CVE Tools
Sign in
month report

October 2023

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

October 2023 closed with 2,764 published CVEs. 372 criticals, 18 added to CISA KEV (5 ransomware-linked). google led volume, mostly via android. Top weakness class — CWE-79 (419 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
2,764
— MoM— YoY
Severity mix
372 / 925
critical / high
KEV added
18
5 ransomware-linked
Nuclei coverage
20.9%
577 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
870.5
n=577
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
6
n=18
Weakness × Vendor

What's spreading where in October 2023

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS352CSRF787Out-of-bounds Write89SQL Injection862Missing Authorization20Improper Input Validation200Information Exposure22Path Traversal78OS Command Injection125Out-of-bounds Readgoogle12037421сообщество свободного программного обеспечения511812232112ооо «ред софт»51111235microsoft corp121012microsoft11812ооо «русбитех-астра»2162212ао «ивк»1122212maven1812314ао «нппкт»213214oracle corp.121oracle21oracle corporation21

Most discussed CVEs — October 2023

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1google—
    205 CVE4 critCVSS 6.3
    NEWKEV 1Nuclei 1PoC 1
    android (184) · chrome (16) · google chrome (16)
  • 2сообщество свободного программного обеспечения—
    148 CVE13 critCVSS 6.7
    NEWKEV 3Nuclei 6PoC 18
    debian gnu/linux (95) · linux (20) · mediawiki (9)
  • 3microsoft—
    118 CVE5 critCVSS 7.4
    NEWKEV 4Nuclei 2PoC 4
    windows server 2022 (81) · windows server 2019 (80) · windows server 2019 (server core installation) (79)
  • 4ооо «ред софт»—
    116 CVE9 critCVSS 6.6
    NEWKEV 3Nuclei 4PoC 13
    ред ос (116)
  • 5ооо «русбитех-астра»—
    97 CVE5 critCVSS 6.5
    NEWKEV 1Nuclei 2PoC 5
    astra linux special edition (95) · astra linux common edition (9) · astra linux special edition для «эльбрус» (8)
  • 6ао «ивк»—
    91 CVE5 critCVSS 6.0
    NEWKEV 2Nuclei 4PoC 9
    альт 8 сп (69) · альт сп 10 (68) · альт рабочая станция к (2)
  • 7maven—
    81 CVE26 critCVSS 7.6
    NEWKEV 2Nuclei 7PoC 16
    com.liferay.portal:release.dxp.bom (7) · org.xwiki.platform:xwiki-platform-web-templates (4) · org.yamcs:yamcs (4)
  • 8ао "нппкт"—
    81 CVE8 critCVSS 6.7
    NEWKEV 1Nuclei 3PoC 7
    осон основа оnyx (81)
  • 9redhat—
    78 CVE3 critCVSS 6.7
    NEWKEV 2Nuclei 4PoC 6
    red hat enterprise linux (50) · red hat enterprise linux 7 (29) · red hat enterprise linux 9 (27)
  • 10oracle—
    75 CVE3 critCVSS 5.7
    NEWPoC 1
    mysql (24) · mysql server (24) · weblogic server (7)
  • 11ibm—
    62 CVECVSS 5.4
    NEW
    security verify privilege on-premises (13) · security verify privilege (13) · db2 for linux, unix and windows (9)
  • 12totolink—
    59 CVE56 critCVSS 9.6
    NEWNuclei 4PoC 26
    x2000r firmware (24) · x6000r firmware (21) · cp300\+ firmware (4)
  • 13fedoraproject—
    57 CVE3 critCVSS 6.8
    NEWKEV 3Nuclei 3PoC 11
    fedora (57) · extra packages for enterprise linux (1)
  • 14unknown—
    56 CVE2 critCVSS 6.1
    NEWNuclei 55PoC 56
    activitypub (4) · eventprime (4) · file manager pro (3)
  • 15packagist—
    55 CVE2 critCVSS 6.5
    NEWNuclei 3PoC 16
    magento/project-community-edition (9) · magento/community-edition (9) · concrete5/concrete5 (7)
  • 16ао «нтц ит роса»—
    54 CVE3 critCVSS 6.5
    NEWKEV 2Nuclei 4PoC 7
    роса хром (27) · rosa virtualization 3.0 (24) · rosa virtualization (11)
  • 17pypi—
    53 CVE2 critCVSS 6.2
    NEWNuclei 1PoC 4
