Top 50 Vendors By Total Number Of "Distinct" Vulnerabilities in 2017

Go to year: 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 All Time Leaders

	Vendor Name	Number of Vulnerabilities
1	Google	1000
2	Oracle	872
3	Microsoft	698
4	IBM	683
5	Apple	591
6	Cisco	491
7	Linux	454
8	Imagemagick	357
9	Adobe	353
10	Debian	241
11	Apache	218
12	GNU	197
13	Huawei	169
14	Redhat	139
15	Tcpdump	133
16	Irfanview	115
17	Xnview	114
18	Fedoraproject	98
19	Opensuse Project	91
20	Canonical	87
21	Juniper	86
22	Novell	74
23	EMC	73
24	Graphicsmagick	72
25	Stdutility	68
26	Foxitsoftware	67
27	Trendmicro	66
28	Qemu	65
29	XEN	62
30	Libtiff	60
31	Artifex	59
32	NTP	59
33	Nvidia	58
34	Wireshark	58
35	Mcafee	57
36	Cybozu	56
37	Jasper Project	55
38	F5	52
39	Autotrace Project	51
40	SAP	50
41	Pivotal Software	49
42	Ffmpeg	47
43	Samsung	46
44	Wordpress	46
45	Vmware	45
46	Moxa	45
47	PHP	44
48	Suse	42
49	D-link	42
50	Fortinet	40

CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.