Skip to content
CVE Tracker

CVE statistics

What the CVEs published in the last 7 days were: how severe, which weaknesses, whose products and who assigned them.

Severity

The best CVSS score each CVE has: the assigner’s, then CISA’s, then NVD’s.

Top weaknesses

CWE named by the record or NVD; a CVE may name several.

  1. CWE-79 Cross-site scripting (XSS)333
  2. CWE-862 Missing authorization248
  3. CWE-863 Incorrect authorization139
  4. CWE-22 Path traversal111
  5. CWE-416 Use after free100
  6. CWE-639 Authorization bypass through a user-controlled key (IDOR)90
  7. CWE-78 OS command injection90
  8. CWE-502 Deserialization of untrusted data88
  9. CWE-787 Out-of-bounds write85
  10. CWE-89 SQL injection84

Top vendors

Vendors named among the affected products.

  1. Google377
  2. Linux170
  3. Drupal106
  4. Dell79
  5. MediaTek, Inc.56
  6. Hewlett Packard Enterprise (HPE)55
  7. Apache Software Foundation50
  8. Red Hat50
  9. IBM33
  10. FreeRDP27

Top CNAs

Who assigned the CVE id: a vendor, a project or a research team.

  1. VulnCheck453
  2. GitHub_M331
  3. Chrome237
  4. Patchstack223
  5. Wordfence206
  6. Linux170
  7. google_android139
  8. WPScan108
  9. VulDB107
  10. drupal106

Every number opens the CVEs behind it. The same figures are in the API as GET /v1/stats.