month report
April 2008
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
April 2008 closed with 459 published CVEs — -27.4% YoY . 88 criticals, oracle led volume, mostly via database server. Biggest breakout: oracle at ×3.5 their 12-month median. Top weakness class — CWE-89 (73 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
459
— MoM-27.4% YoY
Severity mix
88 / 125
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.9%
4 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
6521.6
n=4
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
—
n=0
Weakness × Vendor
What's spreading where in April 2008
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
89SQL Injection119Memory Buffer Bounds79XSS264CWE-26422Path Traversal94Code Injection20Improper Input Validation399CWE-399189CWE-189287Improper Authenticationoracleapple101112ibm83221microsoft4111513сообщество свободного программного обеспечения72112hp11131autonomy6clam anti-virus311prozilla421sun211ооо «русбитех-астра»412adobe1111
Most discussed CVEs — April 2008
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
- 3.5×oracle21 CVE
- 3.5×prozilla7 CVE
- 3.0×chilkat software3 CVE
- 3.0×e1073 CVE
- 3.0×openoffice3 CVE
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #12ооо «русбитех-астра»7 CVE
- #19acidcat4 CVE
- #20apache software foundation4 CVE
- #24blogator script3 CVE
- #26cezannesw3 CVE
- #27chilkat software3 CVE
- #28computer associates3 CVE
- #32emedia office gmbh3 CVE
- #33iscripts3 CVE
- #37myiosoft3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 21 CVE15 critCVSS 8.2×3.5database server (6) · database 9i (5) · application server (3)
- 19 CVE1 critCVSS 6.2PoC 1quicktime (12) · safari (6) · webkit (1)
- 19 CVE10 critCVSS 7.8PoC 4lotus notes (7) · soliddb (4) · db2 (3)
- 17 CVE11 critCVSS 8.5PoC 8windows xp (8) · windows vista (7) · windows 2000 (6)
- 14 CVE2 critCVSS 6.7PoC 3debian gnu/linux (14)
- 10 CVE2 critCVSS 6.6PoC 3openview network node manager (6) · 442084-b21 (1) · rx6600 (1)
- 9 CVE3 critCVSS 7.6PoC 1red hat enterprise linux (6) · directory server (2) · enterprise linux (1)
- 7 CVE7 critCVSS 9.3keyview (7)
- 7 CVE1 critCVSS 6.2clamav (7)
- 7 CVECVSS 7.0×3.5PoC 7cheats (1) · entertainers (1) · forum (1)
- 7 CVECVSS 6.0solaris (3) · sunos (1) · n1 grid engine (1)
- 7 CVE1 critCVSS 7.2NEWPoC 1astra linux common edition (4) · astra linux special edition (3)
- 6 CVE3 critCVSS 7.3PoC 1flash player (4) · flex (2) · air (2)
- 6 CVE4 critCVSS 8.0mail security (3) · norton 360 (2) · norton antivirus (2)
- 5 CVE3 critCVSS 8.3desktop management suite (2) · brightstor arcserve backup (2) · anti-virus for the enterprise (1)
- 5 CVE1 critCVSS 6.2PoC 1aptlinex (2) · debian linux (2) · tss (1)
- 5 CVECVSS 4.4ubercart module (2) · e-publish (1) · drupal (1)
- 5 CVECVSS 5.2PoC 1gentoo linux (5)
- 4 CVECVSS 6.7NEWPoC 4acidcat cms (4)
- 4 CVE1 critCVSS 7.4NEWopenoffice (4)
- 4 CVECVSS 6.2m4 (2) · sccs (1) · emacs (1)
- 4 CVE1 critCVSS 7.1PoC 3pixel motion blog (4)
- 4 CVECVSS 7.5Nuclei 4PoC 2download monitor plugin (1) · wordpress (1) · wp download (1)
