month report
April 2011
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
April 2011 closed with 312 published CVEs. 47 criticals, microsoft led volume, mostly via windows xp. Top weakness class — CWE-399 (38 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
312
— MoM— YoY
Severity mix
47 / 55
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.6%
2 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
5446.0
n=2
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
3977
n=1
Detection gap
KEV pressure, no Nuclei coverage
April 2011 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1google6 CVE
- KEV 1opensuse3 CVE
- KEV 1suse3 CVE
- KEV 1novell inc.2 CVE
- KEV 1adobe1 CVE
Weakness × Vendor
What's spreading where in April 2011
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — April 2011
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #10mediawiki7 CVE
- #11bestpractical6 CVE
- #14broadcom5 CVE
- #157t4 CVE
- #16mark pilgrim4 CVE
- #17mono4 CVE
- #19realnetworks4 CVE
- #20aphpkb3 CVE
- #21horde3 CVE
- #22icanlocalize3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 54 CVE18 critCVSS 7.9PoC 1windows xp (38) · windows server 2003 (36) · windows server 2008 (35)
- 49 CVE1 critCVSS 5.0peoplesoft and jdedwards product suite (10) · jd edwards enterpriseone ep (8) · database server (8)
- 23 CVE3 critCVSS 5.0tivoli directory server (17) · webi (2) · soliddb (1)
- 19 CVE3 critCVSS 5.6network node manager i (4) · photosmart b110 (3) · photosmart d110 (3)
- 12 CVE1 critCVSS 4.8sunos (11) · java system application server (1)
- 11 CVE1 critCVSS 4.6red hat enterprise linux (6) · enterprise linux desktop (2) · spice-xpi (2)
- 10 CVECVSS 4.6PoC 3gentoo linux (10)
- 9 CVE2 critCVSS 6.6moonlight (4) · opensuse build service (2) · zenworks configuration management (1)
- 7 CVECVSS 3.6linux kernel (4) · util-linux (3)
- 7 CVECVSS 4.5NEWPoC 1mediawiki (7)
- 6 CVECVSS 4.7NEWrt (6)
- 6 CVECVSS 5.0PoC 2glibc (6) · eglibc (1)
- 6 CVE3 critCVSS 8.3KEV 1PoC 3chrome (5) · android (1) · google chrome (1)
- 5 CVE2 critCVSS 7.7NEWtotal defense (3) · output management web viewer (1) · siteminder (1)
- 4 CVE4 critCVSS 10.0NEWPoC 4igss (4)
- 4 CVECVSS 4.5NEWPoC 3feedparser (4)
- 4 CVECVSS 6.0NEWmono (4)
- 4 CVECVSS 4.5PoC 3feedparser (4)
- 4 CVE4 critCVSS 9.5NEWPoC 1helix mobile server (2) · helix server (2) · realplayer (2)
- 3 CVECVSS 7.0NEWPoC 2aphpkb (3)
- 3 CVECVSS 4.3NEWgroupware (2) · dynamic imp (1) · gollem (1)
- 3 CVECVSS 6.2NEWtranslation management (3)
- 3 CVECVSS 7.3KEV 1PoC 1opensuse (3)
- 3 CVECVSS 5.2KEV 1PoC 1linux enterprise desktop (2) · linux enterprise server (2)
- 3 CVE1 critCVSS 6.0PoC 1wireshark (3)
- 2 CVECVSS 5.4tomcat (2)
- 2 CVECVSS 4.7iphone os (1) · webkit (1)
- 2 CVECVSS 6.8NEWPoC 2baconmap (2)
