month report
October 2010
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
October 2010 closed with 435 published CVEs. 125 criticals, oracle led volume, mostly via peoplesoft and jdedwards product suite. Top weakness class — CWE-20 (45 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
435
— MoM— YoY
Severity mix
125 / 38
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.2%
1 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
5618.2
n=1
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
5458
n=1
Detection gap
KEV pressure, no Nuclei coverage
October 2010 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1mozilla13 CVE
Weakness × Vendor
What's spreading where in October 2010
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
20Improper Input Validation119Memory Buffer Bounds264CWE-26494Code Injection79XSS399CWE-399200Information Exposure22Path Traversal362Race Condition310CWE-310oracle1microsoft134414125adobe82012ibm234317sunhp7pypi23124g.rodola23123google5mozilla31112opera31211сообщество свободного программного обеспечения21212
Most discussed CVEs — October 2010
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #8g.rodola14 CVE
- #15realnetworks7 CVE
- #16opensuse6 CVE
- #19cmsmadesimple4 CVE
- #22infradead4 CVE
- #24xelerance4 CVE
- #25apereo3 CVE
- #27rim3 CVE
- #30dustincowell2 CVE
- #31fenrir2 CVE
Top vendors
Ranked by distinct CVE count this period.
- 79 CVE5 critCVSS 4.9peoplesoft and jdedwards product suite (21) · opensolaris (12) · solaris (11)
- 48 CVE30 critCVSS 8.3PoC 3office (15) · excel (13) · word (11)
- 37 CVE33 critCVSS 8.7PoC 2acrobat reader (22) · acrobat (22) · shockwave player (11)
- 29 CVE8 critCVSS 6.4PoC 3db2 (9) · tivoli storage manager fastback (8) · informix dynamic server (3)
- 27 CVE18 critCVSS 8.6jdk (27) · jre (27) · sdk (16)
- 23 CVE2 critCVSS 6.8systems insight manager (4) · insight control virtual machine management (3) · insight control server migration (3)
- 15 CVECVSS 5.2PoC 1pyftpdlib (14) · zodb3 (1)
- 14 CVECVSS 5.2NEWPoC 1pyftpdlib (14)
- 13 CVE6 critCVSS 8.2PoC 2chrome (13)
- 13 CVE7 critCVSS 7.9KEV 1PoC 1firefox (13) · seamonkey (12) · thunderbird (12)
- 9 CVECVSS 5.7PoC 2debian gnu/linux (9)
- 8 CVE1 critCVSS 4.9opera browser (8)
- 8 CVECVSS 5.4enterprise mrg (4) · red hat enterprise linux (4)
- 7 CVE1 critCVSS 5.5Nuclei 1PoC 1qpid (3) · apr-util (1) · axis2 (1)
- 7 CVE7 critCVSS 9.4NEWPoC 1realplayer (7) · realplayer sp (7)
- 6 CVE1 critCVSS 7.5NEWPoC 3opensuse (6)
- 6 CVE2 critCVSS 6.2Nuclei 1PoC 5businessobjects (6)
- 5 CVECVSS 5.5PoC 1typo3 (5)
- 4 CVECVSS 6.3NEWcms made simple (4)
- 4 CVECVSS 6.5PoC 3debian linux (3) · mono-debugger (1)
- 4 CVECVSS 4.6dovecot (4)
- 4 CVECVSS 5.3NEWopenconnect (4)
- 4 CVECVSS 5.8PoC 1linux kernel (4)
- 4 CVECVSS 6.5NEWopenswan (4)
- 3 CVECVSS 4.7NEWphpcas (3)
