month report
December 2010
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
December 2010 closed with 361 published CVEs. 93 criticals, microsoft led volume, mostly via windows server 2008. Top weakness class — CWE-119 (49 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
361
— MoM— YoY
Severity mix
93 / 70
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
3.0%
11 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
5568.8
n=11
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
4126
n=4
Weakness × Vendor
What's spreading where in December 2010
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — December 2010
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #3realnetworks27 CVE
- #13opera9 CVE
- #17mybb7 CVE
- #19artica6 CVE
- #20nullsoft6 CVE
- #22awstats4 CVE
- #23boka4 CVE
- #28andy armstrong3 CVE
- #31dynpg3 CVE
- #32earl miles3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 43 CVE25 critCVSS 8.0KEV 1PoC 4windows server 2008 (16) · windows 7 (13) · windows vista (12)
- 33 CVE1 critCVSS 4.8PoC 2lotus notes traveler (15) · lotus mobile connect (6) · rational clearquest (4)
- 27 CVE24 critCVSS 8.8NEWrealplayer (27) · realplayer sp (25)
- 19 CVECVSS 4.7KEV 1PoC 6linux kernel (19)
- 18 CVE2 critCVSS 6.1PoC 2chrome (18) · chrome os (5)
- 14 CVE1 critCVSS 6.1KEV 2PoC 2debian linux (14)
- 14 CVE10 critCVSS 8.4firefox (14) · seamonkey (12) · thunderbird (5)
- 14 CVECVSS 4.6KEV 1PoC 6linux enterprise server (11) · linux enterprise real time extension (10) · linux enterprise desktop (10)
- 12 CVECVSS 5.0KEV 1PoC 2jboss enterprise application platform (4) · enterprise linux (2) · enterprise linux server (2)
- 11 CVE5 critCVSS 6.3PoC 1quicktime (6) · airport express (3) · airport extreme base station firmware (3)
- 11 CVE1 critCVSS 5.9KEV 3PoC 5opensuse (11)
- 10 CVE3 critCVSS 6.7PoC 1discovery\&dependency mapping inventory (1) · hp-ux (1) · insight control server deployment (1)
- 9 CVE3 critCVSS 6.1NEWopera browser (9)
- 8 CVE1 critCVSS 5.7KEV 3PoC 1ubuntu linux (8)
- 7 CVECVSS 5.4PoC 4fedora (7)
- 7 CVE1 critCVSS 5.0PoC 3gentoo linux (7)
- 7 CVECVSS 5.0NEWmybb (7)
- 7 CVE2 critCVSS 7.6KEV 1PoC 1workstation (4) · player (4) · fusion (3)
- 6 CVE2 critCVSS 8.2NEWNuclei 1PoC 6pandora fms (6)
- 6 CVE4 critCVSS 7.6NEWwinamp (6)
- 5 CVECVSS 6.4PoC 3centos (5)
- 4 CVECVSS 6.8NEWNuclei 1PoC 2awstats (4)
- 4 CVECVSS 6.5NEWNuclei 1PoC 4siteengine (4)
- 4 CVECVSS 5.1bind (3) · dhcp (1)
- 4 CVECVSS 3.9kerberos 5 (4) · kerberos (1)
- 4 CVE2 critCVSS 8.0movabletype (4)
- 4 CVECVSS 4.4PoC 1debian gnu/linux (3) · linux (1)
- 3 CVECVSS 4.3NEWcgi.pm (3) · cgi-simple (2)
- 3 CVECVSS 7.0PoC 1archiva (2) · openoffice (1)
- 3 CVECVSS 6.7clamav (3)
- 3 CVECVSS 5.6NEWPoC 3dynpg (3)
- 3 CVECVSS 5.1NEWviews (3)
