month report
October 2011
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
October 2011 closed with 484 published CVEs. 60 criticals, apple led volume, mostly via itunes. Biggest breakout: apple at ×42.0 their 12-month median. Top weakness class — CWE-89 (74 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
484
— MoM— YoY
Severity mix
60 / 184
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.6%
3 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
5264.4
n=3
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
3804
n=2
Detection gap
KEV pressure, no Nuclei coverage
October 2011 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1oracle61 CVE
- KEV 1microsoft24 CVE
- KEV 1novell inc.8 CVE
- KEV 1redhat5 CVE
- KEV 1canonical2 CVE
Weakness × Vendor
What's spreading where in October 2011
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — October 2011
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
- 42.0×apple84 CVE
- 15.0×cisco45 CVE
- 11.0×novell11 CVE
- 4.0×mit4 CVE
- 4.0×novell inc.8 CVE
- 4.0×gentoo foundation inc.8 CVE
- 3.0×rubygems3 CVE
- 3.0×symantec3 CVE
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #13atcom5 CVE
- #14djangoproject5 CVE
- #15puppet5 CVE
- #16puppetlabs5 CVE
- #17quagga5 CVE
- #19coldgen4 CVE
- #20kent-web4 CVE
- #29allpcscript2 CVE
- #30andreas kiefer2 CVE
- #32apphp2 CVE
Top vendors
Ranked by distinct CVE count this period.
- 84 CVE8 critCVSS 6.2×42.0itunes (29) · mac os x (26) · mac os x server (26)
- 61 CVE3 critCVSS 4.4KEV 1solaris (10) · fusion middleware (9) · peoplesoft products (6)
- 45 CVE4 critCVSS 7.6×15.0Nuclei 1ios (22) · ios xe (13) · catalyst 7600 (9)
- 32 CVECVSS 6.5PoC 1chrome (26) · app engine python sdk (4) · android (2)
- 25 CVE7 critCVSS 6.9jre (18) · jdk (18) · sunos (6)
- 24 CVE14 critCVSS 7.9KEV 1internet explorer (8) · windows 7 (6) · windows vista (6)
- 14 CVE1 critCVSS 5.1PoC 1websphere mq (3) · websphere application server (3) · rational appscan (2)
- 11 CVE6 critCVSS 6.9×11.0groupwise (7) · identity manager user application (2) · identity manager roles based provisioning module (2)
- 10 CVE8 critCVSS 9.2data protector for personal computers (7) · data protector notebook extension (7) · nonstop server software (1)
- 8 CVECVSS 5.8×4.0PoC 3gentoo linux (8)
- 8 CVE1 critCVSS 6.2×4.0KEV 1opensuse (4) · suse linux enterprise (3) · suse linux enterprise server (1)
- 7 CVE2 critCVSS 6.6django (5) · plone (1) · zope2 (1)
- 5 CVECVSS 6.2NEWPoC 3netvolution (5)
- 5 CVECVSS 5.5NEWdjango (5)
- 5 CVECVSS 4.8NEWPoC 3puppet (5) · puppet enterprise (1)
- 5 CVECVSS 4.8NEWPoC 3puppet (5) · puppet enterprise users (1)
- 5 CVECVSS 5.5NEWquagga (5)
- 5 CVE1 critCVSS 7.0KEV 1red hat enterprise linux (3) · enterprise linux (1) · enterprise mrg (1)
- 4 CVECVSS 6.7NEWPoC 4coldusergroup (2) · coldcalendar (1) · coldbookmarks (1)
- 4 CVECVSS 4.3NEWweb forum (4)
- 4 CVECVSS 7.8×4.0kerberos 5 (4)
