August 2023
August 2023 closed with 2,549 published CVEs. 352 criticals, 8 added to CISA KEV (3 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via debian gnu/linux. Top weakness class — CWE-79 (410 CVE). 10 vendors cracked the top-100 for the first time.
Time to exploit
How fast the community ships detection after a CVE drops.
KEV pressure, no Nuclei coverage
August 2023 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1microsoft89 CVE
- KEV 1fedoraproject82 CVE
- KEV 1redhat70 CVE
- KEV 1canonical25 CVE
- KEV 1apple19 CVE
What's spreading where in August 2023
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — August 2023
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #1сообщество свободного программного обеспечения201 CVE
- #2ооо «русбитех-астра»153 CVE
- #3google144 CVE
- #4ао "нппкт"136 CVE
- #5debian98 CVE
- #6intel96 CVE
- #7ооо «ред софт»96 CVE
- #8microsoft89 CVE
- #9fedoraproject82 CVE
- #10ао «ивк»72 CVE
Top vendors
Ranked by distinct CVE count this period.
- 201 CVE23 critCVSS 7.1NEWNuclei 4PoC 50debian gnu/linux (139) · linux (19) · poppler (7)
- 153 CVE10 critCVSS 6.8NEWPoC 34astra linux special edition (151) · astra linux special edition для «эльбрус» (18) · astra linux common edition (5)
- 144 CVE4 critCVSS 7.0NEWPoC 13android (88) · chrome (57) · google chrome (53)
- 136 CVE7 critCVSS 6.9NEWNuclei 1PoC 32осон основа оnyx (136)
- 98 CVE6 critCVSS 7.0NEWNuclei 1PoC 21debian linux (98)
- 96 CVE11 critCVSS 6.0NEWraid web console 3 (rwc3) (19) · realsense 450 fa firmware (6) · proset\/wireless wifi (6)
- 96 CVE13 critCVSS 6.7NEWNuclei 1PoC 24ред ос (96)
- 89 CVE4 critCVSS 7.4NEWKEV 1PoC 9windows 11 22h2 (34) · windows 11 21h2 (34) · windows 10 22h2 (33)
- 82 CVE4 critCVSS 6.7NEWKEV 1PoC 18fedora (81) · fedora linux kernel (1)
- 72 CVE10 critCVSS 6.5NEWNuclei 1PoC 19альт сп 10 (63) · альт 8 сп (34)
- 70 CVE5 critCVSS 6.4NEWKEV 1PoC 14red hat enterprise linux (47) · red hat enterprise linux 9 (21) · red hat enterprise linux 6 (20)
- 65 CVE53 critCVSS 9.6NEWPoC 26ac6 firmware (17) · ac8 firmware (16) · ac9 firmware (14)
- 58 CVE8 critCVSS 6.5NEWNuclei 2PoC 10org.jenkins-ci.plugins:fortify (3) · org.jenkins-ci.plugins:cloudbees-folder (3) · org.graylog2:graylog2-server (3)
- 56 CVE23 critCVSS 7.5NEWNuclei 16PoC 11document creator (5) · callback widget (5) · time slots booking calendar (5)
- 51 CVE3 critCVSS 6.3NEWNuclei 1PoC 15роса хром (34) · роса кобальт (11) · rosa virtualization 3.0 (10)
- 50 CVE1 critCVSS 5.7NEWNuclei 50PoC 50multiparcels shipping for woocommerce (5) · tiempo.com (3) · simple blog card (2)
- 47 CVE12 critCVSS 7.4NEWPoC 10langchain (5) · apache-airflow (4) · gitpython (3)
- 45 CVE4 critCVSS 7.2NEWPoC 7fedora (45)
- 45 CVE4 critCVSS 6.6NEWNuclei 5PoC 14cockpit-hq/cockpit (8) · prestashop/prestashop (7) · wallabag/wallabag (4)
- 39 CVE11 critCVSS 7.8NEWraid controller web interface (22) · lsi storage authority (lsa) (22) · brocade fabric operating system (7)
- 39 CVE1 critCVSS 7.9NEWPoC 5camunda modeler (39)
- 37 CVE1 critCVSS 6.5NEWacrobat (30) · acrobat dc (30) · acrobat reader (30)
- 37 CVE1 critCVSS 6.1NEWPoC 37prime infrastructure (5) · cisco evolved programmable network manager (5) · cisco prime infrastructure (4)
