Vulnerability Assigners

Scorecard

Publications per year CVE records published each year, by assigner. The 8 most active assigners of the last three years are shown individually; 2026 is still in progress (416 assigners have published so far, against 367 in 2025). Click a year to list its assigners.

Name	Occurrences	2017–2026
mitre	116911
github_m	22768
patchstack	19564
linux	18559
vuldb	18039
microsoft	17985
redhat	13283
oracle	12513
wordfence	12177
vulncheck	11426
ibm	9433
apple	8386
adobe	8153
chrome	7570
cisco	6802
wpscan	6475
google_android	5483
icscert	4029
qualcomm	3696
intel	3577
certcc	3540
zdi	3515
jpcert	3352
apache	3276
mozilla	3253
dell	2706
talos	2572
huawei	2357
siemens	1914
hpe	1901
hackerone	1854
sap	1729
jenkins	1607
@huntrdev	1606
gitlab	1517
nvidia	1262
incibe	1227
juniper	1203
fortinet	1158
mediatek	1106
vmware	1006
hp	1004
twcert	952
tr-cert	900
snyk	884
f5	878
@huntr_ai	847
debian	800
samsung mobile	765
certvde	765
schneider	747
hcl	675
lenovo	668
amd	663
unisoc	662
samsungmobile	656
qnap	652
cert-pl	603
tenable	593
canonical	587
drupal	585
google_devices	580
joomla	573
jetbrains	548
mattermost	516
microfocus	515
flexera	512
trendmicro	506
cpansec	475
palo_alto	468
fluid attacks	431
elastic	426
eclipse	424
atlassian	413
eef	401
trellix	397
zephyr	390
mongodb	389
symantec	379
progresssoftware	372
autodesk	365
rapid7	364
synology	353
fedora	341
suse	328
nozomi	305
google	297
abb	287
cisa-cg	282
freebsd	277
go	276
incd	275
circl	255
amzn	255
rockwell	253
wikimedia-foundation	245
brocade	244
zoom	239
ncsc.ch	231
zte	230
ivanti	227
postgresql	222
sonicwall	221
tplink	219
turansec	211
liferay	211
solarwinds	210
krcert	208
devolutions	204
acronis	202
mend	196
openssl	195
gitea	195
sick ag	189
arista	187
jfrog	184
opentext	183
tibco	182
netapp	180
esri	180
openjs	179
openharmony	177
xen	176
dwf	174
isc	172
ox	171
zyxel	169
facebook	168
kaspersky	165
pivotal	160
cert-in	159
bitdefender	154
eaton	148
mitsubishi	144
silabs	142
github_p	142
hashicorp	141
watchguard	139
concretecms	138
tanium	136
bosch	134
sec-vlab	131
wso2	129
grafana	128
checkpoint	126
jci	125
govtech csg	124
hitachi energy	123
zohocorp	122
hitachi	121
wolfssl	120
enisa	119
kubernetes	117
divd	116
3ds	113
axis	112
splunk	110
samsung.tv_appliance	109
checkmk	108
php	106
foxit	102
ni	101
zabbix	98
imaginationtech	98
typo3	95
nlnet labs	95
psf	93
asus	92
otrs	91
gv	91
curl	90
asrg	89
octopus	87
larry_cashdollar	86
bcorg	85
moxa	83
gallagher	81
ca	80
blackberry	80
csa	79
docker	75
securin	74
cloudflare	74
citrix	74
deltaww	73
openeuler	71
openvpn	70
nec	70
avaya	70
sgi	68
absolute	68
arm	66
tml	64
honeywell	63
hiddenlayer	63
forcepoint	63
sophos	61
cyberdanube	61
ami	61
sel	60
m-files corporation	60
googlecloud	60
swi	59
document fdn.	59
dahua	58
zscaler	57
netgear	57
manageengine	57
xiaomi	56
teradici	56
sonatype	56
puppet	56
pandorafms	56
tv	55
hitvan	55
ping identity	53
perforce	53
mautic	53
honor	52
gridware	52
zuso art	49
wdc psirt	49
canon	49
airbus	49
acer	49
pega	48
okta	48
hikvision	48
aha	48
secur0	47
palantir	47
eset	47
snps	46
f-secureus	46
secomea	45
salesforce	45
runzero	45
fortra	45
dsf	44
toshiba	43
ubiquiti	42
naver	42
herodevs	42
rti	40
ncsc-nl	40
yandex	39
eric	39
azure-access	39
mandiant	38
glibc	38
centreon	38
asustor1	38
xi	37
vaadin	37
rami.io	36
star_labs	35
samsungsemiconductor	35
checkmarx	35
sn	34
odoo	34
netscaler	34
securifera	32
qt	32
nlok	32
tianocore	31
nokia	31
lge	31
meta	30
yokogawagroup	29
harborist	29
gandc	29
alias	29
papercut	28
ncsc-fi	28
microchip	28
kong	28
vulsec	27
oppo	27
vivo	26
n-able	26
knime	26
tribe29	25
opennms	25
ly-corporation	25
cspcert	25
commvault	25
baidu	25
tha-psirt	24
temporal	24
netflix	24
insyde	24
hillstone	24
gen	24
dragos	24
carrier	24
bt	24
supermicro	23
snowflake	23
anolis	23
tecnomobile	22
proofpoint	22
bd	22
asr	22
altium	22
xerox	21
netskope	21
lexmark	21
purestorage	20
onekey	20
hypr	20
hanwha_vision	20
blsops	20
altera	20
yugabyte	19
korelogic	19
crafter	19
redhat-cnalr	18
nodejs	18
hw	18
hdfg	18
baxter	18
tqtc	17
tcpdump	17
sba-research	17
fsi	17
floragunn	16
blackduck	16
upkeeper	15
sra	15
sailpoint	15
s21sec	15
neo4j	15
marklogic	15
delinea	15
connectwise	15
canva	15
prjblk	14
pentraze	14
obdev	14
edb	14
axxonsoft	14
arcinfo	14
tcs-cert	13
genetec	13
fidelis	13
cirosec	13
appcheck	13
solidigm	12
snow	12
medtronic	12
hackrate	12
directcyber	12
chromeos	12
cato	12
vdoo	11
rt-labs	11
payara	11
mhv	11
csw	11
bugcrowd	11
armis	11
tigera	10
swift	10
qualys	10
panasonic_holdings_corporation	10
omnissa	10
ncsc	10
mon-csirt	10
line	10
libreswan	10
bizerba	10
artica	10
toreon	9
softing	9
illumos	9
gehc	9
forgerock	9
extremenetworks	9
dotcms	9
canon_emea	9
bcny	9
windriver	8
wibu	8
silver peak	8
seal	8
postiz	8
plextrac	8
phoenix	8
hackrtu	8
crestron	8
1e	8
zowe	7
wiz	7
tro	7
tlt_net	7
thinkstappliedresearch	7
synaptics	7
softiron	7
opera	7
oai	7
logitech	7
idemia	7
sk-cert	6
shopbeat	6
seagate	6
ptc	6
omron	6
grayback	6
ge_vernova	6
duo	6
digi	6
chainguard	6
360st	6
strongdm	5
schutzwerk	5
pretix	5
panasonic corporation	5
opengauss	5
oda	5
mirantis	5
milestone	5
joshbressers	5
fermax	5
esaqa	5
dfinity	5
cyberark	5
crowdstrike	5
cribl	5
ciena	5
caliptra	5
baicells	5
anthropic	5
alibaba	5
algosec	5
2n	5
txone	4
nx	4
linqi	4
fsoft	4
forescout	4
flock	4
danfoss	4
clickhouse	4
bombadilsystems	4
b.braun	4
yeswehack	3
watchdog	3
systemd	3
saviynt	3
rust	3
roche	3
radiometer	3
philips	3
omicron	3
ocd	3
jaspersoft	3
jamf	3
illumio	3
halborn	3
ge gp	3
everpure	3
echo	3
coolkit	3
9front	3
42gears	3
velneo	2
replicated	2
profelis	2
posit	2
openbmc	2
openam-jp	2
nutanix	2
netmotion	2
netdef	2
mim	2
infoblox	2
huntress	2
fti	2
elan	2
ea	2
cybellum	2
codra	2
atis	2
wrensecurity	1
vestel	1
spotfire	1
spartans-security	1
sirius	1
semtech	1
securepoint	1
sdc	1
ribose	1
proton	1
profisee	1
opencloudos	1
ob	1
nintendo	1
krakend	1
iqsight	1
intigriti	1
imanage	1
ict	1
hsi	1
greenrocketsecurity	1
fb	1
edgewatch	1
dremio	1
deepsurface	1
bull	1
becls	1
akrites	1
airoha	1

