month report
December 2011
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
December 2011 closed with 347 published CVEs. 77 criticals, parallels led volume, mostly via parallels plesk panel. Biggest breakout: adobe at ×7.0 their 12-month median. Top weakness class — CWE-79 (55 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
347
— MoM— YoY
Severity mix
77 / 71
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.4%
5 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
5196.9
n=5
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
3876
n=2
Detection gap
KEV pressure, no Nuclei coverage
December 2011 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1adobe7 CVE
Weakness × Vendor
What's spreading where in December 2011
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — December 2011
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #1parallels53 CVE
- #9schneider-electric7 CVE
- #10tor7 CVE
- #12oneclickorgs6 CVE
- #14wuzly5 CVE
- #223ssoftware3 CVE
- #24autosectools3 CVE
- #25.bbsoftware3 CVE
- #28homeseer3 CVE
- #35vtiger3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 53 CVE17 critCVSS 6.6NEWPoC 1parallels plesk panel (37) · parallels plesk small business panel (16)
- 27 CVE14 critCVSS 8.1PoC 3windows xp (11) · windows server 2003 (10) · windows 7 (10)
- 22 CVE2 critCVSS 6.2PoC 1chrome (19) · chrome os (1) · cr-48 chromebook (1)
- 11 CVE1 critCVSS 6.3PoC 2firefox (11) · thunderbird (10) · seamonkey (9)
- 10 CVE4 critCVSS 9.5PoC 1managed printing administration (4) · database archiving software (3) · digital sender 9250c (1)
- 10 CVE2 critCVSS 6.1PoC 1opera browser (10)
- 7 CVE4 critCVSS 8.2×7.0KEV 1PoC 1coldfusion (2) · flash player (2) · acrobat (2)
- 7 CVE1 critCVSS 5.7PoC 2red hat enterprise linux (4) · enterprise linux desktop (2) · enterprise linux workstation (1)
- 7 CVE4 critCVSS 8.7NEWPoC 1vijeo historian (4) · citecthistorian (4) · citectscada reports (4)
- 7 CVECVSS 5.0NEWtor (7)
- 6 CVE1 critCVSS 6.4PoC 2debian linux (6)
- 6 CVECVSS 5.3NEWone click orgs (6)
- 5 CVECVSS 5.6PoC 1safari (5) · itunes (3) · iphone os (3)
- 5 CVECVSS 6.6NEWwuzly (5)
- 4 CVECVSS 5.9PoC 1ubuntu linux (3) · ubuntu (1)
- 4 CVE1 critCVSS 7.6PoC 1fedora (4)
- 4 CVECVSS 5.2PoC 2org.eclipse.jetty:jetty-server (1) · org.apache.geronimo:geronimo (1) · org.jenkins-ci.main:jenkins-core (1)
- 4 CVE1 critCVSS 6.3groupwise messenger (1) · messenger (1) · sentinel log manager (1)
- 4 CVECVSS 6.0PoC 1outside in technology (2) · sun storage common array manager (1) · glassfish server (1)
- 4 CVECVSS 4.8celery (1) · nova (1) · plone (1)
- 4 CVE1 critCVSS 7.6PoC 1linux enterprise desktop (3) · linux enterprise server (3) · linux enterprise software development kit (3)
- 3 CVE1 critCVSS 7.5NEWPoC 3codesys (3)
- 3 CVECVSS 5.6igss (3)
- 3 CVECVSS 6.2NEWv-cms (3)
- 3 CVE3 critCVSS 9.3NEWbb flashback (3)
- 3 CVECVSS 5.4gentoo linux (3)
- 3 CVE1 critCVSS 6.2PoC 1inetutils (1) · gnutls (1) · mailman (1)
- 3 CVECVSS 6.2NEWhomeseer hs2 (3)
