CVE statistics
What the CVEs published in the last 30 days were: how severe, which weaknesses, whose products and who assigned them.
- 16,922Publishedin the last 30 days
- 94%Scored938 have no CVSS score yet
- 18Known exploitedof them in CISA KEV now
- 30Added to KEVCVEs of any age, in this window
Severity
The best CVSS score each CVE has: the assigner’s, then CISA’s, then NVD’s.
Top weaknesses
CWE named by the record or NVD; a CVE may name several.
- CWE-79 Cross-site scripting (XSS)1,329
- CWE-862 Missing authorization1,224
- CWE-416 Use after free882
- CWE-284 Improper access control784
- CWE-125 Out-of-bounds read622
- CWE-200 Exposure of sensitive information606
- CWE-863 Incorrect authorization584
- CWE-639 Authorization bypass through a user-controlled key (IDOR)543
- CWE-89 SQL injection501
- CWE-22 Path traversal497
Top vendors
Vendors named among the affected products.
Top CNAs
Who assigned the CVE id: a vendor, a project or a research team.
Every number opens the CVEs behind it. The same figures are in the API as GET /v1/stats.