- 3 CVECVSS 6.2NEWPoC 2blogator script (2) · blogator-script (1)
- 3 CVE2 critCVSS 8.7PoC 1ubuntu linux (2) · ubuntu (1)
- 3 CVECVSS 4.6NEWPoC 2cezanne (3)
- 3 CVE1 critCVSS 8.1NEW×3.0PoC 1chicomas (2) · chilkathttp activex (1)
- 3 CVE3 critCVSS 9.4NEWarcserve backup laptops and desktops (3) · desktop management suite (3) · unicenter software delivery (1)
- 3 CVECVSS 6.4PoC 3cpcommerce (3)
- 3 CVE1 critCVSS 7.3×3.0PoC 2e107 (2) · my gallery (1)
- 3 CVE3 critCVSS 9.3diskxtender (3)
- 3 CVECVSS 6.4NEWcuteflow (3)
- 3 CVECVSS 6.3NEWPoC 3socialware (3)
- 3 CVECVSS 6.4PoC 2kwsphp (3)
- 3 CVECVSS 5.1PoC 3minibb (3)
- 3 CVE1 critCVSS 7.4firefox (3) · seamonkey (1) · thunderbird (1)
- 3 CVECVSS 6.4NEWPoC 3easynews (3)
- 3 CVE1 critCVSS 7.6novell linux desktop (3) · suse linux (3)
- 3 CVE1 critCVSS 7.6×3.0openoffice.org (2) · openoffice (1)
- 3 CVE3 critCVSS 9.3opera (2) · opera browser (1)
- 3 CVE1 critCVSS 7.9NEWPoC 1python (3)
- 3 CVECVSS 7.3savas link manager (2) · savas guestbook (1)
- 3 CVE1 critCVSS 6.7NEWslmail pro (3)
- 3 CVECVSS 6.8PoC 1vlc (3)
- 3 CVECVSS 6.8NEWPoC 1vlc media player (3)
- 3 CVECVSS 7.5NEWPoC 1dating club (1) · online banking (1) · phphotresources (1)
- 2 CVE2 critCVSS 9.3docconverter (2)
- 2 CVECVSS 5.7asterisk business edition (2) · asterisk appliance developer kit (2) · open source (2)
- 2 CVECVSS 5.5NEWblackboard academic suite (1) · academic suite (1)
- 2 CVECVSS 6.8NEWblender (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 21 | 15 | · | · | ×3.5 | database server (6) · database 9i (5) · application server (3) | — | |
| 2 | apple | 19 | 1 | · | · | PoC 1 | quicktime (12) · safari (6) · webkit (1) | — | |
| 3 | ibm | 19 | 10 | · | · | PoC 4 | lotus notes (7) · soliddb (4) · db2 (3) | — | |
| 4 | microsoft | 17 | 11 | · | · | PoC 8 | windows xp (8) · windows vista (7) · windows 2000 (6) | — | |
| 5 | сообщество свободного программного обеспечения | 14 | 2 | · | · | PoC 3 | debian gnu/linux (14) | — | |
| 6 | hp | 10 | 2 | · | · | PoC 3 | openview network node manager (6) · 442084-b21 (1) · rx6600 (1) | — | |
| 7 | redhat | 9 | 3 | · | · | PoC 1 | red hat enterprise linux (6) · directory server (2) · enterprise linux (1) | — | |
| 8 | autonomy | 7 | 7 | · | · | keyview (7) | — | ||
| 9 | clam anti-virus | 7 | 1 | · | · | clamav (7) | — | ||
| 10 | prozilla | 7 | · | · | · | ×3.5PoC 7 | cheats (1) · entertainers (1) · forum (1) | — | |
| 11 | sun | 7 | · | · | · | solaris (3) · sunos (1) · n1 grid engine (1) | — | ||
| 12 | ооо «русбитех-астра» | 7 | 1 | · | · | NEWPoC 1 | astra linux common edition (4) · astra linux special edition (3) | — | |
| 13 | adobe | 6 | 3 | · | · | PoC 1 | flash player (4) · flex (2) · air (2) | — | |
| 14 | symantec | 6 | 4 | · | · | mail security (3) · norton 360 (2) · norton antivirus (2) | — | ||
| 15 | broadcom | 5 | 3 | · | · | desktop management suite (2) · brightstor arcserve backup (2) · anti-virus for the enterprise (1) | — | ||
| 16 | debian | 5 | 1 | · | · | PoC 1 | aptlinex (2) · debian linux (2) · tss (1) | — | |
| 17 | drupal | 5 | · | · | · | ubercart module (2) · e-publish (1) · drupal (1) | — | ||
