CVE Tools
Sign in
month report

November 2023

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

November 2023 closed with 2,560 published CVEs. 300 criticals, 18 added to CISA KEV (3 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via debian gnu/linux. Top weakness class — CWE-79 (418 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
2,560
— MoM— YoY
Severity mix
300 / 783
critical / high
KEV added
18
3 ransomware-linked
Nuclei coverage
25.4%
651 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
843.0
n=651
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
4
n=10
Detection gap

KEV pressure, no Nuclei coverage

November 2023 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in November 2023

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS352CSRF89SQL Injection787Out-of-bounds Write200Information Exposure125Out-of-bounds Read20Improper Input Validation22Path Traversal284CWE-284416Use After Freeсообщество свободного программного обеспечения74292423124ооо «ред софт»91101422224intel1333125161ао «нппкт»3166221microsoft corp52125110adobe1210344118adobe systems inc.121033418ооо «русбитех-астра»243122google1111311microsoft5212513packagist18116128maven1351445

Most discussed CVEs — November 2023

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    134 CVE19 critCVSS 6.9
    NEWKEV 1Nuclei 4PoC 25
    debian gnu/linux (42) · linux (29) · gpac (10)
  • 2ооо «ред софт»—
    130 CVE7 critCVSS 6.6
    NEWKEV 1PoC 26
    ред ос (130)
  • 3intel—
    100 CVE1 critCVSS 4.9
    NEWPoC 1
    unison software (22) · aptio v uefi firmware integrator tools (9) · intel iris xe graphics (7)
  • 4ао "нппкт"—
    88 CVE6 critCVSS 6.9
    NEWKEV 3PoC 7
    осон основа оnyx (88)
  • 5microsoft—
    83 CVE3 critCVSS 7.7
    NEWKEV 5PoC 7
    windows server 2022 (31) · windows 11 22h2 (30) · windows 11 21h2 (29)
  • 6adobe—
    77 CVE4 critCVSS 6.6
    NEWNuclei 3
    acrobat reader dc (17) · adobe acrobat 2020 (17) · adobe acrobat reader 2020 (17)
  • 7google—
    75 CVE6 critCVSS 7.2
    NEWKEV 1PoC 5
    android (49) · chrome (22) · google chrome (22)
  • 8ооо «русбитех-астра»—
    75 CVE4 critCVSS 7.2
    NEWKEV 1PoC 7
    astra linux special edition (74) · astra linux common edition (7) · astra linux special edition для «эльбрус» (2)
  • 9packagist—
    67 CVE4 critCVSS 6.1
    NEWNuclei 4PoC 14
    moodle/moodle (12) · symfony/symfony (3) · librenms/librenms (3)
  • 10redhat—
    66 CVE2 critCVSS 7.0
    NEWNuclei 1PoC 5
    red hat enterprise linux 8 (37) · red hat enterprise linux 9 (36) · red hat enterprise linux 7 (36)
  • 11maven—
    65 CVE14 critCVSS 7.0
    NEWNuclei 5PoC 7
    org.opencrx:opencrx-core-models (8) · com.xuxueli:xxl-job-admin (3) · org.jenkins-ci.plugins:matlab (3)
  • 12fedoraproject—
    62 CVE3 critCVSS 6.0
    NEWKEV 3Nuclei 1PoC 3
    fedora (62) · extra packages for enterprise linux (10)
  • 13pypi—
    54 CVE10 critCVSS 7.1
    NEWNuclei 9PoC 10
    apache-superset (7) · aiohttp (5) · ray (4)
  • 14ао «ивк»—
    54 CVE2 critCVSS 6.1
    NEWPoC 2
    альт сп 10 (45) · альт 8 сп (22)
  • 15unknown—
    52 CVE8 critCVSS 6.2
    NEWNuclei 52PoC 51
    seraphinite accelerator (3) · wp hotel booking (3) · awesome support (3)
  • 16cisco—
    39 CVE1 critCVSS 6.1
    NEWPoC 39
    firepower threat defense (17) · cisco firepower threat defense software (17) · cisco firepower management center (10)
  • 17go—
