month report
August 2011
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
August 2011 closed with 295 published CVEs. 85 criticals, google led volume, mostly via chrome. Top weakness class — CWE-119 (52 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
295
— MoM— YoY
Severity mix
85 / 53
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
2.7%
8 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
5322.0
n=8
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
—
n=0
Weakness × Vendor
What's spreading where in August 2011
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — August 2011
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #8marcus schafer11 CVE
- #20phpmyadmin5 CVE
- #25ioquake33 CVE
- #26osgeo3 CVE
- #28ruby-lang3 CVE
- #30umn3 CVE
- #31worldofpadman3 CVE
- #33aimluck2 CVE
- #34aveva2 CVE
- #37libpng2 CVE
Top vendors
Ranked by distinct CVE count this period.
- 44 CVE3 critCVSS 6.4chrome (42) · android (2)
- 28 CVE11 critCVSS 7.4PoC 1iphone os (15) · safari (14) · itunes (10)
- 25 CVE12 critCVSS 8.1firefox (17) · seamonkey (15) · thunderbird (14)
- 24 CVE21 critCVSS 9.3flash player (14) · adobe air (14) · shockwave player (7)
- 22 CVE7 critCVSS 6.7PoC 1windows server 2008 (8) · internet explorer (7) · windows 7 (5)
- 17 CVE1 critCVSS 5.6suse studio onsite (11) · mobility pack (6) · data synchronizer (6)
- 12 CVE3 critCVSS 6.7tivoli federated identity manager (8) · tivoli federated identity manager business gateway (4) · infosphere datastage (2)
- 11 CVE1 critCVSS 6.5NEWkiwi (11)
- 11 CVE10 critCVSS 9.0realplayer sp (11) · realplayer (11)
- 10 CVE2 critCVSS 8.0PoC 1unified communications manager (6) · intercompany media engine (2) · ios (2)
- 10 CVECVSS 5.9openview performance insight (3) · palm webos (2) · network automation (2)
- 8 CVECVSS 5.3red hat enterprise linux (4) · enterprise linux eus (2) · enterprise linux server (2)
- 7 CVE3 critCVSS 7.5Nuclei 7wordpress (7)
- 6 CVECVSS 6.8debian linux (6)
- 6 CVE1 critCVSS 5.7PoC 1php (6)
- 6 CVECVSS 5.0PoC 6actionpack (4) · activerecord (1) · activesupport (1)
- 6 CVECVSS 5.1PoC 6rails (6) · ruby on rails (4)
- 5 CVECVSS 5.4PoC 1tomcat (3) · apache commons daemon (1) · http server (1)
- 5 CVECVSS 5.5captiva einput (2) · rsa adaptive authentication on-premise (1) · autostart (1)
- 5 CVECVSS 5.2NEWphpmyadmin (5)
- 4 CVECVSS 6.0linux kernel (4)
- 4 CVECVSS 4.8PoC 2zabbix (4)
- 3 CVECVSS 7.8PoC 1ubuntu linux (3)
- 3 CVECVSS 5.5PoC 1xen (3)
- 3 CVE2 critCVSS 9.2NEWPoC 1ioquake3 engine (3)
- 3 CVECVSS 7.3NEWmapserver (3)
- 3 CVE1 critCVSS 5.5pidgin (3) · libpurple (1)
- 3 CVECVSS 5.0NEWruby (3)
- 3 CVE1 critCVSS 8.5endpoint protection (2) · netbackup puredisk (1) · veritas dynamic multi-pathing (1)
- 3 CVECVSS 7.3NEWmapserver (3)
- 3 CVE2 critCVSS 9.2NEWPoC 1world of padman (3)
- 3 CVECVSS 7.7debian gnu/linux (3)
- 2 CVECVSS 7.2NEWaipo (2) · aipo-asp (2)
- 2 CVE1 critCVSS 7.2NEWclearscada (2)
- 2 CVE1 critCVSS 7.2gentoo linux (2)
- 2 CVECVSS 7.8dhcp (2)
- 2 CVECVSS 5.0NEWlibpng (2)
- 2 CVECVSS 6.0org.apache.tomcat:tomcat (2)
- 2 CVECVSS 6.8saas endpoint protection (2)
- 2 CVECVSS 5.3suse linux enterprise (2)
- 2 CVE1 critCVSS 8.8NEWPoC 1openarena (2)
- 2 CVECVSS 5.0NEWenvision (2)
- 2 CVE1 critCVSS 7.2NEWscx 67 (2) · scx 68 (2)
- 2 CVECVSS 5.9NEWsnitz forums 2000 (2)
- 2 CVECVSS 1.2systemtap (2)
- 2 CVECVSS 7.5NEWPoC 2cars ads package (1) · job career package (1)
- 2 CVE1 critCVSS 7.2centos (2)
- 2 CVE2 critCVSS 10.0NEWPoC 1tremulous (2)
- 2 CVE2 critCVSS 10.0NEWPoC 1iourbanterror (2)
