month report
January 2012
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
January 2012 closed with 316 published CVEs. 39 criticals, oracle led volume, mostly via mysql. Biggest breakout: apache at ×8.0 their 12-month median. Top weakness class — CWE-79 (42 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
316
— MoM— YoY
Severity mix
39 / 38
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
2.8%
9 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
5159.2
n=9
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
3666
n=1
Weakness × Vendor
What's spreading where in January 2012
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — January 2012
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
- 8.0×apache16 CVE
- 6.5×maven13 CVE
- 5.0×adobe5 CVE
- 3.0×novell inc.6 CVE
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #5sitracker15 CVE
- #16siemens6 CVE
- #19wordpress5 CVE
- #25tencent4 CVE
- #27flexerasoftware3 CVE
- #30maradns3 CVE
- #32schneider electric3 CVE
- #33schneider-electric3 CVE
- #34stone-ware3 CVE
- #353602 CVE
Top vendors
Ranked by distinct CVE count this period.
- 66 CVECVSS 4.0mysql (27) · fusion middleware (9) · jd edwards enterpriseone tools (8)
- 17 CVECVSS 3.9mysql (17)
- 16 CVE1 critCVSS 5.3×8.0KEV 1Nuclei 2PoC 6tomcat (7) · struts (5) · http server (3)
- 15 CVE6 critCVSS 6.7websphere application server (6) · spss dimensions (2) · spss data collection (2)
- 15 CVECVSS 5.9NEWPoC 7support incident tracker (15)
- 13 CVE1 critCVSS 6.1×6.5KEV 1Nuclei 2PoC 5org.apache.tomcat:tomcat (7) · org.apache.struts.xwork:xwork-core (4) · org.apache.struts:struts2-core (3)
- 11 CVE2 critCVSS 7.8chrome (8) · android (2) · chrome os (1)
- 9 CVECVSS 5.2PoC 1enterprise linux desktop (3) · enterprise linux workstation (3) · enterprise linux server (3)
- 8 CVECVSS 4.3PoC 2linux kernel (8)
- 8 CVE5 critCVSS 8.6windows server 2008 (6) · windows xp (6) · windows server 2003 (6)
- 8 CVE1 critCVSS 5.5openssl (8)
- 8 CVECVSS 4.3sunos (8)
- 6 CVECVSS 5.3gentoo linux (6)
- 6 CVE4 critCVSS 8.7easy printer care software (2) · storageworks p2000 g3 msa fc\/iscsi dual combo controller lff array system (1) · diagnostics (1)
- 6 CVECVSS 5.0×3.0opensuse (4) · suse linux enterprise (2)
- 6 CVE1 critCVSS 6.3NEWautomation license manager (4) · tecnomatix factorylink (2)
- 5 CVE3 critCVSS 8.8×5.0acrobat (5) · reader (5)
- 5 CVECVSS 5.3debian linux (5)
- 5 CVECVSS 4.9NEWNuclei 1PoC 4wordpress (5)
- 4 CVE1 critCVSS 7.0KEV 1Nuclei 1PoC 4struts (4)
- 4 CVECVSS 7.5iphone os (4) · safari (3) · itunes (2)
- 4 CVECVSS 6.2PoC 1bugzilla (4)
- 4 CVE1 critCVSS 5.5PoC 3splunk (4)
- 4 CVECVSS 4.6PoC 1linux enterprise server (4) · linux enterprise software development kit (2)
- 4 CVECVSS 5.8NEWmicroblogpad (1) · mobileqq (1) · qqpimsecure (1)
- 4 CVECVSS 5.3PoC 1debian gnu/linux (4) · encode module (1) · perl (1)
- 3 CVE2 critCVSS 7.4NEWflexnet publisher (2) · installshield (1)
