Total CVEs disclosed in 2025: 21590
Historical: 2024
CNAs Missing in Action
Updated: 06/12/2025 11:17EST
Total CNAs: 454
Total CNAs without 2025 CVE disclosure: 168
Total CVSS v4 Scores: 4389
Total CVSS v3 Scores: 16811
Total CVEs with both CVSS v3 and v4: 2406
Total CVEs that provided a solution/remedy: 2329
Total CVEs that provided all three standards CWE, CVSS, and CPE: 750
| CNA | CVES | Score |
|---|---|---|
| Patchstack | 4072 | 71.9 |
| mitre | 2490 | 48.2 |
| VulDB | 2393 | 82.0 |
| Linux | 2184 | 34.7 |
| Wordfence | 1576 | 65.8 |
| GitHub_M | 1097 | 68.3 |
| microsoft | 575 | 70.0 |
| WPScan | 477 | 43.8 |
| adobe | 453 | 75.7 |
| apple | 367 | 43.0 |
| ibm | 337 | 88.3 |
| @huntr_ai | 322 | 65.8 |
| siemens | 171 | 65.4 |
| oracle | 158 | 70.5 |
| qualcomm | 157 | 70.5 |
| redhat | 154 | 85.0 |
| icscert | 151 | 70.8 |
| fortinet | 146 | 93.0 |
| intel | 144 | 63.5 |
| drupal | 144 | 42.3 |
| INCIBE | 141 | 74.0 |
| cisco | 127 | 63.8 |
| SamsungMobile | 113 | 67.6 |
| zdi | 110 | 68.6 |
| jpcert | 107 | 68.1 |
| sap | 107 | 64.2 |
| dell | 102 | 74.8 |
| apache | 95 | 56.0 |
| mozilla | 94 | 43.7 |
| huawei | 90 | 50.1 |
| talos | 85 | 66.7 |
| GitLab | 72 | 92.3 |
| Chrome | 70 | 43.7 |
| Nozomi | 68 | 69.0 |
| CERT-PL | 64 | 77.8 |
| google_android | 63 | 40.0 |
| HCL | 63 | 65.2 |
| MediaTek | 63 | 44.5 |
| ABB | 59 | 70.2 |
| OpenHarmony | 56 | 68.8 |
| Mattermost | 52 | 78.7 |
| ivanti | 46 | 67.4 |
| nvidia | 43 | 69.1 |
| twcert | 43 | 75.0 |
| hpe | 40 | 45.9 |
| schneider | 38 | 54.0 |
| CERTVDE | 36 | 64.7 |
| qnap | 36 | 79.9 |
| palo_alto | 36 | 90.8 |
| TR-CERT | 35 | 69.2 |
| Zoom | 34 | 70.6 |
| vmware | 34 | 61.3 |
| AMD | 33 | 54.6 |
| fedora | 32 | 65.8 |
| VulnCheck | 32 | 73.5 |
| JetBrains | 31 | 68.5 |
| jenkins | 31 | 35.5 |
| juniper | 30 | 87.0 |
| f5 | 30 | 75.1 |
| CPANSec | 28 | 49.5 |
| hackerone | 28 | 43.7 |
| Esri | 28 | 71.8 |
| DIVD | 27 | 75.4 |
| wikimedia-foundation | 27 | 55.5 |
| Arista | 26 | 75.7 |
| imaginationtech | 26 | 46.5 |
| 3DS | 26 | 52.5 |
| Rockwell | 24 | 77.2 |
| autodesk | 24 | 67.8 |
| elastic | 23 | 65.0 |
| Acronis | 23 | 79.7 |
| Google_Devices | 22 | 44.5 |
| Joomla | 22 | 49.5 |
| cisa-cg | 21 | 68.4 |
| ProgressSoftware | 21 | 73.7 |
| DEVOLUTIONS | 21 | 41.0 |
| sonicwall | 21 | 44.3 |
| suse | 20 | 65.4 |
| Silabs | 19 | 75.9 |
| NCSC.ch | 19 | 71.9 |
