Top 50 Vendors By Total Number Of "Distinct" Vulnerabilities in 2017

Go to year: 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 2022 2023 All Time Leaders

	Vendor Name	Number of Vulnerabilities
1	Oracle	911
2	Google	909
3	Debian	844
4	IBM	641
5	Apple	598
6	Microsoft	496
7	Linux	451
8	Cisco	409
9	Redhat	369
10	Imagemagick	357
11	Canonical	243
12	Apache	215
13	GNU	199
14	Tcpdump	134
15	Netapp	132
16	Adobe	130
17	Fedoraproject	118
18	Opensuse	115
19	Huawei	74
20	Juniper	73
21	Graphicsmagick	72
22	Trendmicro	72
23	Stdutility	68
24	Foxitsoftware	65
25	Qemu	65
26	XEN	62
27	Vmware	61
28	Libtiff	60
29	Mcafee	60
30	EMC	58
31	NTP	58
32	Wireshark	58
33	Cybozu	56
34	Jasper Project	55
35	Artifex	53
36	F5	51
37	Autotrace Project	51
38	SAP	50
39	Ffmpeg	47
40	Synology	46
41	Wordpress	46
42	Suse	45
43	PHP	45
44	Cloudfoundry	40
45	Fortinet	39
46	Pivotal Software	39
47	Opensuse Project	37
48	Jenkins	36
49	Libdwarf Project	35
50	Novell	34

CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.