- 2 CVECVSS 4.8PoC 1ubuntu linux (2)
- 2 CVE1 critCVSS 7.5ios (1) · secure access control system (1)
- 2 CVECVSS 5.0PoC 1debian linux (2)
- 2 CVE1 critCVSS 7.0NEWasterisk (2)
- 2 CVECVSS 5.6networker (1) · rsa adaptive authentication on-premise (1)
- 2 CVECVSS 6.3NEWPoC 2enano cms (2)
- 2 CVECVSS 5.9NEWPoC 2com jscalendar (2)
- 2 CVECVSS 5.0NEWkde sc (2)
- 2 CVECVSS 5.4org.apache.tomcat:tomcat (2)
- 2 CVE1 critCVSS 6.2firefox (2) · seamonkey (1)
- 2 CVECVSS 3.9NEWncpfs (2)
- 2 CVECVSS 5.9NEWprosafe wnap210 firmware (2) · prosafe wnap210 (2)
- 2 CVE1 critCVSS 9.0KEV 1PoC 1opensuse (2) · suse linux enterprise desktop (1)
- 2 CVECVSS 4.7NEWPoC 1easy banner free (2)
- 2 CVECVSS 4.7NEWPoC 2qooxdoo (2)
- 2 CVE2 critCVSS 10.0NEWPoC 2realwin (2)
- 2 CVECVSS 4.5NEWwebmail (2)
- 2 CVECVSS 5.5NEWPoC 1phplist (2)
- 2 CVECVSS 5.7open-vm-tools (1) · vix api (1) · workstation (1)
- 2 CVECVSS 4.8PoC 1debian gnu/linux (1) · perl (1)
- 1 CVECVSS 8.8KEV 1PoC 1acrobat (1) · acrobat reader (1) · adobe acrobat (1)
- 1 CVECVSS 4.3NEWPoC 1interra blog machine (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 54 | 18 | · | · | PoC 1 | windows xp (38) · windows server 2003 (36) · windows server 2008 (35) | — | |
| 2 | oracle | 49 | 1 | · | · | peoplesoft and jdedwards product suite (10) · jd edwards enterpriseone ep (8) · database server (8) | — | ||
| 3 | ibm | 23 | 3 | · | · | tivoli directory server (17) · webi (2) · soliddb (1) | — | ||
| 4 | hp | 19 | 3 | · | · | network node manager i (4) · photosmart b110 (3) · photosmart d110 (3) | — | ||
| 5 | sun | 12 | 1 | · | · | sunos (11) · java system application server (1) | — | ||
| 6 | redhat | 11 | 1 | · | · | red hat enterprise linux (6) · enterprise linux desktop (2) · spice-xpi (2) | — | ||
| 7 | gentoo foundation inc. | 10 | · | · | · | PoC 3 | gentoo linux (10) | — | |
| 8 | novell | 9 | 2 | · | · | moonlight (4) · opensuse build service (2) · zenworks configuration management (1) | — | ||
| 9 | linux | 7 | · | · | · | linux kernel (4) · util-linux (3) | — | ||
| 10 | mediawiki | 7 | · | · | · | NEWPoC 1 | mediawiki (7) | — | |
| 11 | bestpractical | 6 | · | · | · | NEW | rt (6) | — | |
| 12 | gnu | 6 | · | · | · | PoC 2 | glibc (6) · eglibc (1) | — | |
| 13 | 6 | 3 | 1 | · | KEV 1PoC 3 | chrome (5) · android (1) · google chrome (1) | — | ||
| 14 | broadcom | 5 | 2 | · | · | NEW | total defense (3) · output management web viewer (1) · siteminder (1) | — | |
| 15 | 7t | 4 | 4 | · | · | NEWPoC 4 | igss (4) | — | |
| 16 | mark pilgrim | 4 | · | · | · | NEWPoC 3 | feedparser (4) | — | |
| 17 | mono | 4 | · | · | · | NEW | mono (4) | — | |
| 18 | pypi | 4 | · | · | · | PoC 3 | feedparser (4) | — | |
| 19 | realnetworks | 4 | 4 | · | · | NEWPoC 1 | helix mobile server (2) · helix server (2) · realplayer (2) | — | |