| SEL | 19 | 67.3 |
| CERT-In | 18 | 81.8 |
| snyk | 18 | 68.1 |
| OpenText | 17 | 74.8 |
| Axis | 17 | 64.3 |
| HITVAN | 17 | 70.2 |
| AMZN | 16 | 75.0 |
| AHA | 16 | 74.3 |
| WSO2 | 15 | 81.1 |
| 15 | 68.2 | |
| tenable | 15 | 71.3 |
| Go | 15 | 42.7 |
| bosch | 15 | 60.0 |
| lenovo | 14 | 80.7 |
| eclipse | 14 | 70.6 |
| Zohocorp | 14 | 65.0 |
| SEC-VLab | 14 | 64.3 |
| zte | 14 | 73.6 |
| synology | 13 | 74.5 |
| certcc | 13 | 37.6 |
| GovTech CSG | 13 | 66.8 |
| Deltaww | 13 | 76.9 |
| Honeywell | 12 | 79.9 |
| Arm | 12 | 41.4 |
| symantec | 11 | 54.3 |
| NI | 11 | 70.4 |
| Checkmk | 11 | 69.5 |
| Hitachi | 11 | 78.0 |
| Zyxel | 10 | 72.6 |
| Xerox | 10 | 70.5 |
| Canon | 10 | 72.4 |
| SolarWinds | 10 | 77.9 |
| mongodb | 10 | 82.2 |
| INCD | 10 | 69.5 |
| canonical | 9 | 54.8 |
| Lexmark | 9 | 70.1 |
| Hitachi Energy | 9 | 67.3 |
| brocade | 9 | 70.0 |
| BlackDuck | 9 | 77.8 |
| PSF | 9 | 73.0 |
| kubernetes | 9 | 65.6 |
| SICK AG | 9 | 77.7 |
| hp | 9 | 65.6 |
| ChromeOS | 9 | 39.9 |
| ZUSO ART | 9 | 75.4 |
| Bitdefender | 8 | 77.2 |
| Mautic | 8 | 64.0 |
| trendmicro | 8 | 59.8 |
| rapid7 | 8 | 67.2 |
| ASUS | 8 | 71.1 |
| NLOK | 8 | 81.1 |
| HashiCorp | 8 | 72.6 |
| Gridware | 8 | 70.2 |
| JFROG | 8 | 72.1 |
| Perforce | 7 | 62.4 |
| cloudflare | 7 | 63.7 |
| php | 7 | 65.0 |
| Octopus | 7 | 67.6 |
| Moxa | 7 | 80.1 |
| OpenVPN | 7 | 42.7 |
| Xiaomi | 7 | 67.7 |
| WatchGuard | 7 | 70.0 |
| PostgreSQL | 7 | 62.4 |
| Salesforce | 7 | 43.3 |
| yandex | 6 | 72.5 |
| Document Fdn. | 6 | 65.8 |
| Fluid Attacks | 6 | 76.2 |
| Docker | 6 | 69.5 |
| isc | 6 | 86.0 |
| GRAFANA | 6 | 65.7 |
| Pentraze | 6 | 69.2 |
| AMI | 6 | 61.3 |
| blackberry | 6 | 70.3 |
| ONEKEY | 6 | 78.3 |
| Absolute | 6 | 58.0 |
| curl | 6 | 43.2 |
| NCSC-FI | 6 | 74.8 |
| cirosec | 6 | 72.7 |
| M-Files Corporation | 6 | 77.7 |
| Centreon | 6 | 78.0 |
| GitHub_P | 5 | 68.4 |
| Vivo | 5 | 68.2 |
| KoreLogic | 5 | 52.0 |
| Zabbix | 5 | 68.2 |
| Unisoc | 5 | 69.6 |
| OTRS | 5 | 80.8 |
| TECNOMobile | 5 | 40.2 |
| HeroDevs | 5 | 74.8 |
| TQtC | 5 | 65.4 |
| atlassian | 4 | 65.2 |
| flexera | 4 | 76.2 |
| zephyr | 4 | 68.2 |
| Omnissa | 4 | 61.8 |
| ESET | 4 | 67.8 |
| PandoraFMS | 4 | 78.2 |
| ERIC | 4 | 64.8 |
| ENISA | 4 | 68.5 |
| NEC | 4 | 63.2 |
| glibc | 4 | 36.0 |
| Sonatype | 4 | 77.5 |
| Eaton | 4 | 67.0 |
| tibco | 4 | 50.8 |
| redhat-cnalr | 4 | 68.5 |