- 3 CVECVSS 6.5rational asset manager (1) · lotus domino (1) · tivoli netcool\/reporter (1)
- 3 CVE1 critCVSS 7.3PoC 1suse linux enterprise (2) · opensuse leap (1)
- 3 CVECVSS 4.5phpmyadmin/phpmyadmin (2) · moodle/moodle (1)
- 3 CVECVSS 4.3phpmyadmin (3)
- 3 CVECVSS 5.0×3.0pidgin (3)
- 3 CVE1 critCVSS 6.4smarterstats (3)
- 3 CVECVSS 4.2NEWPoC 1vtiger crm (3)
- 3 CVECVSS 5.4PoC 1zabbix (3)
- 3 CVE1 critCVSS 6.4PoC 2debian gnu/linux (3)
- 2 CVECVSS 6.4PoC 1geronimo (1) · http server (1)
- 2 CVECVSS 5.5NEWPoC 2com listing (2)
- 2 CVECVSS 5.9NEWPoC 2bestshoppro (2)
- 2 CVECVSS 4.7asterisk (2)
- 2 CVECVSS 5.4NEWPoC 2dolibarr erp\/crm (2)
- 2 CVECVSS 6.8rsa adaptive authentication on-premise (2)
- 2 CVE2 critCVSS 9.7NEWweb studio (2)
- 2 CVECVSS 5.9NEWPoC 2biznis heroj (2)
- 2 CVECVSS 6.8NEWjasper (2)
- 2 CVECVSS 5.9NEWPoC 2com hmcommunity (2)
- 2 CVE2 critCVSS 9.3NEWPoC 2ripper (1) · rm-mp3 converter (1)
- 2 CVE1 critCVSS 8.4PoC 1krb5-appl (1) · mit kerberos (1)
- 2 CVE2 critCVSS 9.7winamp (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | parallels | 53 | 17 | · | · | NEWPoC 1 | parallels plesk panel (37) · parallels plesk small business panel (16) | — | |
| 2 | microsoft | 27 | 14 | · | · | PoC 3 | windows xp (11) · windows server 2003 (10) · windows 7 (10) | — | |
| 3 | 22 | 2 | · | · | PoC 1 | chrome (19) · chrome os (1) · cr-48 chromebook (1) | — | ||
| 4 | mozilla | 11 | 1 | · | · | PoC 2 | firefox (11) · thunderbird (10) · seamonkey (9) | — | |
| 5 | hp | 10 | 4 | · | · | PoC 1 | managed printing administration (4) · database archiving software (3) · digital sender 9250c (1) | — | |
| 6 | opera | 10 | 2 | · | · | PoC 1 | opera browser (10) | — | |
| 7 | adobe | 7 | 4 | 1 | · | ×7.0KEV 1PoC 1 | coldfusion (2) · flash player (2) · acrobat (2) | — | |
| 8 | redhat | 7 | 1 | · | · | PoC 2 | red hat enterprise linux (4) · enterprise linux desktop (2) · enterprise linux workstation (1) | — | |
| 9 | schneider-electric | 7 | 4 | · | · | NEWPoC 1 | vijeo historian (4) · citecthistorian (4) · citectscada reports (4) | — | |
| 10 | tor | 7 | · | · | · | NEW | tor (7) | — | |
| 11 | debian | 6 | 1 | · | · | PoC 2 | debian linux (6) | — | |
| 12 | oneclickorgs | 6 | · | · | · | NEW | one click orgs (6) | — | |
| 13 | apple | 5 | · | · | · | PoC 1 | safari (5) · itunes (3) · iphone os (3) | — | |
| 14 | wuzly | 5 | · | · | · | NEW | wuzly (5) | — | |
| 15 | canonical | 4 | · | · | · | PoC 1 | ubuntu linux (3) · ubuntu (1) | — | |
| 16 | fedoraproject | 4 | 1 | · | · | PoC 1 | fedora (4) | — | |
| 17 | maven | 4 | · | · | · | PoC 2 | org.eclipse.jetty:jetty-server (1) · org.apache.geronimo:geronimo (1) · org.jenkins-ci.main:jenkins-core (1) | — | |
| 18 | novell | 4 | 1 | · | · | groupwise messenger (1) · messenger (1) · sentinel log manager (1) | — | ||
| 19 | oracle | 4 | · | · | · | PoC 1 | outside in technology (2) · sun storage common array manager (1) · glassfish server (1) | — | |
