Top 50 Vendors By Total Number Of "Distinct" Vulnerabilities in 2018

Go to year: 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 2022 2023 All Time Leaders

	Vendor Name	Number of Vulnerabilities
1	Debian	1416
2	Redhat	912
3	Canonical	878
4	Oracle	813
5	Google	788
6	IBM	594
7	Microsoft	584
8	Cisco	358
9	Mozilla	315
10	HP	270
11	Apple	191
12	Netapp	181
13	Linux	181
14	Apache	173
15	Jenkins	161
16	Opensuse	131
17	SAP	127
18	Foxitsoftware	121
19	Fedoraproject	97
20	F5	95
21	Adobe	92
22	Quest	88
23	GNU	85
24	Wireshark	79
25	Intel	79
26	Atlassian	75
27	Schneider-electric	72
28	Imagemagick	71
29	Dell	59
30	Vmware	57
31	Zohocorp	56
32	Trendmicro	53
33	Artifex	50
34	Juniper	50
35	Gitlab	48
36	Broadcom	45
37	Pivotal Software	45
38	Libming	42
39	Mariadb	42
40	Microfocus	39
41	Exiv2	38
42	Qemu	38
43	Mcafee	37
44	Advantech	36
45	Synology	36
46	Netiq	36
47	Cmsmadesimple	36
48	Hdfgroup	35
49	Suse	34
50	Radare	31

CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.