| 18 | gentoo foundation inc. | 5 | · | · | · | PoC 1 | gentoo linux (5) | — | |
| 19 | acidcat | 4 | · | · | · | NEWPoC 4 | acidcat cms (4) | — | |
| 20 | apache software foundation | 4 | 1 | · | · | NEW | openoffice (4) | — | |
| 21 | gnu | 4 | · | · | · | m4 (2) · sccs (1) · emacs (1) | — | ||
| 22 | pixel motion | 4 | 1 | · | · | PoC 3 | pixel motion blog (4) | — | |
| 23 | wordpress | 4 | · | · | 4 | Nuclei 4PoC 2 | download monitor plugin (1) · wordpress (1) · wp download (1) | — | |
| 24 | blogator script | 3 | · | · | · | NEWPoC 2 | blogator script (2) · blogator-script (1) | — | |
| 25 | canonical | 3 | 2 | · | · | PoC 1 | ubuntu linux (2) · ubuntu (1) | — | |
| 26 | cezannesw | 3 | · | · | · | NEWPoC 2 | cezanne (3) | — | |
| 27 | chilkat software | 3 | 1 | · | · | NEW×3.0PoC 1 | chicomas (2) · chilkathttp activex (1) | — | |
| 28 | computer associates | 3 | 3 | · | · | NEW | arcserve backup laptops and desktops (3) · desktop management suite (3) · unicenter software delivery (1) | — | |
| 29 | cpcommerce | 3 | · | · | · | PoC 3 | cpcommerce (3) | — | |
| 30 | e107 | 3 | 1 | · | · | ×3.0PoC 2 | e107 (2) · my gallery (1) | — | |
| 31 | emc | 3 | 3 | · | · | diskxtender (3) | — | ||
| 32 | emedia office gmbh | 3 | · | · | · | NEW | cuteflow (3) | — | |
| 33 | iscripts | 3 | · | · | · | NEWPoC 3 | socialware (3) | — | |
| 34 | kwsphp | 3 | · | · | · | PoC 2 | kwsphp (3) | — | |
| 35 | minibb | 3 | · | · | · | PoC 3 | minibb (3) | — | |
| 36 | mozilla | 3 | 1 | · | · | firefox (3) · seamonkey (1) · thunderbird (1) | — | ||
| 37 | myiosoft | 3 | · | · | · | NEWPoC 3 | easynews (3) | — | |
| 38 | novell inc. | 3 | 1 | · | · | novell linux desktop (3) · suse linux (3) | — | ||
| 39 | openoffice | 3 | 1 | · | · | ×3.0 | openoffice.org (2) · openoffice (1) | — | |
| 40 | opera | 3 | 3 | · | · | opera (2) · opera browser (1) | — | ||
| 41 | python | 3 | 1 | · | · | NEWPoC 1 | python (3) | — | |
| 42 | savas place | 3 | · | · | · | savas link manager (2) · savas guestbook (1) | — | ||
| 43 | seattle lab software | 3 | 1 | · | · | NEW | slmail pro (3) | — | |
| 44 | videolan | 3 | · | · | · | PoC 1 | vlc (3) | — | |
| 45 | videolan organization | 3 | · | · | · | NEWPoC 1 | vlc media player (3) | — | |
| 46 | w2b | 3 | · | · | · | NEWPoC 1 | dating club (1) · online banking (1) · phphotresources (1) | — | |
| 47 | activepdf | 2 | 2 | · | · | docconverter (2) | — | ||
| 48 | asterisk | 2 | · | · | · | asterisk business edition (2) · asterisk appliance developer kit (2) · open source (2) | — | ||
| 49 | blackboard | 2 | · | · | · | NEW | blackboard academic suite (1) · academic suite (1) | — | |
| 50 | blender | 2 | · | · | · | NEW | blender (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins124 CVE6 crit85 vendorsCVSS 6.8acidcat cms (4) · openoffice (4) · kwsphp (3)
- Operating Systems64 CVE46 crit25 vendorsCVSS 8.5debian gnu/linux (14) · red hat enterprise linux (6) · gentoo linux (5)
- Enterprise Software60 CVE49 crit20 vendorsCVSS 9.0lotus notes (7) · openview network node manager (6) · soliddb (4)