| 20 | pypi | 4 | · | · | · | celery (1) · nova (1) · plone (1) | — | ||
| 21 | suse | 4 | 1 | · | · | PoC 1 | linux enterprise desktop (3) · linux enterprise server (3) · linux enterprise software development kit (3) | — | |
| 22 | 3ssoftware | 3 | 1 | · | · | NEWPoC 3 | codesys (3) | — | |
| 23 | 7t | 3 | · | · | · | igss (3) | — | ||
| 24 | autosectools | 3 | · | · | · | NEW | v-cms (3) | — | |
| 25 | .bbsoftware | 3 | 3 | · | · | NEW | bb flashback (3) | — | |
| 26 | gentoo foundation inc. | 3 | · | · | · | gentoo linux (3) | — | ||
| 27 | gnu | 3 | 1 | · | · | PoC 1 | inetutils (1) · gnutls (1) · mailman (1) | — | |
| 28 | homeseer | 3 | · | · | · | NEW | homeseer hs2 (3) | — | |
| 29 | ibm | 3 | · | · | · | rational asset manager (1) · lotus domino (1) · tivoli netcool\/reporter (1) | — | ||
| 30 | novell inc. | 3 | 1 | · | · | PoC 1 | suse linux enterprise (2) · opensuse leap (1) | — | |
| 31 | packagist | 3 | · | · | · | phpmyadmin/phpmyadmin (2) · moodle/moodle (1) | — | ||
| 32 | phpmyadmin | 3 | · | · | · | phpmyadmin (3) | — | ||
| 33 | pidgin | 3 | · | · | · | ×3.0 | pidgin (3) | — | |
| 34 | smartertools | 3 | 1 | · | · | smarterstats (3) | — | ||
| 35 | vtiger | 3 | · | · | · | NEWPoC 1 | vtiger crm (3) | — | |
| 36 | zabbix | 3 | · | · | · | PoC 1 | zabbix (3) | — | |
| 37 | сообщество свободного программного обеспечения | 3 | 1 | · | · | PoC 2 | debian gnu/linux (3) | — | |
| 38 | apache | 2 | · | · | · | PoC 1 | geronimo (1) · http server (1) | — | |
| 39 | barter-sites | 2 | · | · | · | NEWPoC 2 | com listing (2) | — | |
| 40 | bst | 2 | · | · | · | NEWPoC 2 | bestshoppro (2) | — | |
| 41 | digium | 2 | · | · | · | asterisk (2) | — | ||
| 42 | dolibarr | 2 | · | · | · | NEWPoC 2 | dolibarr erp\/crm (2) | — | |
| 43 | emc | 2 | · | · | · | rsa adaptive authentication on-premise (2) | — | ||
| 44 | indusoft | 2 | 2 | · | · | NEW | web studio (2) | — | |
| 45 | infoproject | 2 | · | · | · | NEWPoC 2 | biznis heroj (2) | — | |
| 46 | jasper project | 2 | · | · | · | NEW | jasper (2) | — | |
| 47 | joomlaextensions | 2 | · | · | · | NEWPoC 2 | com hmcommunity (2) | — | |
| 48 | mini-stream | 2 | 2 | · | · | NEWPoC 2 | ripper (1) · rm-mp3 converter (1) | — | |
| 49 | mit | 2 | 1 | · | · | PoC 1 | krb5-appl (1) · mit kerberos (1) | — | |
| 50 | nullsoft | 2 | 2 | · | · | winamp (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Cloud & SaaS57 CVE18 crit4 vendorsCVSS 6.7parallels plesk panel (37) · parallels plesk small business panel (16)
- Web & CMS Plugins51 CVE35 vendorsCVSS 7.5one click orgs (6) · biznis heroj (2) · com hmcommunity (2)
- Operating Systems50 CVE43 crit19 vendorsCVSS 8.9windows xp (11) · windows 7 (10) · windows server 2003 (10)
- Consumer Software39 CVE24 crit4 KEV12 vendorsCVSS 9.7firefox (11) · opera browser (10) · thunderbird (10)
- Enterprise Software34 CVE47 crit17 vendorsCVSS 9.0managed printing administration (4) · database archiving software (3) · zabbix (3)
