Top 50 Vendors By Total Number Of "Distinct" Vulnerabilities in 2017

Go to year: 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 2022 All Time Leaders

	Vendor Name	Number of Vulnerabilities
1	Google	909
2	Oracle	901
3	Debian	740
4	IBM	641
5	Apple	594
6	Microsoft	496
7	Linux	449
8	Cisco	409
9	Imagemagick	357
10	Redhat	308
11	Canonical	227
12	Apache	215
13	GNU	202
14	Tcpdump	134
15	Adobe	130
16	Fedoraproject	118
17	Opensuse	114
18	Huawei	74
19	Juniper	73
20	Netapp	73
21	Graphicsmagick	72
22	Trendmicro	72
23	Stdutility	68
24	Foxitsoftware	65
25	Qemu	65
26	XEN	62
27	Vmware	61
28	Libtiff	60
29	EMC	58
30	Wireshark	58
31	NTP	58
32	Mcafee	58
33	Cybozu	56
34	Jasper Project	55
35	Artifex	53
36	F5	51
37	Autotrace Project	51
38	SAP	50
39	Ffmpeg	47
40	Wordpress	46
41	Synology	46
42	Suse	45
43	PHP	45
44	Pivotal Software	40
45	Cloudfoundry	40
46	Fortinet	39
47	Opensuse Project	37
48	Jenkins	36
49	Libdwarf Project	35
50	Novell	34

CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.