- 2 CVE2 critCVSS 9.3NEWuuplayer activex control (2) · uusee (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | 44 | 3 | · | · | chrome (42) · android (2) | — | |||
| 2 | apple | 28 | 11 | · | · | PoC 1 | iphone os (15) · safari (14) · itunes (10) | — | |
| 3 | mozilla | 25 | 12 | · | · | firefox (17) · seamonkey (15) · thunderbird (14) | — | ||
| 4 | adobe | 24 | 21 | · | · | flash player (14) · adobe air (14) · shockwave player (7) | — | ||
| 5 | microsoft | 22 | 7 | · | · | PoC 1 | windows server 2008 (8) · internet explorer (7) · windows 7 (5) | — | |
| 6 | novell | 17 | 1 | · | · | suse studio onsite (11) · mobility pack (6) · data synchronizer (6) | — | ||
| 7 | ibm | 12 | 3 | · | · | tivoli federated identity manager (8) · tivoli federated identity manager business gateway (4) · infosphere datastage (2) | — | ||
| 8 | marcus schafer | 11 | 1 | · | · | NEW | kiwi (11) | — | |
| 9 | realnetworks | 11 | 10 | · | · | realplayer sp (11) · realplayer (11) | — | ||
| 10 | cisco | 10 | 2 | · | · | PoC 1 | unified communications manager (6) · intercompany media engine (2) · ios (2) | — | |
| 11 | hp | 10 | · | · | · | openview performance insight (3) · palm webos (2) · network automation (2) | — | ||
| 12 | redhat | 8 | · | · | · | red hat enterprise linux (4) · enterprise linux eus (2) · enterprise linux server (2) | — | ||
| 13 | wordpress | 7 | 3 | · | 7 | Nuclei 7 | wordpress (7) | — | |
| 14 | debian | 6 | · | · | · | debian linux (6) | — | ||
| 15 | php | 6 | 1 | · | · | PoC 1 | php (6) | — | |
| 16 | rubygems | 6 | · | · | · | PoC 6 | actionpack (4) · activerecord (1) · activesupport (1) | — | |
| 17 | rubyonrails | 6 | · | · | · | PoC 6 | rails (6) · ruby on rails (4) | — | |
| 18 | apache | 5 | · | · | · | PoC 1 | tomcat (3) · apache commons daemon (1) · http server (1) | — | |
| 19 | emc | 5 | · | · | · | captiva einput (2) · rsa adaptive authentication on-premise (1) · autostart (1) | — | ||
| 20 | phpmyadmin | 5 | · | · | · | NEW | phpmyadmin (5) | — | |
| 21 | linux | 4 | · | · | · | linux kernel (4) | — | ||
| 22 | zabbix | 4 | · | · | · | PoC 2 | zabbix (4) | — | |
| 23 | canonical | 3 | · | · | · | PoC 1 | ubuntu linux (3) | — | |
| 24 | citrix | 3 | · | · | · | PoC 1 | xen (3) | — | |
| 25 | ioquake3 | 3 | 2 | · | · | NEWPoC 1 | ioquake3 engine (3) | — | |
| 26 | osgeo | 3 | · | · | · | NEW | mapserver (3) | — | |
| 27 | pidgin | 3 | 1 | · | · | pidgin (3) · libpurple (1) | — | ||
| 28 | ruby-lang | 3 | · | · | · | NEW | ruby (3) | — | |
| 29 | symantec | 3 | 1 | · | · | endpoint protection (2) · netbackup puredisk (1) · veritas dynamic multi-pathing (1) | — | ||
| 30 | umn | 3 | · | · | · | NEW | mapserver (3) | — | |
| 31 | worldofpadman | 3 | 2 | · | · | NEWPoC 1 | world of padman (3) | — | |
| 32 | сообщество свободного программного обеспечения | 3 | · | · | · | debian gnu/linux (3) | — | ||
| 33 | aimluck | 2 | · | · | · | NEW | aipo (2) · aipo-asp (2) | — | |
| 34 | aveva | 2 | 1 | · | · | NEW | clearscada (2) | — | |
| 35 | gentoo foundation inc. | 2 | 1 | · | · | gentoo linux (2) | — | ||
| 36 | isc | 2 | · | · | · | dhcp (2) | — | ||
| 37 | libpng | 2 | · | · | · | NEW | libpng (2) | — | |
| 38 | maven | 2 | · | · | · | org.apache.tomcat:tomcat (2) | — | ||
| 39 | mcafee | 2 | · | · | · | saas endpoint protection (2) | — | ||
| 40 | novell inc. | 2 | · | · | · | suse linux enterprise (2) | — | ||
| 41 | openarena | 2 | 1 | · | · | NEWPoC 1 | openarena (2) | — | |
| 42 | rsa | 2 | · | · | · | NEW | envision (2) | — | |
| 43 | schneider-electric | 2 | 1 | · | · | NEW | scx 67 (2) · scx 68 (2) | — | |
| 44 | snitz communications | 2 | · | · | · | NEW | snitz forums 2000 (2) | — | |