- Mobile Apps27 CVE4 crit3 vendorsCVSS 6.4chrome (19) · chrome os (1) · cr-48 chromebook (1)
- OSS Libraries25 CVE2 crit18 vendorsCVSS 5.9php (2) · colord (1) · gnutls (1)
- ICS / OT / IoT19 CVE35 crit7 vendorsCVSS 8.5citecthistorian (4) · citectscada reports (4) · vijeo historian (4)
- Security Products19 CVE3 crit10 vendorsCVSS 10.0tor (7)
- Communications12 CVE2 crit7 vendorsCVSS 10.0smarterstats (3) · atmail open (1) · imapd (1)
- 3 crit1 KEV9 vendorsCVSS 8.6ac700 chromebook (1) · dir-300 firmware (1) · skyrouter (1)
- Databases7 CVE2 vendorsCVSS 6.0outside in technology (2) · glassfish server (1) · sun storage common array manager (1)
- DevTools & CI1 CVE1 vendorsCVSS 2.6jenkins (1)
- Hardware Firmware1 CVE1 vendorsCVSS 7.2stereoscopic 3d driver (1)
- Unclassified17 CVE4 crit13 vendorsCVSS 7.2bb flashback (3) · com listing (2) · restorepoint (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Cloud & SaaS▸ 3 | 57 | 18 | · | 4 | 5 | 6.7 | parallels plesk panel (37) · parallels plesk small business panel (16) |
| Web & CMS Plugins▸ 5 | 51 | · | · | 35 | 37 | 7.5 | one click orgs (6) · biznis heroj (2) · com hmcommunity (2) |
| Operating Systems▸ 4 | 50 | 43 | · | 19 | 50 | 8.9 | windows xp (11) · windows 7 (10) · windows server 2003 (10) |
| Consumer Software▸ 5 | 39 | 24 | 4 | 12 | 27 | 9.7 | firefox (11) · opera browser (10) · thunderbird (10) |
| Enterprise Software▸ 5 | 34 | 47 | · | 17 | 66 | 9.0 | managed printing administration (4) · database archiving software (3) · zabbix (3) |
| Mobile Apps▸ 2 | 27 | 4 | · | 3 | 10 | 6.4 | chrome (19) · chrome os (1) · cr-48 chromebook (1) |
| OSS Libraries▸ 6 | 25 | 2 | · | 18 | 24 | 5.9 | php (2) · colord (1) · gnutls (1) |
| ICS / OT / IoT▸ 2 | 19 | 35 | · | 7 | 30 | 8.5 | citecthistorian (4) · citectscada reports (4) · vijeo historian (4) |
| Security Products▸ 4 | 19 | 3 | · | 10 | 11 | 10.0 | tor (7) |
| Communications▸ 4 | 12 | 2 | · | 7 | 7 | 10.0 | smarterstats (3) · atmail open (1) · imapd (1) |
| Networking Infrastructure▸ 4 | 10 | 3 | 1 | 9 | 9 | 8.6 | ac700 chromebook (1) · dir-300 firmware (1) · skyrouter (1) |
| Databases▸ 2 | 7 | · | · | 2 | 4 | 6.0 | outside in technology (2) · glassfish server (1) · sun storage common array manager (1) |
| DevTools & CI▸ 1 | 1 | · | · | 1 | 1 | 2.6 | jenkins (1) |
| Hardware Firmware▸ 1 | 1 | · | · | 1 | 1 | 7.2 | stereoscopic 3d driver (1) |
| Unclassified | 17 | 4 | · | 13 | 14 | 7.2 | bb flashback (3) · com listing (2) · restorepoint (2) |
Weakness × Sector
Which weaknesses hit which solution categories in December 2011
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS200Information Exposure264CWE-26489SQL Injection22Path Traversal119Memory Buffer Bounds20Improper Input Validation94Code Injection399CWE-399125Out-of-bounds ReadConsumer Software56131374556Cloud & SaaS719533Web & CMS Plugins16213737Operating Systems127244423Enterprise Software9365311OSS Libraries4114261Communications353133Security Products3542331ICS / OT / IoT3227Networking Infrastructure1115