Vulnerability Assigners

Scorecard

Publications per year CVE records published each year, by assigner. The 8 most active assigners of the last three years are shown individually; 2026 is still in progress (394 assigners have published so far, against 367 in 2025). Click a year to list its assigners.

Name	Occurrences	2017–2026
mitre	116764
github_m	21705
patchstack	19011
linux	18137
vuldb	17586
microsoft	16864
redhat	13100
oracle	12512
wordfence	11785
vulncheck	9906
ibm	9078
apple	8048
adobe	8028
chrome	7189
cisco	6797
wpscan	6053
google_android	5344
icscert	4011
qualcomm	3696
certcc	3504
intel	3474
zdi	3445
jpcert	3324
apache	3024
mozilla	2968
dell	2597
talos	2561
huawei	2340
siemens	1907
hackerone	1799
hpe	1765
sap	1687
@huntrdev	1606
jenkins	1592
gitlab	1486
nvidia	1246
juniper	1185
incibe	1182
fortinet	1058
mediatek	1050
hp	1003
vmware	1000
twcert	949
snyk	884
f5	878
tr-cert	866
@huntr_ai	847
debian	800
samsung mobile	765
schneider	746
certvde	740
unisoc	659
lenovo	658
samsungmobile	655
qnap	650
hcl	640
amd	620
tenable	592
canonical	582
cert-pl	554
joomla	535
microfocus	515
flexera	510
mattermost	509
trendmicro	506
drupal	479
palo_alto	459
jetbrains	456
fluid attacks	424
google_devices	422
atlassian	413
elastic	407
trellix	394
cpansec	385
eclipse	380
symantec	378
autodesk	360
rapid7	345
eef	344
zephyr	338
fedora	335
synology	326
mongodb	323
progresssoftware	306
suse	305
nozomi	303
google	294
abb	286
freebsd	277
incd	275
cisa-cg	270
go	262
rockwell	253
wikimedia-foundation	245
circl	244
brocade	244
zoom	237
zte	229
ncsc.ch	218
amzn	216
ivanti	213
sonicwall	212
liferay	211
turansec	210
tplink	210
krcert	208
solarwinds	207
mend	196
acronis	191
openssl	190
sick ag	189
devolutions	189
tibco	180
jfrog	180
openharmony	177
netapp	177
opentext	175
gitea	175
xen	174
esri	174
dwf	174
isc	172
ox	171
facebook	168
zyxel	167
kaspersky	163
pivotal	160
arista	160
cert-in	152
bitdefender	149
openjs	147
eaton	145
mitsubishi	144
github_p	139
concretecms	138
bosch	134
silabs	133
postgresql	132
hashicorp	129
sec-vlab	128
govtech csg	124
checkpoint	123
wolfssl	120
hitachi energy	120
jci	117
watchguard	116
kubernetes	114
3ds	113
divd	112
splunk	110
wso2	109
grafana	107
samsung.tv_appliance	106
php	106
ni	101
checkmk	101
zabbix	98
foxit	96
axis	96
zohocorp	95
otrs	91
curl	90
asrg	89
typo3	88
imaginationtech	87
tanium	86
larry_cashdollar	86
nlnet labs	85
hitachi	85
bcorg	85
gv	84
psf	83
gallagher	81
enisa	80
ca	80
asus	80
moxa	79
octopus	76
csa	76
securin	74
citrix	74
cloudflare	73
deltaww	72
blackberry	71
avaya	70
openvpn	69
sgi	68
openeuler	67
nec	67
tml	64
honeywell	63
hiddenlayer	63
forcepoint	63
arm	63
absolute	63
docker	61
cyberdanube	61
sophos	60
sel	60
m-files corporation	60
swi	59
document fdn.	58
zscaler	57
manageengine	57
dahua	57
ami	57
xiaomi	56
teradici	56
puppet	56
pandorafms	56
netgear	55
hitvan	55
googlecloud	55
ping identity	53
honor	52
gridware	52
perforce	51
zuso art	49
wdc psirt	49
sonatype	49
canon	49
acer	49
pega	48
hikvision	48
airbus	48
aha	48
palantir	47
tv	46
snps	46
f-secureus	46
secomea	45
salesforce	45
fortra	45
eset	45
mautic	44
toshiba	43
runzero	43
okta	42
secur0	41
rti	40
ncsc-nl	40
naver	40
yandex	39
azure-access	39
dsf	38
asustor1	38
xi	37
herodevs	37
rami.io	36
eric	36
ubiquiti	35
star_labs	35
centreon	35
vaadin	34
odoo	34
glibc	34
securifera	32
nlok	32
mandiant	32
sn	31
nokia	31
lge	31
yokogawagroup	29
alias	29
tianocore	28
papercut	28
ncsc-fi	28
gandc	28
vulsec	27
oppo	27
vivo	25
tribe29	25
microchip	25
cspcert	25
commvault	25
baidu	25
netflix	24
insyde	24
hillstone	24
dragos	24
carrier	24
bt	24
opennms	23
meta	23
anolis	23
temporal	22
tecnomobile	22
proofpoint	22
bd	22
asr	22
xerox	21
netskope	21
lexmark	21
altium	21
snowflake	20
purestorage	20
onekey	20
netscaler	20
hypr	20
harborist	20
hanwha_vision	20
blsops	20
altera	20
yugabyte	19
tha-psirt	19
korelogic	19
gen	19
crafter	19
redhat-cnalr	18
nodejs	18
n-able	18
kong	18
knime	18
baxter	18
tqtc	17
tcpdump	17
sba-research	17
ly-corporation	17
fsi	17
hw	16
floragunn	16
checkmarx	16
blackduck	16
upkeeper	15
sra	15
sailpoint	15
s21sec	15
marklogic	15
supermicro	14
prjblk	14
pentraze	14
obdev	14
connectwise	14
arcinfo	14
tcs-cert	13
qt	13
neo4j	13
genetec	13
fidelis	13
edb	13
cirosec	13
appcheck	13
solidigm	12
snow	12
medtronic	12
hdfg	12
directcyber	12
chromeos	12
cato	12
canva	12
vdoo	11
mhv	11
delinea	11
csw	11
bugcrowd	11
armis	11
tigera	10
swift	10
qualys	10
panasonic_holdings_corporation	10
omnissa	10
line	10
libreswan	10
artica	10
toreon	9
softing	9
payara	9
illumos	9
gehc	9
forgerock	9
dotcms	9
bizerba	9
bcny	9
axxonsoft	9
windriver	8
wibu	8
silver peak	8
seal	8
plextrac	8
phoenix	8
hackrtu	8
hackrate	8
extremenetworks	8
crestron	8
1e	8
zowe	7
wiz	7
tro	7
thinkstappliedresearch	7
synaptics	7
logitech	7
idemia	7
tlt_net	6
softiron	6
sk-cert	6
shopbeat	6
seagate	6
opera	6
omron	6
oai	6
ge_vernova	6
duo	6
canon_emea	6
360st	6
strongdm	5
ptc	5
postiz	5
panasonic corporation	5
opengauss	5
oda	5
mirantis	5
milestone	5
joshbressers	5
fermax	5
digi	5
dfinity	5
cyberark	5
crowdstrike	5
cribl	5
ciena	5
caliptra	5
baicells	5
anthropic	5
alibaba	5
algosec	5
2n	5
txone	4
schutzwerk	4
nx	4
linqi	4
fsoft	4
danfoss	4
b.braun	4
yeswehack	3
watchdog	3
systemd	3
saviynt	3
rust	3
roche	3
radiometer	3
philips	3
omicron	3
jaspersoft	3
jamf	3
halborn	3
ge gp	3
forescout	3
everpure	3
coolkit	3
clickhouse	3
chainguard	3
9front	3
42gears	3
velneo	2
replicated	2
profelis	2
openbmc	2
nutanix	2
netmotion	2
mon-csirt	2
mim	2
huntress	2
fti	2
elan	2
ea	2
cybellum	2
codra	2
bombadilsystems	2
atis	2
vestel	1
spotfire	1
spartans-security	1
sirius	1
semtech	1
ribose	1
proton	1
profisee	1
opencloudos	1
openam-jp	1
ocd	1
ob	1
nintendo	1
krakend	1
iqsight	1
intigriti	1
infoblox	1
imanage	1
illumio	1
ict	1
hsi	1
greenrocketsecurity	1
flock	1
fb	1
edgewatch	1
echo	1
dremio	1
deepsurface	1
bull	1
becls	1

