CVE Tools
Sign in
month report

February 2021

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

February 2021 closed with 1,557 published CVEs. 231 criticals, сообщество свободного программного обеспечения led volume, mostly via debian gnu/linux. Top weakness class — CWE-79 (142 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,557
— MoM— YoY
Severity mix
231 / 625
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
4.8%
74 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
1849.6
n=74
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
268
n=19
Detection gap

KEV pressure, no Nuclei coverage

February 2021 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in February 2021

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write78OS Command Injection20Improper Input Validation89SQL Injection121CWE-121798Hard-coded Credentials125Out-of-bounds Read22Path Traversal416Use After Freeсообщество свободного программного обеспечения2161611312ао «нппкт»155314google265219microsoft corp114313ооо «русбитех-астра»1851211microsoft1528fedoraproject114131246cisco1468302cisco systems inc.1468302ао «концерн вниинс»142113ао «ивк»82110npm311212

Most discussed CVEs — February 2021

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    115 CVE17 critCVSS 7.2
    KEV 2Nuclei 12PoC 20
    debian gnu/linux (97) · linux (13) · libmysofa (5)
  • 2microsoft—
    103 CVE14 critCVSS 7.7
    KEV 2PoC 16
    microsoft edge (41) · windows server 2019 (29) · windows server version 2004 (29)
  • 3ао "нппкт"—
    102 CVE18 critCVSS 7.5
    KEV 1Nuclei 9PoC 21
    осон основа оnyx (102)
  • 4google—
    101 CVE12 critCVSS 7.7
    KEV 1PoC 7
    android (55) · google chrome (43) · chrome (42)
  • 5ооо «русбитех-астра»—
    92 CVE7 critCVSS 7.1
    KEV 1Nuclei 3PoC 18
    astra linux special edition (91) · astra linux special edition для «эльбрус» (22) · astra linux common edition (12)
  • 6fedoraproject—
    82 CVE17 critCVSS 7.2
    KEV 1Nuclei 9PoC 23
    fedora (82) · extra packages for enterprise linux (1)
  • 7cisco—
    75 CVE11 critCVSS 7.5
    PoC 75
    cisco small business rv series router firmware (44) · rv325 dual gigabit wan vpn router firmware (35) · cisco small business rv016 (35)
  • 8ао «концерн вниинс»—
    68 CVE10 critCVSS 7.6
    KEV 1PoC 11
    ос он «стрелец» (68)
  • 9ао «ивк»—
    64 CVE12 critCVSS 7.5
    KEV 1Nuclei 6PoC 8
    альт 8 сп (63) · альт сп 10 (3) · альт 8 сп рабочая станция (1)
  • 10npm—
    63 CVE13 critCVSS 7.4
    KEV 1Nuclei 5PoC 18
    marked (4) · lodash (2) · lodash-es (2)
  • 11debian—
    62 CVE10 critCVSS 7.0
    KEV 2Nuclei 9PoC 14
    debian linux (62)
  • 12intel—
    62 CVECVSS 6.4
    NEW
    graphics drivers (22) · intel graphics driver (21) · ethernet network adapter e810 firmware (7)
  • 13adobe—
    53 CVE6 critCVSS 7.2
    KEV 1
    adobe acrobat reader 2020 (24) · acrobat (24) · acrobat dc (24)
  • 14novell inc.—
    45 CVE4 critCVSS 7.4
    KEV 1Nuclei 1PoC 3
    opensuse leap (43) · suse package hub for suse linux enterprise (27) · suse linux enterprise server (8)
  • 15maven—
    44 CVE3 critCVSS 6.8
    Nuclei 4PoC 3
    org.jenkins-ci.plugins:claim (2) · com.adobe.acs:acs-aem-commons (2) · io.undertow:undertow-core (2)
  • 16fiberhome—
    41 CVE32 critCVSS 9.3
    NEWPoC 16
    hg6245d firmware (40) · an5506-04-fa firmware (1)
  • 17ibm—
    40 CVECVSS 5.9
    security verify information queue (11) · security identity governance and intelligence (5) · api connect (5)