- 3 CVE1 critCVSS 7.7it operations director (1) · cobol2002 net server suite (1) · cobol2002 net client suite (1)
- 3 CVECVSS 6.1Nuclei 1PoC 3ibm call center for commerce (3)
- 3 CVECVSS 5.0NEWmaradns (3)
- 3 CVECVSS 5.0openssl (3)
- 3 CVE1 critCVSS 7.8NEWmodicon m340 (3)
- 3 CVE1 critCVSS 7.8NEWmodicon quantum plc (3)
- 3 CVECVSS 6.2NEWwebnetwork (3)
- 2 CVECVSS 5.8NEWkouxin (1) · mobilesafe (1)
- 2 CVE2 critCVSS 9.7digital media manager (1) · ip video phone e20 (1) · telepresence e20 software (1)
- 2 CVECVSS 5.0NEWcascade datahub (2) · cogent datahub (2) · opc datahub (2)
- 2 CVECVSS 4.7e107 (2)
- 2 CVE1 critCVSS 5.7networker (1) · sourceone email management (1)
- 2 CVE1 critCVSS 6.8emacs (1) · gnutls (1)
- 2 CVECVSS 4.3groupware webmail edition (2) · dynamic imp (1) · imp (1)
- 2 CVECVSS 5.0mediawiki (2)
- 2 CVE2 critCVSS 9.3NEWPoC 2ntr activex control (2)
- 2 CVECVSS 4.5opensuse (2)
- 2 CVECVSS 4.3NEWoscommerce (2) · online merchant (1)
- 2 CVECVSS 4.3phpmyadmin/phpmyadmin (2)
- 2 CVECVSS 5.9NEWpfsense (2)
- 2 CVECVSS 5.0PoC 2php (2)
- 2 CVECVSS 4.3phpmyadmin (2)
- 2 CVE2 critCVSS 9.3NEWrenren talk (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 66 | · | · | · | mysql (27) · fusion middleware (9) · jd edwards enterpriseone tools (8) | — | ||
| 2 | mysql | 17 | · | · | · | mysql (17) | — | ||
| 3 | apache | 16 | 1 | 1 | 2 | ×8.0KEV 1Nuclei 2PoC 6 | tomcat (7) · struts (5) · http server (3) | — | |
| 4 | ibm | 15 | 6 | · | · | websphere application server (6) · spss dimensions (2) · spss data collection (2) | — | ||
| 5 | sitracker | 15 | · | · | · | NEWPoC 7 | support incident tracker (15) | — | |
| 6 | maven | 13 | 1 | 1 | 2 | ×6.5KEV 1Nuclei 2PoC 5 | org.apache.tomcat:tomcat (7) · org.apache.struts.xwork:xwork-core (4) · org.apache.struts:struts2-core (3) | — | |
| 7 | 11 | 2 | · | · | chrome (8) · android (2) · chrome os (1) | — | |||
| 8 | redhat | 9 | · | · | · | PoC 1 | enterprise linux desktop (3) · enterprise linux workstation (3) · enterprise linux server (3) | — | |
| 9 | linux | 8 | · | · | · | PoC 2 | linux kernel (8) | — | |
| 10 | microsoft | 8 | 5 | · | · | windows server 2008 (6) · windows xp (6) · windows server 2003 (6) | — | ||
| 11 | openssl | 8 | 1 | · | · | openssl (8) | — | ||
| 12 | sun | 8 | · | · | · | sunos (8) | — | ||
| 13 | gentoo foundation inc. | 6 | · | · | · | gentoo linux (6) | — | ||
| 14 | hp | 6 | 4 | · | · | easy printer care software (2) · storageworks p2000 g3 msa fc\/iscsi dual combo controller lff array system (1) · diagnostics (1) | — | ||
| 15 | novell inc. | 6 | · | · | · | ×3.0 | opensuse (4) · suse linux enterprise (2) | — | |
| 16 | siemens | 6 | 1 | · | · | NEW | automation license manager (4) · tecnomatix factorylink (2) | — | |
| 17 | adobe | 5 | 3 | · | · | ×5.0 | acrobat (5) · reader (5) | — | |
| 18 | debian | 5 | · | · | · | debian linux (5) | — | ||
| 19 | wordpress | 5 | · | · | 1 | NEWNuclei 1PoC 4 | wordpress (5) | — | |
| 20 | apache software foundation | 4 | 1 | 1 | 1 | KEV 1Nuclei 1PoC 4 | struts (4) | — | |
