Top 50 Vendors By Total Number Of "Distinct" Vulnerabilities in 2017

Go to year: 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 All Time Leaders

	Vendor Name	Number of Vulnerabilities
1	Google	910
2	Oracle	891
3	Debian	690
4	IBM	641
5	Apple	591
6	Microsoft	496
7	Linux	449
8	Cisco	409
9	Imagemagick	357
10	Canonical	219
11	Apache	216
12	Redhat	216
13	GNU	202
14	Tcpdump	133
15	Adobe	130
16	Fedoraproject	116
17	Opensuse	113
18	Huawei	74
19	Juniper	73
20	Graphicsmagick	72
21	Stdutility	68
22	Trendmicro	66
23	Qemu	66
24	Netapp	66
25	EMC	65
26	Foxitsoftware	65
27	XEN	62
28	Libtiff	60
29	NTP	58
30	Mcafee	58
31	Wireshark	58
32	Cybozu	56
33	Jasper Project	55
34	Artifex	53
35	Autotrace Project	51
36	F5	50
37	SAP	50
38	Pivotal Software	50
39	Vmware	47
40	Ffmpeg	47
41	Wordpress	46
42	PHP	45
43	Synology	45
44	Suse	43
45	Fortinet	39
46	Opensuse Project	38
47	Jenkins	36
48	Novell	35
49	Libdwarf Project	35
50	Freedesktop	32

CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.