  • 18fedora project—
    33 CVE10 critCVSS 7.6
    KEV 1Nuclei 6PoC 8
    fedora (33)
  • 19packagist—
    31 CVE9 critCVSS 7.1
    KEV 1Nuclei 5PoC 4
    magento/community-edition (16) · magento/project-community-edition (11) · vrana/adminer (3)
  • 20siemens—
    31 CVE1 critCVSS 7.3
    Nuclei 1PoC 2
    jt2go (12) · teamcenter visualization (12) · solid edge se2020 firmware (5)
  • 21pypi—
    30 CVE8 critCVSS 7.0
    Nuclei 8PoC 6
    salt (10) · matrix-synapse (2) · apache-airflow (2)
  • 22qualcomm—
    29 CVE6 critCVSS 8.1
    smb1390 firmware (25) · qet4101 firmware (25) · smr526 firmware (25)
  • 23qualcomm, inc.—
    29 CVE6 critCVSS 8.0
    snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking (5) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking (3) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking (2)
  • 24ооо «ред софт»—
    27 CVE2 critCVSS 6.9
    PoC 6
    ред ос (27)
  • 25jetbrains—
    26 CVE1 critCVSS 5.8
    youtrack (8) · teamcity (8) · ktor (3)
  • 26mozilla—
    26 CVECVSS 7.0
    PoC 2
    firefox (26) · firefox esr (10) · thunderbird (10)
  • 27redhat—
    26 CVECVSS 6.3
    red hat enterprise linux (13) · openshift container platform (5) · openshift application runtimes (4)
  • 28ооо «электронные офисные системы»—
    25 CVECVSS 6.3
    NEW
    edoclib (25)
  • 29foxitsoftware—
    24 CVECVSS 7.3
    foxit studio photo (22) · studio photo (22) · foxit reader (2)
  • 30netapp—
    24 CVECVSS 6.0
    Nuclei 3PoC 5
    cloud backup (7) · clustered data ontap (6) · snapcenter (5)
  • 31oracle—
    23 CVE2 critCVSS 6.5
    Nuclei 3PoC 7
    communications cloud native core policy (7) · enterprise manager ops center (4) · zfs storage appliance kit (4)
  • 32trendmicro—
    23 CVECVSS 5.6
    officescan (17) · trend micro officescan (17) · trend micro apex one (17)
  • 33hpe—
    17 CVECVSS 7.1
    NEW
    baseboard management controller (14) · web viewpoint (2) · 3500 yl firmware (1)
  • 34magento—
    17 CVE6 critCVSS 6.8
    NEW
    magento (16) · upward connector (1) · upward php (1)
  • 35crates.io—
    15 CVE7 critCVSS 8.1
    PoC 4
    xcb (4) · openssl-src (2) · hyper (1)
  • 36go—
    14 CVECVSS 6.3
    PoC 1
    github.com/moby/moby (2) · github.com/cosmos/ethermint (2) · go.elastic.co/apm (1)
  • 37huawei—
    14 CVECVSS 6.2
    NEW
    taurus-al00a firmware (4) · manageone (4) · mate 30 firmware (4)
  • 38atlassian—
    13 CVECVSS 5.4
    Nuclei 1
    jira data center (7) · jira server (7) · jira (6)
  • 39f5—
    13 CVECVSS 7.0
    big-ip application security manager (10) · big-ip access policy manager (8) · big-ip domain name system (8)
  • 40mbconnectline—
    13 CVE1 critCVSS 6.2
    NEW
    mbconnect24 (13) · mymbconnect24 (13)
  • 41apache—
    12 CVE1 critCVSS 6.8
    KEV 1Nuclei 4PoC 1
    airflow (2) · hive (1) · activemq (1)
  • 42arubanetworks—
    12 CVECVSS 5.6
    clearpass policy manager (11) · aruba 2930f firmware (1) · aruba 2530ya firmware (1)
  • 43advantech—
    11 CVE3 critCVSS 8.7
    PoC 4
    webaccess\/scada (6) · iview (4) · bb-eswgp506-2sfp-t firmware (1)
  • 44canonical—
    11 CVE1 critCVSS 7.1
    Nuclei 1PoC 2
    ubuntu (11) · ubuntu linux (1)
  • 45ibm corp.—
    11 CVE2 critCVSS 7.2
    NEWPoC 3
    ibm spectrum protect for virtual environments (5) · ibm qradar advisor (2) · ibm netezza host management (1)
  • 46owncloud—
    11 CVE1 critCVSS 6.3