| 21 | apple | 4 | · | · | · | iphone os (4) · safari (3) · itunes (2) | — | ||
| 22 | mozilla | 4 | · | · | · | PoC 1 | bugzilla (4) | — | |
| 23 | splunk | 4 | 1 | · | · | PoC 3 | splunk (4) | — | |
| 24 | suse | 4 | · | · | · | PoC 1 | linux enterprise server (4) · linux enterprise software development kit (2) | — | |
| 25 | tencent | 4 | · | · | · | NEW | microblogpad (1) · mobileqq (1) · qqpimsecure (1) | — | |
| 26 | сообщество свободного программного обеспечения | 4 | · | · | · | PoC 1 | debian gnu/linux (4) · encode module (1) · perl (1) | — | |
| 27 | flexerasoftware | 3 | 2 | · | · | NEW | flexnet publisher (2) · installshield (1) | — | |
| 28 | hitachi | 3 | 1 | · | · | it operations director (1) · cobol2002 net server suite (1) · cobol2002 net client suite (1) | — | ||
| 29 | ibm corp. | 3 | · | · | 1 | Nuclei 1PoC 3 | ibm call center for commerce (3) | — | |
| 30 | maradns | 3 | · | · | · | NEW | maradns (3) | — | |
| 31 | openssl software foundation | 3 | · | · | · | openssl (3) | — | ||
| 32 | schneider electric | 3 | 1 | · | · | NEW | modicon m340 (3) | — | |
| 33 | schneider-electric | 3 | 1 | · | · | NEW | modicon quantum plc (3) | — | |
| 34 | stone-ware | 3 | · | · | · | NEW | webnetwork (3) | — | |
| 35 | 360 | 2 | · | · | · | NEW | kouxin (1) · mobilesafe (1) | — | |
| 36 | cisco | 2 | 2 | · | · | digital media manager (1) · ip video phone e20 (1) · telepresence e20 software (1) | — | ||
| 37 | cogentdatahub | 2 | · | · | · | NEW | cascade datahub (2) · cogent datahub (2) · opc datahub (2) | — | |
| 38 | e107 | 2 | · | · | · | e107 (2) | — | ||
| 39 | emc | 2 | 1 | · | · | networker (1) · sourceone email management (1) | — | ||
| 40 | gnu | 2 | 1 | · | · | emacs (1) · gnutls (1) | — | ||
| 41 | horde | 2 | · | · | · | groupware webmail edition (2) · dynamic imp (1) · imp (1) | — | ||
| 42 | mediawiki | 2 | · | · | · | mediawiki (2) | — | ||
| 43 | ntrglobal | 2 | 2 | · | · | NEWPoC 2 | ntr activex control (2) | — | |
| 44 | opensuse | 2 | · | · | · | opensuse (2) | — | ||
| 45 | oscommerce | 2 | · | · | · | NEW | oscommerce (2) · online merchant (1) | — | |
| 46 | packagist | 2 | · | · | · | phpmyadmin/phpmyadmin (2) | — | ||
| 47 | pfsense | 2 | · | · | · | NEW | pfsense (2) | — | |
| 48 | php | 2 | · | · | · | PoC 2 | php (2) | — | |
| 49 | phpmyadmin | 2 | · | · | · | phpmyadmin (2) | — | ||
| 50 | renren | 2 | 2 | · | · | NEW | renren talk (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Databases73 CVE5 vendorsCVSS 5.0mysql (44) · fusion middleware (9) · jd edwards enterpriseone tools (8)
- Operating Systems50 CVE18 crit16 vendorsCVSS 8.6linux kernel (8) · gentoo linux (6) · opensuse (6)
- Web & CMS Plugins47 CVE2 crit2 KEV25 vendorsCVSS 5.9struts (9) · tomcat (7) · wordpress (5)
- Enterprise Software40 CVE21 crit11 vendorsCVSS 7.5websphere application server (6) · easy printer care software (2) · flexnet publisher (2)