Assigners without a published record (100) CNAs of the CVE Program partner catalogue under whose name no published CVE record is held here. A CNA whose records are all reserved or rejected is listed too. Each name opens the partner's page on cve.org; the root it operates under follows it.

ADI icscert
Airlock mitre
Airoha mitre
AISLE ENISA
Almaviva mitre
Ampere mitre
Antenna mitre
ARCON mitre
Arteche INCIBE
Arxscan mitre
Automox mitre
BAE icscert
BECDX icscert
BHV icscert
ByteDance mitre
Censys mitre
CEP icscert
Circutor INCIBE
CISA CISA
CSAI mitre
CTOne icscert
cygence mitre
Cynet mitre
Cytiva icscert
Dassault_Systemes mitre
DevCycle mitre
DHIS2 mitre
DTEX mitre
DualVS mitre
eclypsium icscert
Entrust icscert
esaqa ENISA
FULL mitre
GE_Healthcare icscert
gnutls redhat
graphql-java redhat
Grayback INCIBE
gvision-it ENISA
Hallo_Welt ENISA
HDS ENISA
HemoCue icscert
Hitachi_Vantara mitre
Hologic icscert
HONA icscert
IDBS icscert
IDT-DNA icscert
IoT83 mitre
JupiterOne icscert
KCFTech mitre
KeeperSecurity mitre
LeicaBiosystems icscert
Leonardo icscert
LMS icscert
MolDev icscert
MyMMT icscert
NCSC ENISA
NetRise icscert
NIBEGroup icscert
OnLogic mitre
OS-S mitre
Pall icscert
PangeaCyber mitre
PingCAP mitre
Pointsharp ENISA
QCI mitre
RealPage mitre
RES icscert
rt-labs ENISA
S4M ENISA
SafeSource ENISA
Scality ENISA
SCIEX icscert
SDC mitre
sec1 mitre
securepoint mitre
senhasegura mitre
Simplinx icscert
SmileDigitalHealth mitre
SOCRadar icscert
Stackable mitre
Stryker icscert
Syncro mitre
Synopsys mitre
Tacit ENISA
TCL_Smart_Terminal mitre
Tego_Cyber mitre
TMUS icscert
tuxcare mitre
Uniview mitre
Vantive icscert
Verizon icscert
VulNow ENISA
vx icscert
Westell icscert
WrenSecurity mitre
XONA icscert
Xylem icscert
Ygreky ENISA
Zenitel ENISA
ZGR INCIBE