    37 CVE3 critCVSS 5.6
    NEWNuclei 1PoC 5
    github.com/mattermost/mattermost/server/v8 (12) · github.com/mattermost/mattermost-server/v6 (12) · github.com/projectcapsule/capsule-proxy (2)
  • 18debian—
    36 CVE2 critCVSS 7.6
    NEWKEV 3PoC 3
    debian linux (36)
  • 19unisoc (shanghai) technologies co., ltd.—
    34 CVECVSS 5.4
    NEW
    sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 (31) · t760/t770/t820/s8000 (2) · sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618 (1)
  • 20samsung—
    33 CVECVSS 6.4
    NEWPoC 1
    android (13) · account (7) · exynos 1380 firmware (2)
  • 21samsung mobile—
    30 CVECVSS 5.8
    NEW
    samsung mobile devices (13) · samsung account (7) · samsung push service (2)
  • 22ао «нтц ит роса»—
    30 CVE1 critCVSS 6.9
    NEWPoC 2
    роса хром (15) · rosa virtualization 3.0 (11) · rosa virtualization (9)
  • 23projectworlds pvt. limited—
    29 CVE26 critCVSS 9.4
    NEWPoC 12
    online food ordering system (13) · online matrimonial project (6) · online examination system (4)
  • 24apache software foundation—
    28 CVE6 critCVSS 7.2
    NEWNuclei 2PoC 1
    apache superset (6) · apache dolphinscheduler (3) · airflow (2)
  • 25apache—
    26 CVE6 critCVSS 7.1
    NEWNuclei 2PoC 1
    superset (6) · dolphinscheduler (3) · cocoon (2)
  • 26lenovo—
    26 CVECVSS 6.3
    NEW
    thinkcentre m70c firmware (20) · thinkcentre m70q firmware (20) · ideacentre mini 5 01iaq7 firmware (20)
  • 27projectworlds—
    24 CVE21 critCVSS 9.3
    NEWPoC 11
    online food ordering system (9) · online matrimonial project (6) · online food ordering script (4)
  • 28huawei—
    23 CVE1 critCVSS 7.1
    NEW
    emui (22) · harmonyos (22)
  • 29npm—
    23 CVE2 critCVSS 6.5
    NEWPoC 5
    ckeditor4 (2) · openmct (2) · bootbox (1)
  • 30qualcomm—
    23 CVE4 critCVSS 7.5
    NEW
    wsa8830 firmware (23) · wsa8835 firmware (23) · wcd9380 firmware (23)
  • 31qualcomm, inc.—
    23 CVE4 critCVSS 7.5
    NEW
    snapdragon (23)
  • 32tenda—
    23 CVE14 critCVSS 9.0
    NEWPoC 8
    ax1803 firmware (10) · ac10 firmware (6) · rx9 pro firmware (2)
  • 33amd—
    21 CVE2 critCVSS 6.1
    NEW
    3rd gen amd epyc™ processors (9) · epyc 7343 firmware (8) · epyc 74f3 firmware (8)
  • 34siemens—
    19 CVE4 critCVSS 5.3
    NEW
    scalance xc216-4c (8) · scalance xb213-3 (8) · scalance xb208 (8)
  • 35ibm—
    18 CVECVSS 5.3
    NEW
    cics tx advanced (6) · cics tx (6) · cics tx standard (3)
  • 36fortinet—
    17 CVE2 critCVSS 6.1
    NEW
    forticlientwindows (3) · fortiadc (3) · forticlient (3)
  • 37zyxel—
    17 CVE3 critCVSS 6.1
    NEWNuclei 2
    zld (9) · usg flex (9) · usg flex series firmware (9)
  • 38pkp—
    16 CVECVSS 6.5
    NEWPoC 8
    pkp/pkp-lib (14) · pkp web application library (3) · pkp/customlocale (1)
  • 39dell—
    15 CVECVSS 6.8
    NEW
    repository manager (2) · dell command configure (dcc) (2) · os recovery tool (2)
  • 40mattermost—
    15 CVECVSS 4.1
    NEW
    mattermost (12) · mattermost desktop (3)
  • 41artica—
    14 CVE1 critCVSS 7.0
    NEW
    pandora fms (14)
  • 42arubanetworks—
    14 CVE3 critCVSS 7.8
    NEW
    arubaos (14)
  • 43bigprof—
    14 CVECVSS 6.3
    NEWPoC 1
    online invoicing system (10) · online clinic management system (4)
  • 44bigprof —
    14 CVECVSS 6.3
    NEWPoC 1
    online inventory manager (6) · online clinic management system (4) · online invoicing system (4)