| Liferay | 4 | 67.0 |
| Crestron | 4 | 84.8 |
| Supermicro | 3 | 71.7 |
| Fortra | 3 | 85.3 |
| OMRON | 3 | 77.0 |
| Pega | 3 | 76.0 |
| Citrix | 3 | 66.0 |
| Phoenix | 3 | 70.0 |
| avaya | 3 | 66.0 |
| openssl | 3 | 53.0 |
| checkpoint | 3 | 68.0 |
| ManageEngine | 3 | 68.7 |
| PureStorage | 3 | 76.7 |
| freebsd | 3 | 51.7 |
| Mitsubishi | 3 | 59.0 |
| RTI | 3 | 81.3 |
| Honor | 3 | 35.0 |
| BLSOPS | 3 | 70.0 |
| 3 | 52.0 | |
| KNIME | 3 | 65.3 |
| OX | 3 | 69.3 |
| FSOFT | 3 | 67.0 |
| B.Braun | 3 | 78.3 |
| Philips | 3 | 71.7 |
| Saviynt | 3 | 76.3 |
| HiddenLayer | 3 | 65.3 |
| Checkmarx | 2 | 65.0 |
| Kaspersky | 2 | 75.5 |
| Baxter | 2 | 77.5 |
| Proofpoint | 2 | 57.5 |
| Mandiant | 2 | 54.0 |
| odoo | 2 | 64.0 |
| sba-research | 2 | 88.0 |
| TianoCore | 2 | 69.0 |
| Gallagher | 2 | 69.0 |
| Payara | 2 | 70.5 |
| TXOne | 2 | 66.5 |
| forcepoint | 2 | 80.0 |
| Forescout | 2 | 70.5 |
| BT | 2 | 66.5 |
| Splunk | 2 | 69.0 |
| HYPR | 2 | 70.5 |
| trellix | 2 | 68.5 |
| samsung.tv_appliance | 2 | 67.5 |
| ConcreteCMS | 2 | 68.5 |
| ClickHouse | 2 | 56.0 |
| TPLink | 2 | 70.0 |
| jci | 2 | 72.5 |
| netapp | 2 | 70.0 |
| GandC | 2 | 73.0 |
| bizerba | 2 | 74.0 |
| ConnectWise | 2 | 78.0 |
| upKeeper | 2 | 56.0 |
| Opera | 1 | 45.0 |
| Replicated | 1 | 15.0 |
| Carrier | 1 | 83.0 |
| FSI | 1 | 69.0 |
| seal | 1 | 69.0 |
| Roche | 1 | 76.0 |
| Netskope | 1 | 84.0 |
| Sophos | 1 | 69.0 |
| Zscaler | 1 | 74.0 |
| XEN | 1 | 31.0 |
| Palantir | 1 | 69.0 |
| N-able | 1 | 71.0 |
| Synaptics | 1 | 68.0 |
| TV | 1 | 82.0 |
| SN | 1 | 65.0 |
| Swift | 1 | 45.0 |
| crafter | 1 | 75.0 |
| CyberArk | 1 | 66.0 |
| MON-CSIRT | 1 | 79.0 |
| NLnet Labs | 1 | 83.0 |
| BECLS | 1 | 81.0 |
| Panasonic_Holdings_Corporation | 1 | 70.0 |
| SK-CERT | 1 | 72.0 |
| Kong | 1 | 69.0 |
| CrowdStrike | 1 | 82.0 |
| Temporal | 1 | 81.0 |
| Anolis | 1 | 74.0 |
| 1E | 1 | 72.0 |
| Milestone | 1 | 82.0 |
| MIM | 1 | 83.0 |
| ATIS | 1 | 75.0 |
| YokogawaGroup | 1 | 70.0 |
| Ping Identity | 1 | 71.0 |
| WindRiver | 1 | 77.0 |
| Hillstone | 1 | 82.0 |
| Dremio | 1 | 84.0 |
| TML | 1 | 72.0 |
| EDB | 1 | 68.0 |
| openEuler | 1 | 71.0 |
| GE_Vernova | 1 | 69.0 |
| iManage | 1 | 72.0 |
| Digi | 1 | 53.0 |
| Cato | 1 | 72.0 |
| Danfoss | 1 | 63.0 |
| naver | 1 | 51.0 |
| Insyde | 1 | 83.0 |
| arcinfo | 1 | 88.0 |
| tlt_net | 1 | 55.0 |
| Edgewatch | 1 | 74.0 |
| ca | 1 | 74.0 |