Assigners without a published record (96) CNAs of the CVE Program partner catalogue under whose name no published CVE record is held here. A CNA whose records are all reserved or rejected is listed too. Each name opens the partner's page on cve.org; the root it operates under follows it.

ADI icscert
Airlock mitre
AISLE ENISA
Almaviva mitre
Ampere mitre
Antenna mitre
ARCON mitre
Arteche INCIBE
Arxscan mitre
Automox mitre
BAE icscert
BECDX icscert
BHV icscert
ByteDance mitre
Censys mitre
CEP icscert
Circutor INCIBE
CISA CISA
CSAI mitre
CTOne icscert
cygence mitre
Cynet mitre
Cytiva icscert
Dassault_Systemes mitre
DevCycle mitre
DHIS2 mitre
DTEX mitre
DualVS mitre
eclypsium icscert
Entrust icscert
FULL mitre
GE_Healthcare icscert
gnutls redhat
graphql-java redhat
gvision-it ENISA
Hallo_Welt ENISA
HDS ENISA
HemoCue icscert
Hitachi_Vantara mitre
Hologic icscert
HONA icscert
IDBS icscert
IDT-DNA icscert
IoT83 mitre
JupiterOne icscert
KCFTech mitre
KeeperSecurity mitre
LeicaBiosystems icscert
Leonardo icscert
Linaro redhat
LMS icscert
MolDev icscert
MyMMT icscert
NetRise icscert
NIBEGroup icscert
Nitro ENISA
OnLogic mitre
OS-S mitre
Paessler ENISA
Pall icscert
PangeaCyber mitre
Pentaho mitre
PingCAP mitre
Pointsharp ENISA
QCI mitre
RealPage mitre
RES icscert
S4M ENISA
SafeSource ENISA
Scality ENISA
SCIEX icscert
sec1 mitre
senhasegura mitre
Simplinx icscert
SmileDigitalHealth mitre
SOCRadar icscert
Stackable mitre
Stryker icscert
Syncro mitre
Synopsys mitre
Tacit ENISA
TCL_Smart_Terminal mitre
Tego_Cyber mitre
TMUS icscert
tuxcare mitre
Uniview mitre
Vantive icscert
Verizon icscert
VulNow ENISA
vx icscert
Westell icscert
XONA icscert
Xylem icscert
Ygreky ENISA
Zenitel ENISA
ZGR INCIBE