- 3 CVE1 critCVSS 7.3NEWPoC 2integraxor (3)
- 3 CVECVSS 5.6NEWPoC 3html-edit cms (3)
- 3 CVECVSS 6.4NEWPoC 1jurpopage (3)
- 3 CVECVSS 7.7NEWcobbler (3)
- 3 CVECVSS 6.0NEWPoC 1freeticket (2) · guestbook (1)
- 3 CVECVSS 5.4NEWPoC 1openssl (3)
- 3 CVECVSS 4.5NEWPoC 1phpmyadmin (3)
- 3 CVECVSS 7.5NEWPoC 3business e-listings (1) · big truck broker (1) · vacation rental listings (1)
- 3 CVECVSS 5.4NEWxwiki (2) · xwiki watch (1)
- 2 CVECVSS 5.9NEWsh404sef (2)
- 2 CVECVSS 4.3NEWPoC 1pfsense (2)
- 2 CVECVSS 3.5NEWweb interface (1) · xen (1)
- 2 CVECVSS 3.9NEWdadabik (2)
- 2 CVECVSS 4.7NEWNuclei 2register-plus (2)
- 2 CVE1 critCVSS 8.8NEWKEV 2exim (2)
- 2 CVECVSS 3.8NEWPoC 2habari (2)
- 2 CVECVSS 7.2NEWPoC 2com jeajaxeventcalendar (1) · com jeauto (1)
- 2 CVECVSS 7.2NEWPoC 2hycus cms (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 43 | 25 | 1 | · | KEV 1PoC 4 | windows server 2008 (16) · windows 7 (13) · windows vista (12) | — | |
| 2 | ibm | 33 | 1 | · | · | PoC 2 | lotus notes traveler (15) · lotus mobile connect (6) · rational clearquest (4) | — | |
| 3 | realnetworks | 27 | 24 | · | · | NEW | realplayer (27) · realplayer sp (25) | — | |
| 4 | linux | 19 | · | 1 | · | KEV 1PoC 6 | linux kernel (19) | — | |
| 5 | 18 | 2 | · | · | PoC 2 | chrome (18) · chrome os (5) | — | ||
| 6 | debian | 14 | 1 | 2 | · | KEV 2PoC 2 | debian linux (14) | — | |
| 7 | mozilla | 14 | 10 | · | · | firefox (14) · seamonkey (12) · thunderbird (5) | — | ||
| 8 | suse | 14 | · | 1 | · | KEV 1PoC 6 | linux enterprise server (11) · linux enterprise real time extension (10) · linux enterprise desktop (10) | — | |
| 9 | redhat | 12 | · | 1 | · | KEV 1PoC 2 | jboss enterprise application platform (4) · enterprise linux (2) · enterprise linux server (2) | — | |
| 10 | apple | 11 | 5 | · | · | PoC 1 | quicktime (6) · airport express (3) · airport extreme base station firmware (3) | — | |
| 11 | opensuse | 11 | 1 | 3 | · | KEV 3PoC 5 | opensuse (11) | — | |
| 12 | hp | 10 | 3 | · | · | PoC 1 | discovery\&dependency mapping inventory (1) · hp-ux (1) · insight control server deployment (1) | — | |
| 13 | opera | 9 | 3 | · | · | NEW | opera browser (9) | — | |
| 14 | canonical | 8 | 1 | 3 | · | KEV 3PoC 1 | ubuntu linux (8) | — | |
| 15 | fedoraproject | 7 | · | · | · | PoC 4 | fedora (7) | — | |
| 16 | gentoo foundation inc. | 7 | 1 | · | · | PoC 3 | gentoo linux (7) | — | |
| 17 | mybb | 7 | · | · | · | NEW | mybb (7) | — | |
| 18 | vmware | 7 | 2 | 1 | · | KEV 1PoC 1 | workstation (4) · player (4) · fusion (3) | — | |
| 19 | artica | 6 | 2 | · | 1 | NEWNuclei 1PoC 6 | pandora fms (6) | — | |
| 20 | nullsoft | 6 | 4 | · | · | NEW | winamp (6) | — | |
| 21 | the centos project | 5 | · | · | · | PoC 3 | centos (5) | — | |