- 3 CVE1 critCVSS 8.4anyconnect ssl vpn (1) · ciscoworks common services (1) · ciscoworks lan management solution (1)
- 3 CVECVSS 6.7NEWblackberry desktop software (1) · blackberry device software (1) · blackberry enterprise server (1)
- 2 CVECVSS 6.5mail (1) · safari (1)
- 2 CVECVSS 5.7PoC 1ubuntu linux (2)
- 2 CVECVSS 7.5NEWPoC 1free simple cms (2)
- 2 CVECVSS 6.9NEWgrani (2) · sleipnir (2)
- 2 CVECVSS 4.3NEWfreeradius (2)
- 2 CVECVSS 5.8gentoo linux (2)
- 2 CVECVSS 4.7bind (2)
- 2 CVECVSS 3.9joomla\! (2)
- 2 CVECVSS 6.9NEWlhaplus (2)
- 2 CVECVSS 3.9NEWmantisbt (2)
- 2 CVECVSS 5.0NEWorg.acegisecurity:acegi-security (1) · org.apache.myfaces.core:myfaces-impl (1) · org.apache.myfaces.shared:myfaces-shared-core (1)
- 2 CVECVSS 5.7PoC 1suse linux enterprise (2)
- 2 CVECVSS 5.7PoC 1typo3/cms (1) · typo3/cms-backend (1)
- 2 CVECVSS 6.9NEWarchive decoder (1) · explzh (1)
- 2 CVECVSS 4.7NEWpython (2)
- 2 CVE1 critCVSS 7.5NEWmodule activex control (1) · module activex controls (1)
- 2 CVECVSS 5.7NEWPoC 1linux enterprise desktop (2) · linux enterprise real time extension (2) · linux enterprise server (2)
- 1 CVECVSS 5.0NEWacegi-security (1)
- 1 CVECVSS 6.9NEWtangerine (1)
- 1 CVECVSS 6.0NEWpl\/php (1)
- 1 CVECVSS 6.9NEWardour (1)
- 1 CVECVSS 4.3NEWafpl ghostscript (1) · ghostscript fonts (1) · gpl ghostscript (1)
- 1 CVECVSS 4.3NEWaardvark topsites php (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 79 | 5 | · | · | peoplesoft and jdedwards product suite (21) · opensolaris (12) · solaris (11) | — | ||
| 2 | microsoft | 48 | 30 | · | · | PoC 3 | office (15) · excel (13) · word (11) | — | |
| 3 | adobe | 37 | 33 | · | · | PoC 2 | acrobat reader (22) · acrobat (22) · shockwave player (11) | — | |
| 4 | ibm | 29 | 8 | · | · | PoC 3 | db2 (9) · tivoli storage manager fastback (8) · informix dynamic server (3) | — | |
| 5 | sun | 27 | 18 | · | · | jdk (27) · jre (27) · sdk (16) | — | ||
| 6 | hp | 23 | 2 | · | · | systems insight manager (4) · insight control virtual machine management (3) · insight control server migration (3) | — | ||
| 7 | pypi | 15 | · | · | · | PoC 1 | pyftpdlib (14) · zodb3 (1) | — | |
| 8 | g.rodola | 14 | · | · | · | NEWPoC 1 | pyftpdlib (14) | — | |
| 9 | 13 | 6 | · | · | PoC 2 | chrome (13) | — | ||
| 10 | mozilla | 13 | 7 | 1 | · | KEV 1PoC 1 | firefox (13) · seamonkey (12) · thunderbird (12) | — | |
| 11 | сообщество свободного программного обеспечения | 9 | · | · | · | PoC 2 | debian gnu/linux (9) | — | |
| 12 | opera | 8 | 1 | · | · | opera browser (8) | — | ||
| 13 | redhat | 8 | · | · | · | enterprise mrg (4) · red hat enterprise linux (4) | — | ||
| 14 | apache | 7 | 1 | · | 1 | Nuclei 1PoC 1 | qpid (3) · apr-util (1) · axis2 (1) | — | |
| 15 | realnetworks | 7 | 7 | · | · | NEWPoC 1 | realplayer (7) · realplayer sp (7) | — | |
| 16 | opensuse | 6 | 1 | · | · | NEWPoC 3 | opensuse (6) | — | |
