CVE Tools
Sign in
month report

July 2023

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

July 2023 closed with 2,380 published CVEs. 275 criticals, 16 added to CISA KEV (4 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via debian gnu/linux. Top weakness class — CWE-79 (324 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
2,380
— MoM— YoY
Severity mix
275 / 751
critical / high
KEV added
16
4 ransomware-linked
Nuclei coverage
15.1%
359 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
968.7
n=359
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
0
n=13
Detection gap

KEV pressure, no Nuclei coverage

July 2023 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in July 2023

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write352CSRF89SQL Injection862Missing Authorization20Improper Input Validation125Out-of-bounds Read416Use After Free121CWE-12122Path Traversalсообщество свободного программного обеспечения916299163google19563611microsoft511015101microsoft corp51015101ооо «русбитех-астра»57168141ао «нппкт»59177161maven61221125ао «ивк»1328101ооо «ред софт»87121214milesight461462pypi5122423unisoc (shanghai) technologies co., ltd.3521

Most discussed CVEs — July 2023

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    152 CVE31 critCVSS 7.3
    NEWKEV 1Nuclei 4PoC 31
    debian gnu/linux (66) · linux (42) · open babel (12)
  • 2google—
    146 CVE4 critCVSS 6.7
    NEWNuclei 1PoC 12
    android (109) · chrome (35) · google chrome (35)
  • 3microsoft—
    143 CVE5 critCVSS 7.3
    NEWKEV 5PoC 8
    windows server 2022 (server core installation) (99) · windows server 2022 (99) · windows server 2019 (95)
  • 4ооо «русбитех-астра»—
    94 CVE10 critCVSS 7.2
    NEWKEV 1Nuclei 1PoC 15
    astra linux special edition (93) · astra linux special edition для «эльбрус» (15) · astra linux common edition (1)
  • 5ао "нппкт"—
    87 CVE6 critCVSS 6.7
    NEWPoC 14
    осон основа оnyx (87)
  • 6maven—
    86 CVE21 critCVSS 7.2
    NEWNuclei 5PoC 11
    com.mabl.integration.jenkins:mabl-integration (4) · org.jenkins-ci.plugins:dimensionsscm (3) · org.apache.ambari:ambari (2)
  • 7ао «ивк»—
    79 CVE9 critCVSS 6.2
    NEWPoC 6
    альт сп 10 (74) · альт 8 сп (43) · альт рабочая станция к (6)
  • 8ооо «ред софт»—
    76 CVE4 critCVSS 6.5
    NEWNuclei 4PoC 22
    ред ос (76)
  • 9redhat—
    72 CVE4 critCVSS 6.6
    NEWPoC 8
    red hat enterprise linux 7 (40) · red hat enterprise linux 6 (40) · red hat enterprise linux 9 (38)
  • 10milesight—
    69 CVE1 critCVSS 7.3
    NEWPoC 28
    ur32l firmware (63) · ur32l (63) · milesightvpn (6)
  • 11unknown—
    61 CVE4 critCVSS 6.2
    NEWNuclei 59PoC 59
    mstore api (4) · an_gradebook (2) · eventon (2)
  • 12unisoc (shanghai) technologies co., ltd.—
    59 CVECVSS 5.4
    NEW
    sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 (52) · sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8001 (2) · sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8004 (1)
  • 13apple—
    57 CVE5 critCVSS 7.8
    NEWKEV 2
    macos (53) · iphone os (35) · ios and ipados (35)
  • 14oracle—
    57 CVE2 critCVSS 5.0
    NEWNuclei 4
    mysql server (13) · oracle graalvm for jdk (7) · graalvm (7)
  • 15fedoraproject—
    48 CVE1 critCVSS 6.0
    NEWPoC 8
    fedora (48) · extra packages for enterprise linux (6)
  • 16ibm—
    46 CVECVSS 6.0
    NEW
    db2 (14) · db2 for linux, unix and windows (13) · cloud pak for data (4)
  • 17pypi—
    46 CVE7 critCVSS 6.9
    NEWNuclei 3PoC 11
    paddlepaddle (5) · apache-airflow (5) · ethyca-fides (3)
  • 18ао «нтц ит роса»—
    44 CVE4 critCVSS 7.0