| 20 | aphpkb | 3 | · | · | · | NEWPoC 2 | aphpkb (3) | — | |
| 21 | horde | 3 | · | · | · | NEW | groupware (2) · dynamic imp (1) · gollem (1) | — | |
| 22 | icanlocalize | 3 | · | · | · | NEW | translation management (3) | — | |
| 23 | opensuse | 3 | · | 1 | · | KEV 1PoC 1 | opensuse (3) | — | |
| 24 | suse | 3 | · | 1 | · | KEV 1PoC 1 | linux enterprise desktop (2) · linux enterprise server (2) | — | |
| 25 | wireshark | 3 | 1 | · | · | PoC 1 | wireshark (3) | — | |
| 26 | apache | 2 | · | · | · | tomcat (2) | — | ||
| 27 | apple | 2 | · | · | · | iphone os (1) · webkit (1) | — | ||
| 28 | baconmap | 2 | · | · | · | NEWPoC 2 | baconmap (2) | — | |
| 29 | canonical | 2 | · | · | · | PoC 1 | ubuntu linux (2) | — | |
| 30 | cisco | 2 | 1 | · | · | ios (1) · secure access control system (1) | — | ||
| 31 | debian | 2 | · | · | · | PoC 1 | debian linux (2) | — | |
| 32 | digium | 2 | 1 | · | · | NEW | asterisk (2) | — | |
| 33 | emc | 2 | · | · | · | networker (1) · rsa adaptive authentication on-premise (1) | — | ||
| 34 | enanocms | 2 | · | · | · | NEWPoC 2 | enano cms (2) | — | |
| 35 | joomlaseller | 2 | · | · | · | NEWPoC 2 | com jscalendar (2) | — | |
| 36 | kde | 2 | · | · | · | NEW | kde sc (2) | — | |
| 37 | maven | 2 | · | · | · | org.apache.tomcat:tomcat (2) | — | ||
| 38 | mozilla | 2 | 1 | · | · | firefox (2) · seamonkey (1) | — | ||
| 39 | ncpfs | 2 | · | · | · | NEW | ncpfs (2) | — | |
| 40 | netgear | 2 | · | · | · | NEW | prosafe wnap210 firmware (2) · prosafe wnap210 (2) | — | |
| 41 | novell inc. | 2 | 1 | 1 | · | KEV 1PoC 1 | opensuse (2) · suse linux enterprise desktop (1) | — | |
| 42 | phpwebscripts | 2 | · | · | · | NEWPoC 1 | easy banner free (2) | — | |
| 43 | qooxdoo | 2 | · | · | · | NEWPoC 2 | qooxdoo (2) | — | |
| 44 | realflex | 2 | 2 | · | · | NEWPoC 2 | realwin (2) | — | |
| 45 | roundcube | 2 | · | · | · | NEW | webmail (2) | — | |
| 46 | tincan | 2 | · | · | · | NEWPoC 1 | phplist (2) | — | |
| 47 | vmware | 2 | · | · | · | open-vm-tools (1) · vix api (1) · workstation (1) | — | ||
| 48 | сообщество свободного программного обеспечения | 2 | · | · | · | PoC 1 | debian gnu/linux (1) · perl (1) | — | |
| 49 | adobe | 1 | · | 1 | · | KEV 1PoC 1 | acrobat (1) · acrobat reader (1) · adobe acrobat (1) | — | |
| 50 | a.kulikov | 1 | · | · | · | NEWPoC 1 | interra blog machine (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems109 CVE76 crit4 KEV18 vendorsCVSS 7.9windows xp (38) · windows server 2003 (36) · windows 2003 server (35)
- Enterprise Software57 CVE6 crit12 vendorsCVSS 7.2tivoli directory server (17) · rt (6) · network node manager i (4)
- Databases49 CVE1 crit1 vendorsCVSS 5.0peoplesoft and jdedwards product suite (10) · database server (8) · enterpriseone tools (8)