| 17 | sap | 6 | 2 | · | 1 | Nuclei 1PoC 5 | businessobjects (6) | — | |
| 18 | typo3 | 5 | · | · | · | PoC 1 | typo3 (5) | — | |
| 19 | cmsmadesimple | 4 | · | · | · | NEW | cms made simple (4) | — | |
| 20 | debian | 4 | · | · | · | PoC 3 | debian linux (3) · mono-debugger (1) | — | |
| 21 | dovecot | 4 | · | · | · | dovecot (4) | — | ||
| 22 | infradead | 4 | · | · | · | NEW | openconnect (4) | — | |
| 23 | linux | 4 | · | · | · | PoC 1 | linux kernel (4) | — | |
| 24 | xelerance | 4 | · | · | · | NEW | openswan (4) | — | |
| 25 | apereo | 3 | · | · | · | NEW | phpcas (3) | — | |
| 26 | cisco | 3 | 1 | · | · | anyconnect ssl vpn (1) · ciscoworks common services (1) · ciscoworks lan management solution (1) | — | ||
| 27 | rim | 3 | · | · | · | NEW | blackberry desktop software (1) · blackberry device software (1) · blackberry enterprise server (1) | — | |
| 28 | apple | 2 | · | · | · | mail (1) · safari (1) | — | ||
| 29 | canonical | 2 | · | · | · | PoC 1 | ubuntu linux (2) | — | |
| 30 | dustincowell | 2 | · | · | · | NEWPoC 1 | free simple cms (2) | — | |
| 31 | fenrir | 2 | · | · | · | NEW | grani (2) · sleipnir (2) | — | |
| 32 | freeradius | 2 | · | · | · | NEW | freeradius (2) | — | |
| 33 | gentoo foundation inc. | 2 | · | · | · | gentoo linux (2) | — | ||
| 34 | isc | 2 | · | · | · | bind (2) | — | ||
| 35 | joomla | 2 | · | · | · | joomla\! (2) | — | ||
| 36 | lhaplus | 2 | · | · | · | NEW | lhaplus (2) | — | |
| 37 | mantisbt | 2 | · | · | · | NEW | mantisbt (2) | — | |
| 38 | maven | 2 | · | · | · | NEW | org.acegisecurity:acegi-security (1) · org.apache.myfaces.core:myfaces-impl (1) · org.apache.myfaces.shared:myfaces-shared-core (1) | — | |
| 39 | novell inc. | 2 | · | · | · | PoC 1 | suse linux enterprise (2) | — | |
| 40 | packagist | 2 | · | · | · | PoC 1 | typo3/cms (1) · typo3/cms-backend (1) | — | |
| 41 | ponsoftware | 2 | · | · | · | NEW | archive decoder (1) · explzh (1) | — | |
| 42 | python | 2 | · | · | · | NEW | python (2) | — | |
| 43 | realpage | 2 | 1 | · | · | NEW | module activex control (1) · module activex controls (1) | — | |
| 44 | suse | 2 | · | · | · | NEWPoC 1 | linux enterprise desktop (2) · linux enterprise real time extension (2) · linux enterprise server (2) | — | |
| 45 | acegisecurity | 1 | · | · | · | NEW | acegi-security (1) | — | |
| 46 | alex launi | 1 | · | · | · | NEW | tangerine (1) | — | |
| 47 | alvaro herrera | 1 | · | · | · | NEW | pl\/php (1) | — | |
| 48 | ardour | 1 | · | · | · | NEW | ardour (1) | — | |
| 49 | artifex | 1 | · | · | · | NEW | afpl ghostscript (1) · ghostscript fonts (1) · gpl ghostscript (1) | — | |
| 50 | avatic | 1 | · | · | · | NEW | aardvark topsites php (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems106 CVE113 crit17 vendorsCVSS 9.3office (15) · excel (13) · word (11)