    apache-airflow (6) · vantage6 (4) · urllib3 (3)
  • 18debian—
    48 CVE4 critCVSS 6.8
    NEWKEV 4Nuclei 5PoC 6
    debian linux (48)
  • 19go—
    44 CVE1 critCVSS 6.9
    NEWKEV 1Nuclei 1PoC 2
    github.com/arduino/arduino-create-agent (4) · k8s.io/kubernetes (3) · github.com/nats-io/nats-server/v2 (3)
  • 20netapp—
    42 CVE2 critCVSS 6.5
    NEWKEV 3Nuclei 3PoC 4
    oncommand insight (27) · h410c firmware (3) · active iq unified manager (3)
  • 21apple—
    41 CVECVSS 6.4
    NEWKEV 2Nuclei 1PoC 1
    macos (36) · iphone os (24) · ios and ipados (24)
  • 22fortinet—
    36 CVE5 critCVSS 7.1
    NEWNuclei 1
    fortiwlm (10) · fortianalyzer (7) · fortimanager (7)
  • 23fortinet inc.—
    35 CVE5 critCVSS 7.2
    NEWNuclei 1
    fortiwlm (10) · fortianalyzer (7) · fortimanager (7)
  • 24dlink—
    33 CVE15 critCVSS 9.3
    NEWNuclei 3PoC 16
    dir-823g firmware (12) · dir-823g (12) · di-7200g firmware (9)
  • 25idattend—
    30 CVE11 critCVSS 8.2
    NEW
    idweb (30)
  • 26idattend pty ltd—
    30 CVE11 critCVSS 8.2
    NEW
    idweb (30)
  • 27juniper—
    30 CVECVSS 6.5
    NEWPoC 30
    junos (25) · junos os evolved (17)
  • 28juniper networks—
    30 CVECVSS 6.6
    NEWPoC 30
    junos (25) · junos os (25) · junos os evolved (17)
  • 29canonical—
    29 CVE3 critCVSS 6.8
    NEWKEV 2Nuclei 2PoC 3
    ubuntu (28) · subiquity (1) · ubuntu linux (1)
  • 30npm—
    27 CVE5 critCVSS 7.4
    NEWNuclei 1PoC 6
    @vrite/sdk (3) · tinymce (2) · crypto-es (1)
  • 31apache software foundation—
    26 CVE3 critCVSS 6.9
    NEWKEV 2Nuclei 4PoC 2
    airflow (6) · apache airflow (6) · apache inlong (4)
  • 32apache—
    25 CVE3 critCVSS 7.1
    NEWKEV 2Nuclei 4PoC 2
    airflow (6) · tomcat (4) · inlong (4)
  • 33ibm corp.—
    24 CVECVSS 5.6
    NEW
    ibm db2 (9) · ibm db2 connect server (8) · ibm security verify governance (4)
  • 34unisoc (shanghai) technologies co., ltd.—
    24 CVECVSS 5.6
    NEW
    sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 (10) · sc9863a (9) · t606/t612/t616 (2)
  • 35siemens—
    23 CVE2 critCVSS 7.1
    NEWKEV 2Nuclei 2PoC 2
    tecnomatix plant simulation v2302 (9) · tecnomatix (9) · tecnomatix plant simulation v2201 (9)
  • 36gopiplus—
    22 CVECVSS 8.1
    NEWNuclei 22PoC 4
    image vertical reel scroll slideshow (2) · popup contact form (2) · wp photo text slider 50 (1)
  • 37huawei—
    22 CVE5 critCVSS 7.5
    NEW
    harmonyos (22) · emui (20)
  • 38lenovo—
    22 CVECVSS 6.7
    NEW
    thinkpad x13 gen 3 firmware (5) · thinkpad t14s gen 3 firmware (5) · thinkagile vx3530-g firmware (3)
  • 39qualcomm—
    22 CVE3 critCVSS 8.2
    NEW
    qca6696 firmware (20) · wsa8835 firmware (19) · wsa8830 firmware (19)
  • 40qualcomm, inc.—
    22 CVE3 critCVSS 8.0
    NEW
    snapdragon (22)
  • 41fedora project—
    21 CVECVSS 6.7
    NEWKEV 2Nuclei 2PoC 4
    fedora (21) · fedora epel (1)
  • 42linux—
    20 CVECVSS 6.5
    NEWPoC 3
    linux kernel (20) · kernel (2)
  • 43f5—
    18 CVE2 critCVSS 7.4
    NEWKEV 3Nuclei 2PoC 2
    big-ip access policy manager (16) · big-ip local traffic manager (15) · big-ip domain name system (15)
  • 44novell inc.—
    17 CVE1 critCVSS 6.4
    NEWKEV 1Nuclei 2PoC 2
    suse linux enterprise server (12) · suse linux enterprise server for sap applications (11) · opensuse tumbleweed (11)
  • 45tp-link—
    17 CVE15 critCVSS 9.5
    NEWPoC 10
    tl-wr886n firmware (13) · tl-wdr7660 firmware (2) · tapo c100 firmware (1)
  • 46acronis—
    16 CVE1 critCVSS 6.5
    NEW
    agent (15) · acronis cyber protect cloud agent (11) · acronis cyber protect 16 (7)