- 4 CVECVSS 6.8PoC 1dmk/webkitpdf (2) · baserproject/basercms (1) · dompdf/dompdf (1)
- 4 CVECVSS 5.3PoC 2debian gnu/linux (4)
- 3 CVECVSS 5.6ffmpeg (3)
- 3 CVECVSS 7.5PoC 2com camelcitydb2 (1) · com elite experts (1) · com weblinks (1)
- 3 CVECVSS 6.0PoC 1linux kernel (3)
- 3 CVECVSS 6.3×3.0PoC 3puppet (3)
- 3 CVECVSS 6.4×3.0im manager (3)
- 2 CVECVSS 5.9NEWPoC 2allpc (2)
- 2 CVECVSS 5.9NEWke yac (2)
- 2 CVECVSS 3.5PoC 2http server (1) · jserv (1)
- 2 CVECVSS 5.5NEWPoC 1apphp calendar (2)
- 2 CVECVSS 7.5PoC 2xweblog (2)
- 2 CVECVSS 4.6NEWbasercms (2)
- 2 CVE1 critCVSS 9.0KEV 1ubuntu linux (2) · ubuntu (1)
- 2 CVECVSS 4.5PoC 1cherokee (2)
- 2 CVECVSS 5.9NEWPoC 2chillycms (2)
- 2 CVECVSS 7.5NEWwebkitpdf (2)
- 2 CVE2 critCVSS 9.0NEWPoC 2dcs-2121 firmware (2) · dcs-2121 (2)
- 2 CVECVSS 4.3empathy (2)
- 2 CVECVSS 7.5PoC 2com jedirectory (1) · com jeguestbook (1)
- 2 CVECVSS 7.5NEWPoC 2gaestebuch (1) · kontakt formular (1)
- 2 CVECVSS 7.5event (1) · festat (1)
- 2 CVECVSS 5.9NEWPoC 1entrans (2)
- 2 CVE1 critCVSS 8.8NEWhm tinymarket (2)
- 2 CVECVSS 7.5NEWPoC 2rental property website (1) · rv dealer website (1)
- 2 CVECVSS 5.9NEWke questionnaire (2)
- 2 CVECVSS 4.3NEWxing (1) · tweetbutton (1)
- 2 CVECVSS 5.9NEWPoC 2com restaurantguide (2)
- 2 CVE2 critCVSS 9.3NEWplone (2) · cmfeditions (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | apple | 84 | 8 | · | · | ×42.0 | itunes (29) · mac os x (26) · mac os x server (26) | — | |
| 2 | oracle | 61 | 3 | 1 | · | KEV 1 | solaris (10) · fusion middleware (9) · peoplesoft products (6) | — | |
| 3 | cisco | 45 | 4 | · | 1 | ×15.0Nuclei 1 | ios (22) · ios xe (13) · catalyst 7600 (9) | — | |
| 4 | 32 | · | · | · | PoC 1 | chrome (26) · app engine python sdk (4) · android (2) | — | ||
| 5 | sun | 25 | 7 | · | · | jre (18) · jdk (18) · sunos (6) | — | ||
| 6 | microsoft | 24 | 14 | 1 | · | KEV 1 | internet explorer (8) · windows 7 (6) · windows vista (6) | — | |
| 7 | ibm | 14 | 1 | · | · | PoC 1 | websphere mq (3) · websphere application server (3) · rational appscan (2) | — | |
| 8 | novell | 11 | 6 | · | · | ×11.0 | groupwise (7) · identity manager user application (2) · identity manager roles based provisioning module (2) | — | |
| 9 | hp | 10 | 8 | · | · | data protector for personal computers (7) · data protector notebook extension (7) · nonstop server software (1) | — | ||
| 10 | gentoo foundation inc. | 8 | · | · | · | ×4.0PoC 3 | gentoo linux (8) | — | |
| 11 | novell inc. | 8 | 1 | 1 | · | ×4.0KEV 1 | opensuse (4) · suse linux enterprise (3) · suse linux enterprise server (1) | — | |
| 12 | pypi | 7 | 2 | · | · | django (5) · plone (1) · zope2 (1) | — | ||
| 13 | atcom | 5 | · | · | · | NEWPoC 3 | netvolution (5) | — | |
| 14 | djangoproject | 5 | · | · | · | NEW | django (5) | — | |
| 15 | puppet | 5 | · | · | · | NEWPoC 3 | puppet (5) · puppet enterprise (1) | — | |