- 37 CVECVSS 7.0NEWNuclei 1PoC 5github.com/answerdev/answer (4) · github.com/mattermost/mattermost-server/v6 (4) · github.com/gravitl/netmaker (3)
- 36 CVE4 critCVSS 6.5NEWNuclei 1PoC 2@excalidraw/excalidraw (2) · matrix-appservice-irc (2) · find-exec (1)
- 36 CVE2 critCVSS 8.1NEWteamcenter visualization v14.1 (12) · teamcenter visualization v14.2 (12) · teamcenter visualization (12)
- 35 CVECVSS 5.9NEWmt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985 (6) · mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt8185, mt8321, mt8385, mt8666, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 (4) · mt2713, mt6879, mt6895, mt6983, mt8188, mt8195, mt8395, mt8673 (4)
- 34 CVECVSS 5.6NEWмт6895 (27) · мт6983 (27) · мт6879 (26)
- 34 CVECVSS 7.2NEWPoC 4android (21) · harman infotainment (3) · galaxy book2 pro 360 firmware (2)
- 31 CVE1 critCVSS 5.9NEWsecurity guardium (8) · robotic process automation (5) · guardium cloud key manager (3)
- 30 CVECVSS 6.2NEWPoC 25inventory management system (12) · free hospital management system for small practices (8) · resort reservation system (3)
- 28 CVECVSS 6.5NEWPoC 17binutils (19) · ncurses (6) · indent (1)
- 28 CVE9 critCVSS 8.0NEWharmonyos (28) · emui (28)
- 26 CVECVSS 7.1NEWedgeconnect sd-wan orchestrator (20) · arubaos-switch (3) · hpe aruba networking virtual intranet access (via) (2)
- 26 CVECVSS 5.9NEWsamsung mobile devices (21) · galaxy book go, galaxy book go 5g, galaxy book2 go and galaxy book2 pro 360 (2) · samsung members (1)
- 25 CVE6 critCVSS 7.8NEWKEV 1PoC 5ubuntu (24) · ubuntu linux (1)
- 25 CVECVSS 8.8NEWsl 1 (25) · sl1 (25)
- 20 CVECVSS 6.9NEWedgeconnect sd-wan orchestrator (20)
- 19 CVECVSS 7.0NEWKEV 1PoC 1macos (16) · ios and ipados (6) · ipados (6)
- 19 CVECVSS 6.6NEWdevelopment system (18) · control for iot2000 sl (16) · codesys control for beaglebone sl (16)
- 19 CVECVSS 5.6NEWfolders (3) · fortify (3) · jenkins folders plugin (3)
- 19 CVE4 critCVSS 8.0NEWwsa8810 firmware (16) · wsa8815 firmware (16) · wcn3980 firmware (16)
- 19 CVE14 critCVSS 9.6NEWPoC 8tenda ac8 (11) · tenda ac10 (6) · tenda ac1206 (6)
- 18 CVECVSS 5.8NEWPoC 10freerdp (17) · file (1)
- 18 CVECVSS 6.5NEWPoC 9gnu binutils (18)
- 18 CVE4 critCVSS 7.7NEWsnapdragon (18)
- 17 CVE1 critCVSS 7.2NEWNuclei 1PoC 2airflow (4) · apache airflow (4) · apache airflow spark provider (2)
- 17 CVECVSS 6.3NEWfabric os (11) · brocade fabric os (2) · sannav (2)
- 17 CVECVSS 6.5NEWcodesys control for beaglebone sl (15) · codesys control for empc-a/imx6 sl (15) · codesys control for iot2000 sl (15)
- 17 CVECVSS 5.8NEWPoC 9freerdp (17)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | сообщество свободного программного обеспечения | 201 | 23 | · | 4 | NEWNuclei 4PoC 50 | debian gnu/linux (139) · linux (19) · poppler (7) | — | |
| 2 | ооо «русбитех-астра» | 153 | 10 | · | · | NEWPoC 34 | astra linux special edition (151) · astra linux special edition для «эльбрус» (18) · astra linux common edition (5) | — | |
| 3 | 144 | 4 | · | · | NEWPoC 13 | android (88) · chrome (57) · google chrome (53) | — | ||
| 4 | ао "нппкт" | 136 | 7 | · | 1 | NEWNuclei 1PoC 32 | осон основа оnyx (136) | — | |
| 5 | debian | 98 | 6 | · | 1 | NEWNuclei 1PoC 21 | debian linux (98) | — | |
| 6 | intel | 96 | 11 | · | · | NEW | raid web console 3 (rwc3) (19) · realsense 450 fa firmware (6) · proset\/wireless wifi (6) | — | |