  • 47acronis international gmbh—
    16 CVE1 critCVSS 6.5
    NEW
    acronis agent (15) · cyber protect home office (1)
  • 48linecorp—
    16 CVECVSS 7.5
    NEWKEV 1Nuclei 1PoC 15
    line (7) · onigiriya-musubee (1) · regina sweets\&bakery (1)
  • 49nothings—
    16 CVECVSS 6.5
    NEW
    stb (14) · stb vorbis.c (8) · stb image.h (8)
  • 50tp-link technologies co ltd.—
    16 CVE15 critCVSS 9.6
    NEWPoC 9
    tl-wr886n (13) · tl-wdr7660 (2) · tapo c100 (1)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79419—
2CWE-352225—
3CWE-787162—
4CWE-89137—
5CWE-86282—
6CWE-2071—
7CWE-20069—
8CWE-2267—
9CWE-7862—
10CWE-12561—
11CWE-41653—
12CWE-26951—
13CWE-40050—
14CWE-7750—
15CWE-28448—
16CWE-9448—
17CWE-12047—
18CWE-43446—
19CWE-12141—
20CWE-20341—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins695 CVE
    113 crit12 KEV491 vendorsCVSS 6.9
    bear - woocommerce bulk editor and products manager professional (11) · bear – bulk editor and products manager professional for woocommerce by pluginus.net (11) · activitypub (4)
  • Enterprise Software458 CVE
    103 crit34 KEV140 vendorsCVSS 7.5
    idweb (60) · oncommand insight (27) · access rights manager (16)
  • Operating Systems445 CVE
    191 crit289 KEV47 vendorsCVSS 7.6
    ред ос (116) · astra linux special edition (95) · debian gnu/linux (95)
  • OSS Libraries405 CVE
    87 crit31 KEV123 vendorsCVSS 7.8
    libstb (12) · node.js (8) · gpac (5)
  • Networking Infrastructure311 CVE
    295 crit75 KEV68 vendorsCVSS 8.4
    junos (50) · junos os evolved (49) · junos os (25)
  • Mobile Apps286 CVE
    16 crit7 KEV10 vendorsCVSS 7.8
    android (195) · harmonyos (22) · emui (20)
  • Security Products166 CVE
    68 crit68 KEV54 vendorsCVSS 7.4
    client connector (12) · fortiwlm (10) · fortianalyzer (7)
  • ICS / OT / IoT155 CVE
    613 crit2 KEV72 vendorsCVSS 9.8
    eisbaer scada (13) · ctrlx hmi web panel - wr21 (wr2107) (9) · ctrlx hmi web panel - wr21 (wr2110) (9)
  • Hardware Firmware152 CVE
    783 crit4 KEV39 vendorsCVSS 8.2
    sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 (10) · sc9863a (9) · arm 5th gen gpu architecture kernel driver (3)
  • Databases118 CVE
    11 crit17 vendorsCVSS 7.5
    mysql server (48) · mysql (24) · weblogic server (19)
  • Cloud & SaaS87 CVE
    26 crit17 KEV55 vendorsCVSS 8.3
    nextcloud server (6) · security-advisories (6) · vantage6 (4)
  • Communications71 CVE
    8 crit5 KEV33 vendorsCVSS 8.9
    easy chat server (8) · line (8) · mattermost (6)
  • Consumer Software66 CVE
    17 crit31 vendorsCVSS 7.7
    adobe commerce (18) · commerce (9) · magento (9)
  • DevTools & CI56 CVE
    6 crit2 KEV27 vendorsCVSS 8.5
    mosquitto (3) · radare2 (3) · gradle (2)
  • AI / ML14 CVE
    5 crit10 vendorsCVSS 8.9
    flyteadmin (2) · langchain (2) · yocto (2)
  • Unclassified234 CVE
    22 crit2 KEV176 vendorsCVSS 6.5
    stb (14) · мсвсфера (9) · stb image.h (8)
Weakness × Sector

Which weaknesses hit which solution categories in October 2023

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS352CSRF787Out-of-bounds Write89SQL Injection862Missing Authorization20Improper Input Validation200Information Exposure22Path Traversal78OS Command Injection125Out-of-bounds ReadWeb & CMS Plugins2671756218216111Operating Systems71463822154139OSS Libraries64112182131817311Enterprise Software69183526681411Networking Infrastructure33721221046132Hardware Firmware424423102564Security Products193131349923ICS / OT / IoT124213424987Consumer Software112851412Databases312132142