп россии (13) · coda-5310 firmware (5) · adning advertising (4)
Weakness × Sector

Which weaknesses hit which solution categories in June 2023

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write125Out-of-bounds Read862Missing Authorization89SQL Injection20Improper Input Validation416Use After Free863Incorrect Authorization434Unrestricted File Upload22Path TraversalWeb & CMS Plugins203351613173414Operating Systems4688230164796OSS Libraries5334871010710610Enterprise Software7222112529910Hardware Firmware1381820135982Consumer Software11217216944Security Products3762352647ICS / OT / IoT519133412564Networking Infrastructure13314141514Communications98261421