Top 50 Vendors By Total Number Of "Distinct" Vulnerabilities in 2017

Go to year: 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 All Time Leaders

	Vendor Name	Number of Vulnerabilities
1	Google	1000
2	Oracle	872
3	Microsoft	698
4	IBM	683
5	Apple	591
6	Cisco	491
7	Linux	454
8	Imagemagick	357
9	Adobe	353
10	Debian	250
11	Apache	218
12	GNU	197
13	Huawei	169
14	Redhat	141
15	Tcpdump	133
16	Irfanview	115
17	Xnview	114
18	Opensuse	109
19	Fedoraproject	98
20	Canonical	90
21	Juniper	86
22	EMC	73
23	Graphicsmagick	72
24	Stdutility	68
25	Foxitsoftware	67
26	Trendmicro	66
27	Qemu	65
28	XEN	62
29	Libtiff	60
30	NTP	59
31	Artifex	59
32	Wireshark	58
33	Nvidia	58
34	Mcafee	57
35	Cybozu	56
36	Jasper Project	55
37	F5	52
38	Autotrace Project	51
39	SAP	50
40	Pivotal Software	48
41	Ffmpeg	47
42	Wordpress	46
43	Samsung	46
44	Moxa	45
45	Vmware	45
46	Opensuse Project	44
47	PHP	44
48	D-link	42
49	Suse	42
50	Fortinet	40

CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.