| 16 | puppetlabs | 5 | · | · | · | NEWPoC 3 | puppet (5) · puppet enterprise users (1) | — | |
| 17 | quagga | 5 | · | · | · | NEW | quagga (5) | — | |
| 18 | redhat | 5 | 1 | 1 | · | KEV 1 | red hat enterprise linux (3) · enterprise linux (1) · enterprise mrg (1) | — | |
| 19 | coldgen | 4 | · | · | · | NEWPoC 4 | coldusergroup (2) · coldcalendar (1) · coldbookmarks (1) | — | |
| 20 | kent-web | 4 | · | · | · | NEW | web forum (4) | — | |
| 21 | mit | 4 | · | · | · | ×4.0 | kerberos 5 (4) | — | |
| 22 | packagist | 4 | · | · | · | PoC 1 | dmk/webkitpdf (2) · baserproject/basercms (1) · dompdf/dompdf (1) | — | |
| 23 | сообщество свободного программного обеспечения | 4 | · | · | · | PoC 2 | debian gnu/linux (4) | — | |
| 24 | ffmpeg | 3 | · | · | · | ffmpeg (3) | — | ||
| 25 | joomla | 3 | · | · | · | PoC 2 | com camelcitydb2 (1) · com elite experts (1) · com weblinks (1) | — | |
| 26 | linux | 3 | · | · | · | PoC 1 | linux kernel (3) | — | |
| 27 | rubygems | 3 | · | · | · | ×3.0PoC 3 | puppet (3) | — | |
| 28 | symantec | 3 | · | · | · | ×3.0 | im manager (3) | — | |
| 29 | allpcscript | 2 | · | · | · | NEWPoC 2 | allpc (2) | — | |
| 30 | andreas kiefer | 2 | · | · | · | NEW | ke yac (2) | — | |
| 31 | apache | 2 | · | · | · | PoC 2 | http server (1) · jserv (1) | — | |
| 32 | apphp | 2 | · | · | · | NEWPoC 1 | apphp calendar (2) | — | |
| 33 | aspindir | 2 | · | · | · | PoC 2 | xweblog (2) | — | |
| 34 | basercms | 2 | · | · | · | NEW | basercms (2) | — | |
| 35 | canonical | 2 | 1 | 1 | · | KEV 1 | ubuntu linux (2) · ubuntu (1) | — | |
| 36 | cherokee | 2 | · | · | · | PoC 1 | cherokee (2) | — | |
| 37 | chillycms | 2 | · | · | · | NEWPoC 2 | chillycms (2) | — | |
| 38 | dev-team typoheads | 2 | · | · | · | NEW | webkitpdf (2) | — | |
| 39 | dlink | 2 | 2 | · | · | NEWPoC 2 | dcs-2121 firmware (2) · dcs-2121 (2) | — | |
| 40 | gnome | 2 | · | · | · | empathy (2) | — | ||
| 41 | harmistechnology | 2 | · | · | · | PoC 2 | com jedirectory (1) · com jeguestbook (1) | — | |
| 42 | hinnendahl | 2 | · | · | · | NEWPoC 2 | gaestebuch (1) · kontakt formular (1) | — | |
| 43 | joachim ruhs | 2 | · | · | · | event (1) · festat (1) | — | ||
| 44 | khader abbeb | 2 | · | · | · | NEWPoC 1 | entrans (2) | — | |
| 45 | marco hezel | 2 | 1 | · | · | NEW | hm tinymarket (2) | — | |
| 46 | micronetsoft | 2 | · | · | · | NEWPoC 2 | rental property website (1) · rv dealer website (1) | — | |
| 47 | nadine schwingler | 2 | · | · | · | NEW | ke questionnaire (2) | — | |
| 48 | peter proell | 2 | · | · | · | NEW | xing (1) · tweetbutton (1) | — | |
| 49 | photoindochina | 2 | · | · | · | NEWPoC 2 | com restaurantguide (2) | — | |
| 50 | plone | 2 | 2 | · | · | NEW | plone (2) · cmfeditions (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Mobile Apps117 CVE8 crit3 vendorsCVSS 6.5itunes (29) · mac os x (26) · mac os x server (26)