- Databases80 CVE5 crit2 vendorsCVSS 5.0peoplesoft and jdedwards product suite (21) · opensolaris (12) · solaris (11)
- Consumer Software80 CVE95 crit3 KEV18 vendorsCVSS 9.1acrobat (22) · acrobat reader (22) · shockwave player (11)
- Enterprise Software64 CVE17 crit6 vendorsCVSS 10.0db2 (9) · tivoli storage manager fastback (8) · systems insight manager (4)
- OSS Libraries44 CVE14 vendorsCVSS 6.4pyftpdlib (14) · python (2) · afpl ghostscript (1)
- Web & CMS Plugins22 CVE1 crit8 vendorsCVSS 6.9typo3 (5) · cms made simple (4) · qpid (3)
- 7 crit8 vendorsCVSS 8.4openconnect (4) · openswan (4) · vpn client (1)
- Mobile Apps15 CVE6 crit2 vendorsCVSS 8.2chrome (13)
- Cloud & SaaS6 CVE4 vendorsCVSS 5.6phpcas (3) · dropbox (1) · last.fm (1)
- Communications6 CVE3 vendorsCVSS 6.9dovecot (4)
- Security Products5 CVE4 vendorsCVSS 7.5freeradius (2) · acegi-security (1) · authentication client (1)
- DevTools & CI2 CVE2 vendorsCVSS 6.9ust (1)
- Unclassified16 CVE2 crit14 vendorsCVSS 6.8free simple cms (2) · aardvark topsites php (1) · bareftp (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 4 | 106 | 113 | · | 17 | 43 | 9.3 | office (15) · excel (13) · word (11) |
| Databases▸ 1 | 80 | 5 | · | 2 | 15 | 5.0 | peoplesoft and jdedwards product suite (21) · opensolaris (12) · solaris (11) |
| Consumer Software▸ 5 | 80 | 95 | 3 | 18 | 26 | 9.1 | acrobat (22) · acrobat reader (22) · shockwave player (11) |
| Enterprise Software▸ 4 | 64 | 17 | · | 6 | 55 | 10.0 | db2 (9) · tivoli storage manager fastback (8) · systems insight manager (4) |
| OSS Libraries▸ 6 | 44 | · | · | 14 | 21 | 6.4 | pyftpdlib (14) · python (2) · afpl ghostscript (1) |
| Web & CMS Plugins▸ 4 | 22 | 1 | · | 8 | 20 | 6.9 | typo3 (5) · cms made simple (4) · qpid (3) |
| Networking Infrastructure▸ 5 | 17 | 7 | · | 8 | 16 | 8.4 | openconnect (4) · openswan (4) · vpn client (1) |
| Mobile Apps▸ 2 | 15 | 6 | · | 2 | 3 | 8.2 | chrome (13) |
| Cloud & SaaS▸ 2 | 6 | · | · | 4 | 4 | 5.6 | phpcas (3) · dropbox (1) · last.fm (1) |
| Communications▸ 3 | 6 | · | · | 3 | 3 | 6.9 | dovecot (4) |
| Security Products▸ 2 | 5 | · | · | 4 | 4 | 7.5 | freeradius (2) · acegi-security (1) · authentication client (1) |
| DevTools & CI▸ 2 | 2 | · | · | 2 | 2 | 6.9 | ust (1) |
| Unclassified | 16 | 2 | · | 14 | 15 | 6.8 | free simple cms (2) · aardvark topsites php (1) · bareftp (1) |
Weakness × Sector
Which weaknesses hit which solution categories in October 2010
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
20Improper Input Validation119Memory Buffer Bounds264CWE-26494Code Injection79XSS399CWE-399200Information Exposure22Path Traversal362Race Condition310CWE-310Consumer Software312931652612Enterprise Software21339221OSS Libraries5361121352Operating Systems119721312Databases1345Web & CMS Plugins224361Networking Infrastructure232111Communications13412Cloud & SaaS31Hardware Firmware