    NEWPoC 13
    роса хром (19) · rosa virtualization 3.0 (16) · роса кобальт (12)
  • 19packagist—
    40 CVE2 critCVSS 6.4
    NEWNuclei 3PoC 9
    pimcore/pimcore (5) · nilsteampassnet/teampass (5) · getkirby/cms (5)
  • 20linux—
    39 CVE9 critCVSS 7.4
    NEWPoC 10
    linux kernel (39) · kernel (4)
  • 21samsung—
    39 CVECVSS 5.9
    NEWPoC 1
    android (31) · pass (3) · smart switch pc (2)
  • 22fedora project—
    38 CVECVSS 7.1
    NEWPoC 5
    fedora (38)
  • 23samsung mobile—
    38 CVECVSS 6.4
    NEW
    samsung mobile devices (31) · samsung pass (3) · calendar (1)
  • 24debian—
    37 CVECVSS 6.6
    NEWPoC 9
    debian linux (37)
  • 25netapp—
    35 CVE8 critCVSS 6.6
    NEWPoC 2
    active iq unified manager (18) · oncommand insight (16) · h500s (14)
  • 26canonical—
    33 CVE2 critCVSS 7.1
    NEWNuclei 1PoC 9
    ubuntu (31) · ubuntu linux (4) · ubuntu kernel (2)
  • 27jenkins—
    32 CVECVSS 6.5
    NEWPoC 1
    mabl (4) · jenkins mabl plugin (4) · jenkins sumologic publisher plugin (2)
  • 28go—
    30 CVE3 critCVSS 6.5
    NEWNuclei 2PoC 3
    github.com/1panel-dev/1panel (3) · github.com/hashicorp/nomad (3) · k8s.io/kubernetes (2)
  • 29huawei—
    30 CVE11 critCVSS 8.0
    NEW
    harmonyos (30) · emui (29)
  • 30apache—
    29 CVE8 critCVSS 7.8
    NEWNuclei 1
    airflow (5) · pulsar (4) · inlong (3)
  • 31apache software foundation—
    29 CVE8 critCVSS 7.6
    NEWNuclei 1
    airflow (5) · apache airflow (5) · apache inlong (3)
  • 32npm—
    28 CVE6 critCVSS 7.2
    NEWNuclei 2PoC 5
    @fastify/oauth2 (2) · uptime-kuma (2) · nodebb (2)
  • 33siemens—
    26 CVE7 critCVSS 8.1
    NEW
    ruggedcom rox rx1510 (13) · ruggedcom rox mx5000 (13) · ruggedcom rox mx5000 firmware (13)
  • 34mediatek, inc.—
    24 CVECVSS 6.6
    NEW
    mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt8185, mt8321, mt8385, mt8666, mt8667, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 (3) · mt6739, mt6768, mt6771, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6893, mt8786, mt8789, mt8797 (2) · mt6739, mt8167, mt8168, mt8321, mt8365, mt8385, mt8666, mt8765, mt8788 (2)
  • 35campcodes—
    23 CVECVSS 5.3
    NEWPoC 22
    beauty salon management system (21) · retro cellphone online store (2)
  • 36fedora—
    23 CVE2 critCVSS 6.3
    NEWPoC 2
    fedora (23) · extra packages for enterprise linux (7) · extra packages for enterprise linux 7 (1)
  • 37adobe—
    22 CVE2 critCVSS 6.0
    NEWKEV 3Nuclei 3
    adobe indesign (13) · indesign (13) · adobe media encoder (4)
  • 38sourcecodester—
    22 CVECVSS 6.0
    NEWPoC 11
    ac repair and services system (6) · shopping website (3) · lost and found information system (3)
  • 39ibm corp.—
    21 CVECVSS 6.0
    NEW
    ibm db2 (13) · ibm db2 connect server (10) · ibm cloud pak for data (cp4d) (4)
  • 40tenda—
    20 CVE20 critCVSS 9.8
    NEWPoC 11
    f1202 firmware (10) · fh1202 firmware (10) · fh1203 firmware (8)
  • 41novell inc.—
    19 CVECVSS 7.1
    NEW
    suse linux enterprise server (19) · suse linux enterprise server for sap applications (17) · suse linux enterprise high performance computing (17)
  • 42phpgurukul—
    19 CVE1 critCVSS 6.3
    NEWNuclei 4PoC 9
    rail pass management system (6) · hostel management system (3) · maid hiring management system (3)
  • 43shenzhen tenda technology co., ltd.—
    19 CVE19 critCVSS 9.8
    NEWPoC 11
    tenda fh1202 (9) · tenda f1202 (9) · tenda fh1203 (7)
  • 44qualcomm—
    18 CVECVSS 7.6
    NEW
    wsa8830 firmware (18) · wsa8835 firmware (18) · fastconnect 6900 firmware (17)
  • 45qualcomm, inc.—
    18 CVECVSS 7.3