    NEWPoC 1
    owncloud (5) · owncloud client (2) · file firewall (1)
  • 47rubygems—
    11 CVECVSS 6.3
    Nuclei 3PoC 8
    carrierwave (2) · lodash-rails (2) · actionpack (1)
  • 48apache software foundation—
    10 CVE2 critCVSS 7.2
    KEV 1Nuclei 3PoC 2
    apache airflow (2) · apache livy (incubating) (1) · apache myfaces core (1)
  • 49linux—
    10 CVECVSS 6.8
    linux kernel (10)
  • 50mcafee—
    10 CVE1 critCVSS 7.1
    KEV 1
    endpoint security (5) · total protection (3) · epolicy orchestrator (1)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79142—
2CWE-787138—
3CWE-7861—
4CWE-2049—
5CWE-8946—
6CWE-12144—
7CWE-79843—
8CWE-12542—
9CWE-2241—
10CWE-41640—
11CWE-12029—
12CWE-35229—
13CWE-40029—
14CWE-11926—
15CWE-26924—
16CWE-91822—
17CWE-19021—
18CWE-31220—
19CWE-47620—
20CWE-20019—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems342 CVE
    345 crit41 KEV32 vendorsCVSS 7.7
    fedora (115) · осон основа оnyx (102) · debian gnu/linux (97)
  • OSS Libraries320 CVE
    67 crit3 KEV112 vendorsCVSS 8.1
    gsoap (10) · libmysofa (5) · openssl (5)
  • Enterprise Software251 CVE
    45 crit6 KEV54 vendorsCVSS 7.9
    nagios xi (11) · security verify information queue (11) · cloud backup (7)
  • Hardware Firmware187 CVE
    2,507 crit2 KEV26 vendorsCVSS 8.1
    hg6245d firmware (40) · pm8008 firmware (25) · pmk8002 firmware (25)
  • Networking Infrastructure169 CVE
    128 crit14 KEV41 vendorsCVSS 9.3
    cisco small business rv series router firmware (44) · cisco small business rv016 (35) · cisco small business rv042 (35)
  • Consumer Software145 CVE
    20 crit11 KEV25 vendorsCVSS 8.3
    magento commerce (32) · acrobat (24) · acrobat dc (24)
  • Mobile Apps118 CVE
    21 crit2 KEV6 vendorsCVSS 7.4
    android (55) · google chrome (43) · chrome (42)
  • Security Products112 CVE
    22 crit8 KEV41 vendorsCVSS 8.1
    apex one (17) · officescan (17) · trend micro apex one (17)
  • Web & CMS Plugins90 CVE
    24 crit2 KEV48 vendorsCVSS 9.8
    directus (4) · yccms (3) · activemq (2)
  • ICS / OT / IoT87 CVE
    25 crit42 vendorsCVSS 9.8
    solarview compact (7) · webaccess\/scada (6) · cx-one (5)
  • DevTools & CI62 CVE
    13 crit19 vendorsCVSS 9.0
    teamcity (8) · youtrack (8) · hub (3)
  • Cloud & SaaS59 CVE
    16 crit12 KEV29 vendorsCVSS 7.6
    cloud foundation (3) · vmware cloud foundation (3) · brocade fabric operating system firmware (2)
  • Databases40 CVE
    6 crit2 KEV14 vendorsCVSS 6.8
    communications cloud native core policy (7) · ibm spectrum protect for virtual environments (5) · peoplesoft enterprise peopletools (5)
  • Communications30 CVE
    1 crit22 vendorsCVSS 7.0
    synapse (4) · smartfoxserver (3) · telegram (3)
  • AI / ML1 CVE
    1 vendorsCVSS 5.3
    harbor (1)
  • Unclassified87 CVE
    24 crit1 KEV48 vendorsCVSS 7.6
    mbconnect24 (13) · mymbconnect24 (13) · ethermint (4)
Weakness × Sector

Which weaknesses hit which solution categories in February 2021

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write78OS Command Injection20Improper Input Validation89SQL Injection121CWE-121798Hard-coded Credentials125Out-of-bounds Read22Path Traversal416Use After FreeOperating Systems54611434523OSS Libraries231516552396Hardware Firmware219318733946Enterprise Software622541611102Consumer Software659542218424Networking Infrastructure126211043024ICS / OT / IoT1013633397Security Products9282212Web & CMS Plugins22611515DevTools & CI7413