| 22 | awstats | 4 | · | · | 1 | NEWNuclei 1PoC 2 | awstats (4) | — | |
| 23 | boka | 4 | · | · | 1 | NEWNuclei 1PoC 4 | siteengine (4) | — | |
| 24 | isc | 4 | · | · | · | bind (3) · dhcp (1) | — | ||
| 25 | mit | 4 | · | · | · | kerberos 5 (4) · kerberos (1) | — | ||
| 26 | sixapart | 4 | 2 | · | · | movabletype (4) | — | ||
| 27 | сообщество свободного программного обеспечения | 4 | · | · | · | PoC 1 | debian gnu/linux (3) · linux (1) | — | |
| 28 | andy armstrong | 3 | · | · | · | NEW | cgi.pm (3) · cgi-simple (2) | — | |
| 29 | apache | 3 | · | · | · | PoC 1 | archiva (2) · openoffice (1) | — | |
| 30 | clamav | 3 | · | · | · | clamav (3) | — | ||
| 31 | dynpg | 3 | · | · | · | NEWPoC 3 | dynpg (3) | — | |
| 32 | earl miles | 3 | · | · | · | NEW | views (3) | — | |
| 33 | ecava | 3 | 1 | · | · | NEWPoC 2 | integraxor (3) | — | |
| 34 | html-edit | 3 | · | · | · | NEWPoC 3 | html-edit cms (3) | — | |
| 35 | jurpo | 3 | · | · | · | NEWPoC 1 | jurpopage (3) | — | |
| 36 | michael dehaan | 3 | · | · | · | NEW | cobbler (3) | — | |
| 37 | mrcgiguy | 3 | · | · | · | NEWPoC 1 | freeticket (2) · guestbook (1) | — | |
| 38 | openssl | 3 | · | · | · | NEWPoC 1 | openssl (3) | — | |
| 39 | phpmyadmin | 3 | · | · | · | NEWPoC 1 | phpmyadmin (3) | — | |
| 40 | site2nite | 3 | · | · | · | NEWPoC 3 | business e-listings (1) · big truck broker (1) · vacation rental listings (1) | — | |
| 41 | xwiki | 3 | · | · | · | NEW | xwiki (2) · xwiki watch (1) | — | |
| 42 | anything-digital | 2 | · | · | · | NEW | sh404sef (2) | — | |
| 43 | bsdperimeter | 2 | · | · | · | NEWPoC 1 | pfsense (2) | — | |
| 44 | citrix | 2 | · | · | · | NEW | web interface (1) · xen (1) | — | |
| 45 | dadabik | 2 | · | · | · | NEW | dadabik (2) | — | |
| 46 | devbits | 2 | · | · | 2 | NEWNuclei 2 | register-plus (2) | — | |
| 47 | exim | 2 | 1 | 2 | · | NEWKEV 2 | exim (2) | — | |
| 48 | habariproject | 2 | · | · | · | NEWPoC 2 | habari (2) | — | |
| 49 | harmistechnology | 2 | · | · | · | NEWPoC 2 | com jeajaxeventcalendar (1) · com jeauto (1) | — | |
| 50 | hycus | 2 | · | · | · | NEWPoC 2 | hycus cms (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems98 CVE49 crit18 KEV20 vendorsCVSS 8.0linux kernel (19) · debian linux (14) · linux enterprise server (11)
- Enterprise Software65 CVE14 crit12 vendorsCVSS 8.1lotus notes traveler (15) · lotus mobile connect (6) · pandora fms (6)
- Consumer Software60 CVE76 crit8 vendorsCVSS 8.7realplayer (27) · realplayer sp (25) · winamp (6)
- Web & CMS Plugins57 CVE2 crit27 vendorsCVSS 6.7movabletype (4) · html-edit cms (3) · views (3)
- Mobile Apps29 CVE7 crit2 vendorsCVSS 6.3chrome (18) · chrome os (5)
- OSS Libraries17 CVE11 vendorsCVSS 8.5openssl (4) · cgi.pm (3) · cgi-simple (2)