    NEW
    snapdragon (18)
  • 46sap—
    18 CVE1 critCVSS 6.6
    NEWNuclei 2
    enable now (3) · sap enable now (3) · sap netweaver process integration (2)
  • 47sap_se—
    18 CVE1 critCVSS 6.7
    NEWNuclei 2
    sap enable now (3) · sap web dispatcher (2) · sap ecc and sap s/4hana (is-oil) (1)
  • 48gz scripts—
    17 CVECVSS 3.5
    NEWPoC 2
    availability booking calendar php (3) · car listing script php (1) · car rental script (1)
  • 49gzscripts—
    17 CVECVSS 3.5
    NEWPoC 2
    availability booking calendar php (3) · car listing script php (1) · car rental php script (1)
  • 50mozilla—
    17 CVECVSS 7.8
    NEW
    firefox (16) · thunderbird (7) · firefox esr (6)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79324—
2CWE-787181—
3CWE-352130—
4CWE-89121—
5CWE-86289—
6CWE-2071—
7CWE-12564—
8CWE-41661—
9CWE-12154—
10CWE-2250—
11CWE-86349—
12CWE-7847—
13CWE-43444—
14CWE-20041—
15CWE-9441—
16CWE-40036—
17CWE-7734—
18CWE-12032—
19CWE-28726—
20CWE-12224—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins527 CVE
    59 crit343 vendorsCVSS 6.3
    beauty salon management system (21) · airflow (10) · moodating (7)
  • Operating Systems469 CVE
    320 crit203 KEV39 vendorsCVSS 7.9
    fedora (109) · astra linux special edition (93) · осон основа оnyx (87)
  • Enterprise Software361 CVE
    299 crit101 vendorsCVSS 8.0
    active iq unified manager (18) · zabbix (18) · oncommand insight (16)
  • OSS Libraries361 CVE
    89 crit98 vendorsCVSS 8.0
    open babel (28) · zulu openjdk (7) · axiom axiomjdk (6)
  • Mobile Apps275 CVE
    77 crit24 KEV7 vendorsCVSS 7.8
    android (140) · chrome (35) · google chrome (35)
  • Hardware Firmware195 CVE
    190 crit40 vendorsCVSS 9.4
    sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 (52) · s8000 (5) · sc7731e (5)
  • ICS / OT / IoT178 CVE
    113 crit59 vendorsCVSS 8.2
    ur32l (63) · ur32l firmware (63) · milesightvpn (6)
  • Networking Infrastructure148 CVE
    241 crit49 vendorsCVSS 8.8
    junos (21) · junos os (11) · junos os evolved (11)
  • Cloud & SaaS108 CVE
    25 crit8 KEV46 vendorsCVSS 7.4
    chatengine (7) · mstore api (6) · listplace directory listing platform (4)
  • DevTools & CI102 CVE
    8 crit29 vendorsCVSS 6.7
    jenkins mabl plugin (4) · mabl (4) · jenkins openshift login plugin (3)
  • Databases88 CVE
    6 crit14 vendorsCVSS 8.0
    mysql server (37) · business intelligence enterprise edition (14) · ibm db2 (13)
  • Consumer Software71 CVE
    5 crit7 KEV28 vendorsCVSS 8.1
    adobe indesign (13) · indesign (13) · pdf reader (10)
  • Security Products70 CVE
    7 crit2 KEV49 vendorsCVSS 7.4
    nilsteampassnet/teampass (5) · teampass (5) · command centre (4)
  • Communications57 CVE
    9 crit3 KEV29 vendorsCVSS 7.7
    mattermost (12) · mattermost server (12) · mastodon (11)
  • AI / ML23 CVE
    6 crit11 vendorsCVSS 9.0
    yocto (6) · paddlepaddle (5) · langchain (4)
  • Unclassified137 CVE
    29 crit111 vendorsCVSS 6.5
    flash flood disaster monitoring and warning system (4) · sound exchange (4) · travianz (4)
Weakness × Sector

Which weaknesses hit which solution categories in July 2023

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write352CSRF89SQL Injection862Missing Authorization20Improper Input Validation125Out-of-bounds Read416Use After Free121CWE-12122Path TraversalOperating Systems1946115930383812Web & CMS Plugins14929150528OSS Libraries433818616136814Enterprise Software763856515125Hardware Firmware9252155313212ICS / OT / IoT7673614494Consumer Software910121521197Networking Infrastructure15225111427Cloud & SaaS23555531DevTools & CI12111122113