- Consumer Software39 CVE18 crit24 vendorsCVSS 8.1flash player (4) · air (2) · blender (2)
- Security Products29 CVE14 crit15 vendorsCVSS 7.6clamav (7) · mail security (3) · mail security appliance (2)
- Databases25 CVE23 crit4 vendorsCVSS 8.3database server (6) · database 9i (5) · application server (3)
- OSS Libraries23 CVE5 crit15 vendorsCVSS 6.8python (3) · chicomas (2) · internationalization (2)
- Mobile Apps20 CVE1 crit2 vendorsCVSS 7.8quicktime (12) · safari (6) · cups (1)
- Communications20 CVE4 crit17 vendorsCVSS 7.5slmail pro (3) · ccmail (1) · dbmail (1)
- Cloud & SaaS9 CVE4 crit4 vendorsCVSS 7.8brightstor arcserve backup (2) · desktop management suite (2) · anti-virus for the enterprise (1)
- 6 crit8 vendorsCVSS 8.9aterm (1) · emergency responder (1) · mobility manager (1)
- Hardware Firmware2 CVE1 vendorsCVSS 6.8hd audio codec drivers (2)
- DevTools & CI2 CVE1 crit2 vendorsCVSS 8.4installshield (1) · sipp (1)
- Unclassified60 CVE1 crit43 vendorsCVSS 6.4pixel motion blog (4) · carbon communities (3) · cezanne (3)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 5 | 124 | 6 | · | 85 | 102 | 6.8 | acidcat cms (4) · openoffice (4) · kwsphp (3) |
| Operating Systems▸ 3 | 64 | 46 | · | 25 | 51 | 8.5 | debian gnu/linux (14) · red hat enterprise linux (6) · gentoo linux (5) |
| Enterprise Software▸ 5 | 60 | 49 | · | 20 | 52 | 9.0 | lotus notes (7) · openview network node manager (6) · soliddb (4) |
| Consumer Software▸ 5 | 39 | 18 | · | 24 | 35 | 8.1 | flash player (4) · air (2) · blender (2) |
| Security Products▸ 4 | 29 | 14 | · | 15 | 24 | 7.6 | clamav (7) · mail security (3) · mail security appliance (2) |
| Databases▸ 2 | 25 | 23 | · | 4 | 21 | 8.3 | database server (6) · database 9i (5) · application server (3) |
| OSS Libraries▸ 3 | 23 | 5 | · | 15 | 22 | 6.8 | python (3) · chicomas (2) · internationalization (2) |
| Mobile Apps▸ 2 | 20 | 1 | · | 2 | 5 | 7.8 | quicktime (12) · safari (6) · cups (1) |
| Communications▸ 4 | 20 | 4 | · | 17 | 22 | 7.5 | slmail pro (3) · ccmail (1) · dbmail (1) |
| Cloud & SaaS▸ 2 | 9 | 4 | · | 4 | 7 | 7.8 | brightstor arcserve backup (2) · desktop management suite (2) · anti-virus for the enterprise (1) |
| Networking Infrastructure▸ 5 | 9 | 6 | · | 8 | 12 | 8.9 | aterm (1) · emergency responder (1) · mobility manager (1) |
| Hardware Firmware▸ 1 | 2 | · | · | 1 | 1 | 6.8 | hd audio codec drivers (2) |
| DevTools & CI▸ 1 | 2 | 1 | · | 2 | 2 | 8.4 | installshield (1) · sipp (1) |
| Unclassified | 60 | 1 | · | 43 | 49 | 6.4 | pixel motion blog (4) · carbon communities (3) · cezanne (3) |
Weakness × Sector
Which weaknesses hit which solution categories in April 2008
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
89SQL Injection119Memory Buffer Bounds79XSS264CWE-26422Path Traversal94Code Injection20Improper Input Validation399CWE-399189CWE-189287Improper AuthenticationWeb & CMS Plugins542376161144Operating Systems2211215444Consumer Software31435234951Enterprise Software81154231331OSS Libraries1453213231Databases63121Security Products812132Communications1511453Networking Infrastructure3213211Cloud & SaaS12211