Top 50 Vendors By Total Number Of "Distinct" Vulnerabilities in 2017

Go to year: 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 All Time Leaders

	Vendor Name	Number of Vulnerabilities
1	Google	1001
2	Oracle	876
3	Microsoft	698
4	IBM	683
5	Apple	593
6	Cisco	491
7	Debian	456
8	Linux	454
9	Imagemagick	357
10	Adobe	353
11	Apache	215
12	GNU	197
13	Huawei	181
14	Redhat	180
15	Canonical	167
16	Tcpdump	133
17	Irfanview	115
18	Xnview	114
19	Opensuse	109
20	Fedoraproject	100
21	Juniper	86
22	EMC	73
23	Graphicsmagick	72
24	Stdutility	68
25	Foxitsoftware	67
26	Trendmicro	66
27	Qemu	65
28	XEN	62
29	Libtiff	60
30	NTP	59
31	Artifex	59
32	Wireshark	58
33	Nvidia	58
34	Mcafee	58
35	Cybozu	56
36	Jasper Project	55
37	F5	52
38	Autotrace Project	51
39	SAP	50
40	Pivotal Software	49
41	Ffmpeg	47
42	Synology	47
43	Samsung	46
44	Moxa	45
45	Vmware	45
46	Opensuse Project	44
47	Netapp	44
48	PHP	44
49	Suse	43
50	Wordpress	43

CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.