| 45 | systemtap | 2 | · | · | · | systemtap (2) | — | ||
| 46 | t-dreams | 2 | · | · | · | NEWPoC 2 | cars ads package (1) · job career package (1) | — | |
| 47 | the centos project | 2 | 1 | · | · | centos (2) | — | ||
| 48 | tremulous | 2 | 2 | · | · | NEWPoC 1 | tremulous (2) | — | |
| 49 | urbanterror | 2 | 2 | · | · | NEWPoC 1 | iourbanterror (2) | — | |
| 50 | uusee | 2 | 2 | · | · | NEW | uuplayer activex control (2) · uusee (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Mobile Apps72 CVE16 crit2 vendorsCVSS 7.4chrome (42) · android (2)
- Consumer Software68 CVE101 crit11 vendorsCVSS 9.4firefox (17) · seamonkey (15) · thunderbird (14)
- Operating Systems63 CVE14 crit18 vendorsCVSS 9.3suse studio onsite (11) · data synchronizer (6) · debian linux (6)
- OSS Libraries33 CVE3 crit13 vendorsCVSS 6.2php (6) · mapserver (3) · ruby (3)
- Web & CMS Plugins32 CVE4 crit8 vendorsCVSS 7.5kiwi (11) · wordpress (7) · tomcat (3)
- Enterprise Software31 CVE6 crit8 vendorsCVSS 6.1tivoli federated identity manager (8) · tivoli federated identity manager business gateway (4) · zabbix (4)
- Security Products16 CVE4 crit7 vendorsCVSS 7.7captiva einput (2) · envision (2) · autostart (1)
- 4 crit5 vendorsCVSS 9.3unified communications manager (6) · intercompany media engine (2) · ios (2)
- Databases6 CVE2 vendorsCVSS 5.2phpmyadmin (5)
- ICS / OT / IoT5 CVE7 crit4 vendorsCVSS 9.3scx 67 (2) · scx 68 (2) · kingview (1)
- Cloud & SaaS4 CVE2 vendorsCVSS 5.3xen (3) · tc server (1)
- Communications4 CVE1 crit2 vendorsCVSS 5.5pidgin (3) · libpurple (1)
- DevTools & CI1 CVE1 vendorsCVSS 3.5cgit (1)
- Unclassified8 CVE3 crit4 vendorsCVSS 7.8world of padman (3) · aipo (2) · aipo-asp (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Mobile Apps▸ 2 | 72 | 16 | · | 2 | 8 | 7.4 | chrome (42) · android (2) |
| Consumer Software▸ 4 | 68 | 101 | · | 11 | 23 | 9.4 | firefox (17) · seamonkey (15) · thunderbird (14) |
| Operating Systems▸ 4 | 63 | 14 | · | 18 | 40 | 9.3 | suse studio onsite (11) · data synchronizer (6) · debian linux (6) |
| OSS Libraries▸ 6 | 33 | 3 | · | 13 | 16 | 6.2 | php (6) · mapserver (3) · ruby (3) |
| Web & CMS Plugins▸ 5 | 32 | 4 | · | 8 | 12 | 7.5 | kiwi (11) · wordpress (7) · tomcat (3) |
| Enterprise Software▸ 1 | 31 | 6 | · | 8 | 21 | 6.1 | tivoli federated identity manager (8) · tivoli federated identity manager business gateway (4) · zabbix (4) |
| Security Products▸ 3 | 16 | 4 | · | 7 | 14 | 7.7 | captiva einput (2) · envision (2) · autostart (1) |
| Networking Infrastructure▸ 4 | 15 | 4 | · | 5 | 20 | 9.3 | unified communications manager (6) · intercompany media engine (2) · ios (2) |
| Databases▸ 2 | 6 | · | · | 2 | 2 | 5.2 | phpmyadmin (5) |
| ICS / OT / IoT▸ 2 | 5 | 7 | · | 4 | 7 | 9.3 | scx 67 (2) · scx 68 (2) · kingview (1) |
| Cloud & SaaS▸ 1 | 4 | · | · | 2 | 2 | 5.3 | xen (3) · tc server (1) |
| Communications▸ 2 | 4 | 1 | · | 2 | 3 | 5.5 | pidgin (3) · libpurple (1) |
| DevTools & CI▸ 1 | 1 | · | · | 1 | 1 | 3.5 | cgit (1) |
| Unclassified | 8 | 3 | · | 4 | 5 | 7.8 | world of padman (3) · aipo (2) · aipo-asp (2) |
Weakness × Sector
Which weaknesses hit which solution categories in August 2011
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds20Improper Input Validation79XSS264CWE-264399CWE-399200Information Exposure416Use After Free189CWE-189310CWE-31089SQL InjectionConsumer Software32187736133Operating Systems1386541853OSS Libraries1434342342Web & CMS Plugins1271125Security Products1113123Enterprise Software73141Networking Infrastructure223411Communications5112Databases1221ICS / OT / IoT3111