  • 45code-projects—
    14 CVE1 critCVSS 6.4
    NEWPoC 14
    blood bank (9) · inventory management (3) · simple crud functionality (1)
  • 46fedora—
    14 CVECVSS 6.4
    NEW
    fedora (14)
  • 47fortinet inc.—
    14 CVE2 critCVSS 6.1
    NEW
    fortiadc (3) · fortisiem (3) · fortiddos-f (2)
  • 48hp—
    14 CVE3 critCVSS 7.8
    NEW
    instantos (14)
  • 49hpe—
    14 CVE3 critCVSS 7.8
    NEW
    aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series; (14)
  • 50linux—
    14 CVECVSS 6.7
    NEWPoC 2
    linux kernel (14) · kernel (1)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79418—
2CWE-352250—
3CWE-89173—
4CWE-787130—
5CWE-20093—
6CWE-12575—
7CWE-2072—
8CWE-2265—
9CWE-28462—
10CWE-41657—
11CWE-86256—
12CWE-12054—
13CWE-7846—
14CWE-43442—
15CWE-28739—
16CWE-9437—
17CWE-26936—
18CWE-91835—
19CWE-40033—
20CWE-123626—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins805 CVE
    110 crit590 vendorsCVSS 7.1
    userpro (11) · voovi (11) · funnelforms (10)
  • Operating Systems398 CVE
    190 crit212 KEV40 vendorsCVSS 7.8
    ред ос (130) · осон основа оnyx (88) · fedora (85)
  • OSS Libraries377 CVE
    51 crit97 vendorsCVSS 7.5
    gpac (12) · node.js (8) · cesium net (6)
  • Enterprise Software334 CVE
    227 crit2 KEV119 vendorsCVSS 7.5
    pandora fms (30) · instantos (14) · nagios xi (9)
  • Hardware Firmware312 CVE
    783 crit48 vendorsCVSS 9.6
    sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 (31) · unison software (22) · vgpu (10)
  • Networking Infrastructure207 CVE
    118 crit44 vendorsCVSS 8.7
    firepower threat defense (30) · cisco firepower management center (20) · cisco firepower threat defense software (17)
  • ICS / OT / IoT148 CVE
    710 crit70 vendorsCVSS 8.6
    tellus (10) · tellus lite (9) · v-server (9)
  • Mobile Apps138 CVE
    9 crit20 KEV10 vendorsCVSS 7.8
    android (62) · chrome (22) · emui (22)
  • Consumer Software134 CVE
    59 crit2 KEV35 vendorsCVSS 8.2
    acrobat (17) · acrobat dc (17) · acrobat reader (17)
  • Cloud & SaaS131 CVE
    61 crit2 KEV64 vendorsCVSS 8.1
    nextcloud server (14) · online food ordering system (13) · emias os (11)
  • Security Products96 CVE
    19 crit53 vendorsCVSS 7.7
    secure access client (5) · avalanche (4) · fortiadc (3)
  • Communications75 CVE
    27 crit32 vendorsCVSS 9.5
    mattermost (12) · line (11) · anac xml bandi di gara (3)
  • Databases42 CVE
    3 crit1 KEV15 vendorsCVSS 8.7
    virtuoso (8) · yugabytedb (3) · qradar wincollect agent (2)
  • DevTools & CI37 CVE
    7 crit23 vendorsCVSS 7.3
    gitlab (9) · helix core (9)
  • AI / ML21 CVE
    12 crit15 vendorsCVSS 9.0
    ray (6) · h2oai/h2o-3 (4) · ray-project/ray (3)
  • Unclassified184 CVE
    44 crit154 vendorsCVSS 6.7
    line mini app (8) · facschorus (7) · sel-451 firmware (5)
Weakness × Sector

Which weaknesses hit which solution categories in November 2023

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS352CSRF89SQL Injection787Out-of-bounds Write200Information Exposure125Out-of-bounds Read20Improper Input Validation22Path Traversal284CWE-284416Use After FreeWeb & CMS Plugins260218116342911Operating Systems1315010161441140OSS Libraries39168242151215810Hardware Firmware212379152712205Enterprise Software8513231418167Networking Infrastructure13329357531Consumer Software7341813643428ICS / OT / IoT111212836103Cloud & SaaS14339257223Security Products1021262331