- Web & CMS Plugins30 CVE16 vendorsCVSS 7.2mediawiki (7) · aphpkb (3) · com jscalendar (2)
- OSS Libraries26 CVE1 crit11 vendorsCVSS 5.4glibc (6) · feedparser (4) · mono (4)
- Communications11 CVE2 crit7 vendorsCVSS 7.0groupware (2) · webmail (2) · dynamic imp (1)
- Cloud & SaaS10 CVE2 crit4 vendorsCVSS 7.0total defense (3) · open-vm-tools (1) · output management web viewer (1)
- Consumer Software9 CVE10 crit8 KEV5 vendorsCVSS 10.0helix mobile server (2) · helix server (2) · realplayer (2)
- Mobile Apps8 CVE3 crit2 KEV3 vendorsCVSS 8.3chrome (5) · android (1) · google chrome (1)
- 1 crit5 vendorsCVSS 6.4prosafe wnap210 (2) · prosafe wnap210 firmware (2) · ios (1)
- ICS / OT / IoT5 CVE4 crit2 vendorsCVSS 9.5igss (4) · integraxor (1)
- Security Products5 CVE1 crit2 vendorsCVSS 6.0wireshark (3)
- Unclassified9 CVE8 vendorsCVSS 5.8baconmap (2) · ar web content manager (1) · dhcpcd (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 109 | 76 | 4 | 18 | 52 | 7.9 | windows xp (38) · windows server 2003 (36) · windows 2003 server (35) |
| Enterprise Software▸ 4 | 57 | 6 | · | 12 | 34 | 7.2 | tivoli directory server (17) · rt (6) · network node manager i (4) |
| Databases▸ 1 | 49 | 1 | · | 1 | 24 | 5.0 | peoplesoft and jdedwards product suite (10) · database server (8) · enterpriseone tools (8) |
| Web & CMS Plugins▸ 5 | 30 | · | · | 16 | 16 | 7.2 | mediawiki (7) · aphpkb (3) · com jscalendar (2) |
| OSS Libraries▸ 5 | 26 | 1 | · | 11 | 12 | 5.4 | glibc (6) · feedparser (4) · mono (4) |
| Communications▸ 2 | 11 | 2 | · | 7 | 38 | 7.0 | groupware (2) · webmail (2) · dynamic imp (1) |
| Cloud & SaaS▸ 2 | 10 | 2 | · | 4 | 8 | 7.0 | total defense (3) · open-vm-tools (1) · output management web viewer (1) |
| Consumer Software▸ 4 | 9 | 10 | 8 | 5 | 14 | 10.0 | helix mobile server (2) · helix server (2) · realplayer (2) |
| Mobile Apps▸ 2 | 8 | 3 | 2 | 3 | 5 | 8.3 | chrome (5) · android (1) · google chrome (1) |
| Networking Infrastructure▸ 3 | 7 | 1 | · | 5 | 7 | 6.4 | prosafe wnap210 (2) · prosafe wnap210 firmware (2) · ios (1) |
| ICS / OT / IoT▸ 1 | 5 | 4 | · | 2 | 2 | 9.5 | igss (4) · integraxor (1) |
| Security Products▸ 2 | 5 | 1 | · | 2 | 3 | 6.0 | wireshark (3) |
| Unclassified | 9 | · | · | 8 | 8 | 5.8 | baconmap (2) · ar web content manager (1) · dhcpcd (1) |
Weakness × Sector
Which weaknesses hit which solution categories in April 2011
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
399CWE-39979XSS20Improper Input Validation264CWE-26489SQL Injection119Memory Buffer Bounds200Information Exposure22Path Traversal189CWE-189352CSRFOperating Systems22212138225Enterprise Software10121522OSS Libraries44461241Web & CMS Plugins112310222Consumer Software121735Databases12211Networking Infrastructure112111Communications1342Cloud & SaaS111211Hardware Firmware11