CVE statistics
What the CVEs published in the last 7 days were: how severe, which weaknesses, whose products and who assigned them.
- 3,296Publishedin the last 7 days
- 92%Scored248 have no CVSS score yet
- 2Known exploitedof them in CISA KEV now
- 3Added to KEVCVEs of any age, in this window
Severity
The best CVSS score each CVE has: the assigner’s, then CISA’s, then NVD’s.
Top weaknesses
CWE named by the record or NVD; a CVE may name several.
- CWE-79 Cross-site scripting (XSS)289
- CWE-862 Missing authorization248
- CWE-639 Authorization bypass through a user-controlled key (IDOR)157
- CWE-918 Server-side request forgery (SSRF)132
- CWE-863 Incorrect authorization126
- CWE-22 Path traversal122
- CWE-89 SQL injection100
- CWE-787 Out-of-bounds write97
- CWE-416 Use after free91
- CWE-200 Exposure of sensitive information84
Top vendors
Vendors named among the affected products.
Top CNAs
Who assigned the CVE id: a vendor, a project or a research team.
Every number opens the CVEs behind it. The same figures are in the API as GET /v1/stats.