- Cloud & SaaS10 CVE5 crit1 KEV3 vendorsCVSS 7.2player (4) · workstation (4) · esxi (3)
- 4 vendorsCVSS 5.4bind (3) · dhcp (1) · redback (1)
- Security Products8 CVE1 crit5 vendorsCVSS 10.0clamav (3) · endpoint protection (2) · antivirus (1)
- Databases6 CVE2 vendorsCVSS 5.1dynpg (3) · phpmyadmin (3)
- DevTools & CI6 CVE4 vendorsCVSS 6.6cobbler (3) · bugtracker.net (2)
- ICS / OT / IoT4 CVE3 crit2 vendorsCVSS 8.4integraxor (3) · foxboro i\/a series batch (1) · wonderware inbatch (1)
- Communications3 CVE1 crit2 KEV2 vendorsCVSS 8.8exim (2)
- AI / ML2 CVE4 crit2 vendorsCVSS 9.3aigaion (1)
- Hardware Firmware2 CVE2 vendorsCVSS 5.0intel alert management system (1)
- Unclassified15 CVE13 vendorsCVSS 5.4dadabik (2) · sh404sef (2) · alguest (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 98 | 49 | 18 | 20 | 60 | 8.0 | linux kernel (19) · debian linux (14) · linux enterprise server (11) |
| Enterprise Software▸ 4 | 65 | 14 | · | 12 | 37 | 8.1 | lotus notes traveler (15) · lotus mobile connect (6) · pandora fms (6) |
| Consumer Software▸ 4 | 60 | 76 | · | 8 | 11 | 8.7 | realplayer (27) · realplayer sp (25) · winamp (6) |
| Web & CMS Plugins▸ 5 | 57 | 2 | · | 27 | 33 | 6.7 | movabletype (4) · html-edit cms (3) · views (3) |
| Mobile Apps▸ 2 | 29 | 7 | · | 2 | 12 | 6.3 | chrome (18) · chrome os (5) |
| OSS Libraries▸ 4 | 17 | · | · | 11 | 13 | 8.5 | openssl (4) · cgi.pm (3) · cgi-simple (2) |
| Cloud & SaaS▸ 1 | 10 | 5 | 1 | 3 | 10 | 7.2 | player (4) · workstation (4) · esxi (3) |
| Networking Infrastructure▸ 3 | 8 | · | · | 4 | 5 | 5.4 | bind (3) · dhcp (1) · redback (1) |
| Security Products▸ 3 | 8 | 1 | · | 5 | 6 | 10.0 | clamav (3) · endpoint protection (2) · antivirus (1) |
| Databases▸ 1 | 6 | · | · | 2 | 2 | 5.1 | dynpg (3) · phpmyadmin (3) |
| DevTools & CI▸ 2 | 6 | · | · | 4 | 3 | 6.6 | cobbler (3) · bugtracker.net (2) |
| ICS / OT / IoT▸ 1 | 4 | 3 | · | 2 | 3 | 8.4 | integraxor (3) · foxboro i\/a series batch (1) · wonderware inbatch (1) |
| Communications▸ 2 | 3 | 1 | 2 | 2 | 2 | 8.8 | exim (2) |
| AI / ML▸ 2 | 2 | 4 | · | 2 | 5 | 9.3 | aigaion (1) |
| Hardware Firmware▸ 2 | 2 | · | · | 2 | 5 | 5.0 | intel alert management system (1) |
| Unclassified | 15 | · | · | 13 | 13 | 5.4 | dadabik (2) · sh404sef (2) · alguest (1) |
Weakness × Sector
Which weaknesses hit which solution categories in December 2010
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds79XSS89SQL Injection264CWE-26420Improper Input Validation399CWE-399200Information Exposure94Code Injection189CWE-18922Path TraversalConsumer Software3227753310Operating Systems8898542Web & CMS Plugins212031514Enterprise Software454544543OSS Libraries15122131Communications42113Cloud & SaaS1111Networking Infrastructure1322Security Products112111Databases2111