| 7 | ооо «ред софт» | 96 | 13 | · | 1 | NEWNuclei 1PoC 24 | ред ос (96) | — | |
| 8 | microsoft | 89 | 4 | 1 | · | NEWKEV 1PoC 9 | windows 11 22h2 (34) · windows 11 21h2 (34) · windows 10 22h2 (33) | — | |
| 9 | fedoraproject | 82 | 4 | 1 | · | NEWKEV 1PoC 18 | fedora (81) · fedora linux kernel (1) | — | |
| 10 | ао «ивк» | 72 | 10 | · | 1 | NEWNuclei 1PoC 19 | альт сп 10 (63) · альт 8 сп (34) | — | |
| 11 | redhat | 70 | 5 | 1 | · | NEWKEV 1PoC 14 | red hat enterprise linux (47) · red hat enterprise linux 9 (21) · red hat enterprise linux 6 (20) | — | |
| 12 | tenda | 65 | 53 | · | · | NEWPoC 26 | ac6 firmware (17) · ac8 firmware (16) · ac9 firmware (14) | — | |
| 13 | maven | 58 | 8 | · | 2 | NEWNuclei 2PoC 10 | org.jenkins-ci.plugins:fortify (3) · org.jenkins-ci.plugins:cloudbees-folder (3) · org.graylog2:graylog2-server (3) | — | |
| 14 | phpjabbers | 56 | 23 | · | 16 | NEWNuclei 16PoC 11 | document creator (5) · callback widget (5) · time slots booking calendar (5) | — | |
| 15 | ао «нтц ит роса» | 51 | 3 | · | 1 | NEWNuclei 1PoC 15 | роса хром (34) · роса кобальт (11) · rosa virtualization 3.0 (10) | — | |
| 16 | unknown | 50 | 1 | · | 50 | NEWNuclei 50PoC 50 | multiparcels shipping for woocommerce (5) · tiempo.com (3) · simple blog card (2) | — | |
| 17 | pypi | 47 | 12 | · | · | NEWPoC 10 | langchain (5) · apache-airflow (4) · gitpython (3) | — | |
| 18 | fedora project | 45 | 4 | · | · | NEWPoC 7 | fedora (45) | — | |
| 19 | packagist | 45 | 4 | · | 5 | NEWNuclei 5PoC 14 | cockpit-hq/cockpit (8) · prestashop/prestashop (7) · wallabag/wallabag (4) | — | |
| 20 | broadcom | 39 | 11 | · | · | NEW | raid controller web interface (22) · lsi storage authority (lsa) (22) · brocade fabric operating system (7) | — | |
| 21 | camunda services gmbh | 39 | 1 | · | · | NEWPoC 5 | camunda modeler (39) | — | |
| 22 | adobe | 37 | 1 | · | · | NEW | acrobat (30) · acrobat dc (30) · acrobat reader (30) | — | |
| 23 | cisco | 37 | 1 | · | · | NEWPoC 37 | prime infrastructure (5) · cisco evolved programmable network manager (5) · cisco prime infrastructure (4) | — | |
| 24 | go | 37 | · | · | 1 | NEWNuclei 1PoC 5 | github.com/answerdev/answer (4) · github.com/mattermost/mattermost-server/v6 (4) · github.com/gravitl/netmaker (3) | — | |
| 25 | npm | 36 | 4 | · | 1 | NEWNuclei 1PoC 2 | @excalidraw/excalidraw (2) · matrix-appservice-irc (2) · find-exec (1) | — | |
| 26 | siemens | 36 | 2 | · | · | NEW | teamcenter visualization v14.1 (12) · teamcenter visualization v14.2 (12) · teamcenter visualization (12) | — | |
| 27 | mediatek, inc. | 35 | · | · | · | NEW | mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985 (6) · mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt8185, mt8321, mt8385, mt8666, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 (4) · mt2713, mt6879, mt6895, mt6983, mt8188, mt8195, mt8395, mt8673 (4) | — | |
| 28 | mediatek inc. | 34 | · | · | · | NEW | мт6895 (27) · мт6983 (27) · мт6879 (26) | — | |
| 29 | samsung | 34 | · | · | · | NEWPoC 4 | android (21) · harman infotainment (3) · galaxy book2 pro 360 firmware (2) | — | |
| 30 | ibm | 31 | 1 | · | · | NEW | security guardium (8) · robotic process automation (5) · guardium cloud key manager (3) | — | |