- OSS Libraries34 CVE4 crit2 KEV13 vendorsCVSS 6.1openssl (11) · php (2) · simplesamlphp (2)
- Mobile Apps16 CVE4 crit4 vendorsCVSS 7.9chrome (8) · android (2) · chrome os (1)
- Security Products16 CVE3 crit9 vendorsCVSS 7.1envision (1) · networker (1) · openid4java (1)
- Consumer Software13 CVE7 crit6 vendorsCVSS 8.8acrobat (5) · reader (5) · finaldraft (1)
- 4 crit7 vendorsCVSS 9.1maradns (3) · dhcp (1)
- Communications9 CVE5 vendorsCVSS 5.7messenger (1) · microblogpad (1) · mobileqq (1)
- ICS / OT / IoT6 CVE3 crit5 vendorsCVSS 7.7modicon m340 (3) · modicon quantum plc (3) · codesys (1)
- Cloud & SaaS5 CVE4 vendorsCVSS 6.3qemu-kvm (1) · zimbra desktop (1)
- DevTools & CI1 CVE1 vendorsCVSS 4.9torque resource manager (1)
- Hardware Firmware1 CVE1 vendorsCVSS 5.0air 4450 (1)
- Unclassified36 CVE5 crit16 vendorsCVSS 6.2support incident tracker (15) · webnetwork (3) · count per day (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Databases▸ 3 | 73 | · | · | 5 | 18 | 5.0 | mysql (44) · fusion middleware (9) · jd edwards enterpriseone tools (8) |
| Operating Systems▸ 3 | 50 | 18 | · | 16 | 34 | 8.6 | linux kernel (8) · gentoo linux (6) · opensuse (6) |
| Web & CMS Plugins▸ 5 | 47 | 2 | 2 | 25 | 29 | 5.9 | struts (9) · tomcat (7) · wordpress (5) |
| Enterprise Software▸ 5 | 40 | 21 | · | 11 | 36 | 7.5 | websphere application server (6) · easy printer care software (2) · flexnet publisher (2) |
| OSS Libraries▸ 4 | 34 | 4 | 2 | 13 | 17 | 6.1 | openssl (11) · php (2) · simplesamlphp (2) |
| Mobile Apps▸ 2 | 16 | 4 | · | 4 | 10 | 7.9 | chrome (8) · android (2) · chrome os (1) |
| Security Products▸ 5 | 16 | 3 | · | 9 | 11 | 7.1 | envision (1) · networker (1) · openid4java (1) |
| Consumer Software▸ 4 | 13 | 7 | · | 6 | 7 | 8.8 | acrobat (5) · reader (5) · finaldraft (1) |
| Networking Infrastructure▸ 3 | 10 | 4 | · | 7 | 9 | 9.1 | maradns (3) · dhcp (1) |
| Communications▸ 3 | 9 | · | · | 5 | 11 | 5.7 | messenger (1) · microblogpad (1) · mobileqq (1) |
| ICS / OT / IoT▸ 1 | 6 | 3 | · | 5 | 5 | 7.7 | modicon m340 (3) · modicon quantum plc (3) · codesys (1) |
| Cloud & SaaS▸ 3 | 5 | · | · | 4 | 5 | 6.3 | qemu-kvm (1) · zimbra desktop (1) |
| DevTools & CI▸ 1 | 1 | · | · | 1 | 1 | 4.9 | torque resource manager (1) |
| Hardware Firmware▸ 1 | 1 | · | · | 1 | 1 | 5.0 | air 4450 (1) |
| Unclassified | 36 | 5 | · | 16 | 17 | 6.2 | support incident tracker (15) · webnetwork (3) · count per day (2) |
Weakness × Sector
Which weaknesses hit which solution categories in January 2012
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS264CWE-264119Memory Buffer Bounds200Information Exposure399CWE-39920Improper Input Validation89SQL Injection94Code Injection22Path Traversal287Improper AuthenticationEnterprise Software922421443Operating Systems4544621Databases22111OSS Libraries56118421Web & CMS Plugins13431311Consumer Software122111Networking Infrastructure1322212Communications361Security Products261111112ICS / OT / IoT314211