Vendor directory · Page 2
SAP_SE
63 published CVE debriefs, 8 critical or known-exploited
Gitea
63 published CVE debriefs, 12 critical or known-exploited
Mattermost
61 published CVE debriefs, 0 critical or known-exploited
Netty
61 published CVE debriefs, 1 critical or known-exploited
discourse
59 published CVE debriefs, 1 critical or known-exploited
zephyrproject
57 published CVE debriefs, 0 critical or known-exploited
ThemeRex
57 published CVE debriefs, 7 critical or known-exploited
TP-Link Systems Inc.
57 published CVE debriefs, 1 critical or known-exploited
Samsung
56 published CVE debriefs, 17 critical or known-exploited
Budibase
56 published CVE debriefs, 10 critical or known-exploited
Vmware
56 published CVE debriefs, 30 critical or known-exploited
MervinPraison
55 published CVE debriefs, 15 critical or known-exploited
Splunk
55 published CVE debriefs, 1 critical or known-exploited
Fortinet
54 published CVE debriefs, 32 critical or known-exploited
Totolink
53 published CVE debriefs, 10 critical or known-exploited
FlowiseAI
53 published CVE debriefs, 19 critical or known-exploited
Samsung Mobile
53 published CVE debriefs, 0 critical or known-exploited
Nodejs
53 published CVE debriefs, 3 critical or known-exploited
Redhat
51 published CVE debriefs, 7 critical or known-exploited
surrealdb
49 published CVE debriefs, 2 critical or known-exploited
GNU
48 published CVE debriefs, 6 critical or known-exploited
mybb
48 published CVE debriefs, 8 critical or known-exploited
Frappe
47 published CVE debriefs, 3 critical or known-exploited
Debian
47 published CVE debriefs, 2 critical or known-exploited
Ivanti
47 published CVE debriefs, 41 critical or known-exploited
Dokploy
47 published CVE debriefs, 31 critical or known-exploited
Delta Electronics
46 published CVE debriefs, 7 critical or known-exploited
ash-project
45 published CVE debriefs, 1 critical or known-exploited
GitLab
45 published CVE debriefs, 6 critical or known-exploited
Canonical
45 published CVE debriefs, 11 critical or known-exploited
HCLSoftware
45 published CVE debriefs, 0 critical or known-exploited
Capgo
45 published CVE debriefs, 1 critical or known-exploited
Erlang
44 published CVE debriefs, 2 critical or known-exploited
AutomationDirect
44 published CVE debriefs, 8 critical or known-exploited
WordPress
43 published CVE debriefs, 6 critical or known-exploited
Eclipse Foundation
43 published CVE debriefs, 8 critical or known-exploited
Linux kernel
43 published CVE debriefs, 3 critical or known-exploited
Devolutions
43 published CVE debriefs, 1 critical or known-exploited
Open ISES
42 published CVE debriefs, 2 critical or known-exploited
Qualcomm, Inc.
40 published CVE debriefs, 2 critical or known-exploited
Lenovo
40 published CVE debriefs, 2 critical or known-exploited
Joomla! Project
39 published CVE debriefs, 1 critical or known-exploited
Roundcube
39 published CVE debriefs, 11 critical or known-exploited
Citrix
38 published CVE debriefs, 25 critical or known-exploited
NLnet Labs
37 published CVE debriefs, 1 critical or known-exploited
git
37 published CVE debriefs, 6 critical or known-exploited
Tcpdump
37 published CVE debriefs, 37 critical or known-exploited
free5gc
36 published CVE debriefs, 6 critical or known-exploited
Methodology and editorial approach
PatchSiren debriefs organize stored public vulnerability evidence for defensive review. Source-specific dates and claims should remain tied to their source, unresolved conflicts should remain visible, and readers should verify remediation against the linked primary advisory before changing production systems.