- Operating Systems90 CVE53 crit8 KEV20 vendorsCVSS 7.9gentoo linux (8) · groupwise (7) · debian gnu/linux (4)
- Web & CMS Plugins79 CVE4 crit56 vendorsCVSS 7.5basercms (2) · chillycms (2) · cms webmanager-pro (2)
- Databases62 CVE6 crit4 KEV3 vendorsCVSS 4.4solaris (10) · fusion middleware (9) · peoplesoft products (6)
- 8 crit5 vendorsCVSS 7.6ios (22) · ios xe (13) · catalyst 6500 (9)
- Enterprise Software38 CVE17 crit10 vendorsCVSS 7.5data protector for personal computers (7) · data protector notebook extension (7) · puppet (5)
- OSS Libraries25 CVE3 crit9 vendorsCVSS 6.8django (5) · plone (1) · zope2 (1)
- Security Products10 CVE3 crit8 vendorsCVSS 9.3im manager (3)
- DevTools & CI6 CVE2 vendorsCVSS 6.8puppet (5) · puppet enterprise users (1)
- Consumer Software6 CVE2 crit6 vendorsCVSS 10.0empathy (2) · libreoffice (2) · photoshop elements (1)
- Communications4 CVE4 vendorsCVSS 6.8exim (1) · webmail (1)
- Cloud & SaaS3 CVE4 crit2 vendorsCVSS 8.5ams (1) · fusion (1) · player (1)
- Unclassified35 CVE4 crit25 vendorsCVSS 6.8netvolution (5) · allpc (2) · entrans (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Mobile Apps▸ 2 | 117 | 8 | · | 3 | 15 | 6.5 | itunes (29) · mac os x (26) · mac os x server (26) |
| Operating Systems▸ 4 | 90 | 53 | 8 | 20 | 44 | 7.9 | gentoo linux (8) · groupwise (7) · debian gnu/linux (4) |
| Web & CMS Plugins▸ 5 | 79 | 4 | · | 56 | 64 | 7.5 | basercms (2) · chillycms (2) · cms webmanager-pro (2) |
| Databases▸ 2 | 62 | 6 | 4 | 3 | 42 | 4.4 | solaris (10) · fusion middleware (9) · peoplesoft products (6) |
| Networking Infrastructure▸ 2 | 54 | 8 | · | 5 | 32 | 7.6 | ios (22) · ios xe (13) · catalyst 6500 (9) |
| Enterprise Software▸ 3 | 38 | 17 | · | 10 | 26 | 7.5 | data protector for personal computers (7) · data protector notebook extension (7) · puppet (5) |
| OSS Libraries▸ 6 | 25 | 3 | · | 9 | 14 | 6.8 | django (5) · plone (1) · zope2 (1) |
| Security Products▸ 5 | 10 | 3 | · | 8 | 11 | 9.3 | im manager (3) |
| DevTools & CI▸ 2 | 6 | · | · | 2 | 3 | 6.8 | puppet (5) · puppet enterprise users (1) |
| Consumer Software▸ 3 | 6 | 2 | · | 6 | 6 | 10.0 | empathy (2) · libreoffice (2) · photoshop elements (1) |
| Communications▸ 3 | 4 | · | · | 4 | 4 | 6.8 | exim (1) · webmail (1) |
| Cloud & SaaS▸ 1 | 3 | 4 | · | 2 | 7 | 8.5 | ams (1) · fusion (1) · player (1) |
| Unclassified | 35 | 4 | · | 25 | 29 | 6.8 | netvolution (5) · allpc (2) · entrans (2) |
Weakness × Sector
Which weaknesses hit which solution categories in October 2011
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
89SQL Injection79XSS119Memory Buffer Bounds399CWE-39920Improper Input Validation94Code Injection264CWE-264200Information Exposure189CWE-18922Path TraversalOperating Systems83879712761Web & CMS Plugins482821722Consumer Software63052111Enterprise Software85114421Networking Infrastructure342045222OSS Libraries5124242Databases1Hardware Firmware32Security Products2311Cloud & SaaS113