| 31 | sourcecodester | 30 | · | · | · | NEWPoC 25 | inventory management system (12) · free hospital management system for small practices (8) · resort reservation system (3) | — | |
| 32 | gnu | 28 | · | · | · | NEWPoC 17 | binutils (19) · ncurses (6) · indent (1) | — | |
| 33 | huawei | 28 | 9 | · | · | NEW | harmonyos (28) · emui (28) | — | |
| 34 | hpe | 26 | · | · | · | NEW | edgeconnect sd-wan orchestrator (20) · arubaos-switch (3) · hpe aruba networking virtual intranet access (via) (2) | — | |
| 35 | samsung mobile | 26 | · | · | · | NEW | samsung mobile devices (21) · galaxy book go, galaxy book go 5g, galaxy book2 go and galaxy book2 pro 360 (2) · samsung members (1) | — | |
| 36 | canonical | 25 | 6 | 1 | · | NEWKEV 1PoC 5 | ubuntu (24) · ubuntu linux (1) | — | |
| 37 | sciencelogic | 25 | · | · | · | NEW | sl 1 (25) · sl1 (25) | — | |
| 38 | arubanetworks | 20 | · | · | · | NEW | edgeconnect sd-wan orchestrator (20) | — | |
| 39 | apple | 19 | · | 1 | · | NEWKEV 1PoC 1 | macos (16) · ios and ipados (6) · ipados (6) | — | |
| 40 | codesys | 19 | · | · | · | NEW | development system (18) · control for iot2000 sl (16) · codesys control for beaglebone sl (16) | — | |
| 41 | jenkins | 19 | · | · | · | NEW | folders (3) · fortify (3) · jenkins folders plugin (3) | — | |
| 42 | qualcomm | 19 | 4 | · | · | NEW | wsa8810 firmware (16) · wsa8815 firmware (16) · wcn3980 firmware (16) | — | |
| 43 | shenzhen tenda technology co., ltd. | 19 | 14 | · | · | NEWPoC 8 | tenda ac8 (11) · tenda ac10 (6) · tenda ac1206 (6) | — | |
| 44 | free software foundation, inc. | 18 | · | · | · | NEWPoC 10 | freerdp (17) · file (1) | — | |
| 45 | gnu general public license | 18 | · | · | · | NEWPoC 9 | gnu binutils (18) | — | |
| 46 | qualcomm, inc. | 18 | 4 | · | · | NEW | snapdragon (18) | — | |
| 47 | apache software foundation | 17 | 1 | · | 1 | NEWNuclei 1PoC 2 | airflow (4) · apache airflow (4) · apache airflow spark provider (2) | — | |
| 48 | brocade | 17 | · | · | · | NEW | fabric os (11) · brocade fabric os (2) · sannav (2) | — | |
| 49 | codesys gmbh | 17 | · | · | · | NEW | codesys control for beaglebone sl (15) · codesys control for empc-a/imx6 sl (15) · codesys control for iot2000 sl (15) | — | |
| 50 | freerdp | 17 | · | · | · | NEWPoC 9 | freerdp (17) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems493 CVE280 crit15 KEV46 vendorsCVSS 8.1astra linux special edition (151) · debian gnu/linux (139) · осон основа оnyx (136)
- Web & CMS Plugins467 CVE61 crit342 vendorsCVSS 7.7chp ads block detector (6) · pdf builder for woocommerce. create invoices,packing slips and more (5) · woocommerce pdf invoice builder (5)
- OSS Libraries448 CVE46 crit5 KEV119 vendorsCVSS 7.8freerdp (34) · binutils (19) · gnu binutils (18)
- Enterprise Software367 CVE316 crit2 KEV103 vendorsCVSS 8.0sl 1 (25) · sl1 (25) · active iq unified manager (11)
- Networking Infrastructure286 CVE310 crit12 KEV70 vendorsCVSS 8.0ac6 firmware (17) · ac8 firmware (16) · ac9 firmware (14)
- Hardware Firmware264 CVE415 crit45 vendorsCVSS 8.0raid web console 3 (rwc3) (19) · intel proset/wireless wifi (6) · mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985 (6)
- Mobile Apps232 CVE24 crit13 KEV9 vendorsCVSS 7.2android (111) · chrome (57) · google chrome (53)