| CNAs did not disclose CVE in 2025 |
|---|
| ARCON |
| CSW |
| Secomea |
| Tcpdump |
| Proton |
| CEP |
| Delinea |
| securepoint |
| LY-Corporation |
| securin |
| OPPO |
| Crafter_CMS |
| JFrog |
| ZTE |
| CTOne |
| Zowe |
| obdev |
| Bugcrowd |
| KrakenD |
| Hallo_Welt |
| Automox |
| ZUSO_ART |
| Intigriti |
| Wiz |
| BECDX |
| GreenRocketSecurity |
| MolDev |
| teleport |
| Genetec |
| Microchip |
| ExtremeNetworks |
| Samsung_Mobile |
| Tigera |
| NX |
| EEF |
| GE_Healthcare |
| rami.io |
| Nokia |
| TRO |
| Solidigm |
| Ribose |
| Snow |
| OnLogic |
| TeamViewer |
| Alias |
| DeepSurface |
| Dfinity |
| Canon_EMEA |
| ELAN |
| IDBS |
| SWI |
| Neo4j |
| dotCMS |
| SmileDigitalHealth |
| StrongDM |
| SRA |
| VULSec |
| FULL |
| ICT |
| SCHUTZWERK |
| SoftIron |
| Okta |
| OB |
| PangeaCyber |
| IoT83 |
| Stryker |
| THA-PSIRT |
| 9front |
| Yugabyte |
| XI |
| Hitachi_Vantara |
| Ciena |
| Dragos |
| Ampere |
| Trellix |
| netflix |
| larry_cashdollar |
| krcert |
| PaperCut |
| Stackable |
| LeicaBiosystems |
| SOCRadar |
| Caliptra |
| ADI |
| Mirantis |
| airbus |
| Silver_Peak |
| Censys |
| BD |
| Arxscan |
| ASUSTOR |
| KCFTech |
| floragunn |
| graphql-java |
| AlgoSec |
| alibaba |
| libreswan |
| senhasegura |
| TMUS |
| PingIdentity |
| Armis |
| Dassault_Systemes |
| Pall |
| wolfSSL |
| debian |
| 42Gears |
| Softing |
| Jaspersoft |
| Huntress |
| M-Files |
| openam-jp |
| IDEMIA |
| CISA |
| Simplinx |
| Illumio |
| Logitech |
| Toshiba |
| SDC |
| F5 |
| SailPoint |
| Meta |
| NetRise |
| ASR |
| KeeperSecurity |
| Baidu |
| Seagate |
| hikvision |
| ShopBeat |
| harborist |
| DualVS |
| JAMF |
| OS-S |
| Hanwha_Vision |
| Xylem |
| SCIEX |
| AppCheck |
| milestonesys |
| Securifera |
| Fidelis |
| STAR_Labs |
| PlexTrac |
| MyMMT |
| openjs |
| CoolKit |
| EA |
| WrenSecurity |
| NCSC-NL |
| Spotfire |
| RealPage |
| LMS |
| openGauss |
| Profelis |
| S21sec |
| Tego_Cyber |
| Radiometer |
| Medtronic |
| HemoCue |
| LGE |
| DevCycle |
| NLnet_Labs |
| ODA |
| Vaadin |
| OpenBMC |
| sec1 |
| Fluid_Attacks |
| dahua |
| Cytiva |
| ASRG |
| Hitachi_Energy |
| WDC_PSIRT |
| The_Missing_Link |
| PTC |
| SICK_AG |
| OpenNMS |
| Gitea |
| DHIS2 |
| PingCAP |
| nodejs |
| Halborn |
| CyberDanube |
| CSA |
| GovTech_CSG |
| directcyber |
| Document_Fdn. |
| IDT-DNA |
| Profisee |
| Qualys |
| BHV |
| vx |
| watchdog |
| ZGR |