- ICS / OT / IoT189 CVE219 crit1 KEV66 vendorsCVSS 9.2wp 6070-wvps (28) · wp 6101-wxps (28) · wp 6121-wxps (28)
- Security Products149 CVE31 crit9 KEV73 vendorsCVSS 7.5acronis agent (8) · wireshark (8) · cmc (7)
- Cloud & SaaS129 CVE33 crit47 vendorsCVSS 7.7lsi storage authority (lsa) (22) · raid controller web interface (22) · yocto (9)
- Consumer Software101 CVE21 crit2 KEV35 vendorsCVSS 7.4acrobat (30) · acrobat dc (30) · acrobat reader (30)
- DevTools & CI90 CVE3 crit37 vendorsCVSS 6.6netwide assembler (9) · radare2 (7) · wireshark (4)
- Communications62 CVE21 crit20 vendorsCVSS 7.7ox app suite (14) · open-xchange appsuite frontend (6) · open-xchange appsuite backend (4)
- Databases40 CVE10 crit2 KEV22 vendorsCVSS 8.2postgresql (6) · ibm robotic process automation (5) · ibm security verify information queue (3)
- AI / ML27 CVE12 crit13 vendorsCVSS 9.8yocto (8) · langchain (5) · opentelemetry instrumentation for java (1)
- Unclassified228 CVE54 crit119 vendorsCVSS 7.0online travel agency system (9) · мсвсфера (7) · realgimm (6)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 5 | 493 | 280 | 15 | 46 | 513 | 8.1 | astra linux special edition (151) · debian gnu/linux (139) · осон основа оnyx (136) |
| Web & CMS Plugins▸ 6 | 467 | 61 | · | 342 | 420 | 7.7 | chp ads block detector (6) · pdf builder for woocommerce. create invoices,packing slips and more (5) · woocommerce pdf invoice builder (5) |
| OSS Libraries▸ 11 | 448 | 46 | 5 | 119 | 327 | 7.8 | freerdp (34) · binutils (19) · gnu binutils (18) |
| Enterprise Software▸ 7 | 367 | 316 | 2 | 103 | 740 | 8.0 | sl 1 (25) · sl1 (25) · active iq unified manager (11) |
| Networking Infrastructure▸ 6 | 286 | 310 | 12 | 70 | 519 | 8.0 | ac6 firmware (17) · ac8 firmware (16) · ac9 firmware (14) |
| Hardware Firmware▸ 5 | 264 | 415 | · | 45 | 3,097 | 8.0 | raid web console 3 (rwc3) (19) · intel proset/wireless wifi (6) · mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985 (6) |
| Mobile Apps▸ 3 | 232 | 24 | 13 | 9 | 1,023 | 7.2 | android (111) · chrome (57) · google chrome (53) |
| ICS / OT / IoT▸ 5 | 189 | 219 | 1 | 66 | 376 | 9.2 | wp 6070-wvps (28) · wp 6101-wxps (28) · wp 6121-wxps (28) |
| Security Products▸ 6 | 149 | 31 | 9 | 73 | 161 | 7.5 | acronis agent (8) · wireshark (8) · cmc (7) |
| Cloud & SaaS▸ 5 | 129 | 33 | · | 47 | 66 | 7.7 | lsi storage authority (lsa) (22) · raid controller web interface (22) · yocto (9) |
| Consumer Software▸ 5 | 101 | 21 | 2 | 35 | 55 | 7.4 | acrobat (30) · acrobat dc (30) · acrobat reader (30) |
| DevTools & CI▸ 5 | 90 | 3 | · | 37 | 62 | 6.6 | netwide assembler (9) · radare2 (7) · wireshark (4) |
| Communications▸ 4 | 62 | 21 | · | 20 | 51 | 7.7 | ox app suite (14) · open-xchange appsuite frontend (6) · open-xchange appsuite backend (4) |
| Databases▸ 5 | 40 | 10 | 2 | 22 | 45 | 8.2 | postgresql (6) · ibm robotic process automation (5) · ibm security verify information queue (3) |
| AI / ML▸ 5 | 27 | 12 | · | 13 | 16 | 9.8 | yocto (8) · langchain (5) · opentelemetry instrumentation for java (1) |
| Unclassified | 228 | 54 | · | 119 | 147 | 7.0 | online travel agency system (9) · мсвсфера (7) · realgimm (6) |
Which weaknesses hit which solution categories in August 2023
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.