month report
April 2012
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
April 2012 closed with 228 published CVEs. 59 criticals, mozilla led volume, mostly via firefox mobile. Biggest breakout: mozilla at ×16.5 their 12-month median. Top weakness class — CWE-119 (58 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
228
— MoM— YoY
Severity mix
59 / 33
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
2.6%
6 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
5066.9
n=6
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
3603
n=2
Detection gap
KEV pressure, no Nuclei coverage
April 2012 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 2microsoft11 CVE
Weakness × Vendor
What's spreading where in April 2012
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — April 2012
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
- 16.5×mozilla33 CVE
- 10.0×novell inc.20 CVE
- 6.0×adobe6 CVE
- 4.0×apple8 CVE
- 3.3×wireshark10 CVE
Top vendors
Ranked by distinct CVE count this period.
- 33 CVE24 critCVSS 7.5×16.5firefox mobile (19) · firefox (12) · seamonkey (12)
- 20 CVE19 critCVSS 9.1×10.0opensuse (20)
- 19 CVE18 critCVSS 9.1freetype (19)
- 15 CVE3 critCVSS 7.3PoC 3chrome (14) · sketchup (1)
- 11 CVE6 critCVSS 8.4KEV 2internet explorer (5) · office (2) · forefront unified access gateway (2)
- 10 CVE1 critCVSS 4.7system management homepage (3) · onboard administrator (3) · hp-ux (1)
- 10 CVECVSS 4.2×3.3PoC 3wireshark (10)
- 9 CVE1 critCVSS 6.4PoC 2gentoo linux (9)
- 8 CVECVSS 6.8×4.0PoC 2iphone os (8) · safari (8) · itunes (7)
- 8 CVECVSS 2.6NEWPoC 5quickbooks (8)
- 7 CVECVSS 4.8PoC 3enterprise linux (4) · red hat enterprise linux (2) · openssl (1)
- 6 CVE5 critCVSS 9.2×6.0acrobat (4) · acrobat reader (4) · air (2)
- 6 CVECVSS 5.1helix mobile server (6) · helix server (6)
- 6 CVE2 critCVSS 6.5Nuclei 6PoC 1wordpress (6)
- 5 CVE1 critCVSS 5.4tivoli directory server (3) · tivoli event pump (1) · rational clearquest (1)
- 5 CVECVSS 6.7wonderware information server (5) · archestra application object toolkit (2) · foxboro control software (2)
- 5 CVE2 critCVSS 7.4NEWh0-ecom (5) · h0-ecom100 (5) · h2-ecom (5)
- 5 CVE2 critCVSS 6.7PoC 2zenworks configuration management (4) · imanager (1)
- 5 CVE1 critCVSS 8.0NEWPoC 1ruggedcom rugged operating system (2) · scalance s602 (2) · scalance s612 (2)
- 4 CVE2 critCVSS 7.2NEWfrontvue (4) · pcvue (4) · plantvue (4)
- 4 CVECVSS 5.0NEWwebmi2ads (4)
- 4 CVECVSS 6.6PoC 1firepass (2) · nginx (2)
- 4 CVECVSS 7.2libarchive (4)
- 4 CVECVSS 5.3NEWPoC 2owncloud (4) · owncloud server (4)
- 3 CVECVSS 6.5NEWopen source (3)
- 3 CVE3 critCVSS 9.3webex recording format player (3)
- 3 CVECVSS 3.9quagga (3)
- 2 CVECVSS 6.7hadoop (1) · http server (1)
- 2 CVECVSS 6.5NEWcloudera cdh (1) · cloudera manager (1) · cloudera service and configuration manager (1)
- 2 CVECVSS 4.7debian linux (2)
- 2 CVECVSS 4.3NEWdotnetnuke (2)
- 2 CVECVSS 6.4PoC 2data protection advisor (2)
- 2 CVECVSS 5.9fedora (2)
- 2 CVE2 critCVSS 9.7NEWgenesis32 (2) · bizviz (2)
- 2 CVECVSS 5.5NEWsencha sns (2)
- 2 CVE1 critCVSS 8.4ichitaro portable with oreplug (2) · ichitaro (2) · ichitaro viewer (2)
- 2 CVE1 critCVSS 7.2NEWgallery (2)
- 2 CVE1 critCVSS 7.2NEWgallery (2)
- 2 CVECVSS 7.5PoC 1openssl (2)
- 2 CVECVSS 4.7redmine (2)
- 2 CVECVSS 5.0NEWfactorytalk (2) · rslogix 5000 (2)
- 2 CVECVSS 5.0PoC 2spree (2)
- 2 CVE1 critCVSS 8.3samba (2)
- 2 CVECVSS 5.9NEWmovable type (2)
- 2 CVECVSS 5.0NEWPoC 2spree (2)
- 2 CVECVSS 5.8centos (2)
- 2 CVECVSS 8.3esx (2) · esxi (2) · fusion (1)
- 1 CVECVSS 7.5NEW360zip (1)
- 1 CVECVSS 7.7NEWinterlink module (1) · quickteach (1) · robotstudio lite (1)
- 1 CVECVSS 5.0NEWtrace mode data center (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | mozilla | 33 | 24 | · | · | ×16.5 | firefox mobile (19) · firefox (12) · seamonkey (12) | — | |
| 2 | novell inc. | 20 | 19 | · | · | ×10.0 | opensuse (20) | — | |
| 3 | freetype | 19 | 18 | · | · | freetype (19) | — | ||
| 4 | 15 | 3 | · | · | PoC 3 | chrome (14) · sketchup (1) | — | ||
| 5 | microsoft | 11 | 6 | 2 | · | KEV 2 | internet explorer (5) · office (2) · forefront unified access gateway (2) | — | |
| 6 | hp | 10 | 1 | · | · | system management homepage (3) · onboard administrator (3) · hp-ux (1) | — | ||
| 7 | wireshark | 10 | · | · | · | ×3.3PoC 3 | wireshark (10) | — | |
| 8 | gentoo foundation inc. | 9 | 1 | · | · | PoC 2 | gentoo linux (9) | — | |
| 9 | apple | 8 | · | · | · | ×4.0PoC 2 | iphone os (8) · safari (8) · itunes (7) | — | |
| 10 | intuit | 8 | · | · | · | NEWPoC 5 | quickbooks (8) | — | |
| 11 | redhat | 7 | · | · | · | PoC 3 | enterprise linux (4) · red hat enterprise linux (2) · openssl (1) | — | |
| 12 | adobe | 6 | 5 | · | · | ×6.0 | acrobat (4) · acrobat reader (4) · air (2) | — | |
| 13 | realnetworks | 6 | · | · | · | helix mobile server (6) · helix server (6) | — | ||
| 14 | wordpress | 6 | 2 | · | 6 | Nuclei 6PoC 1 | wordpress (6) | — | |
| 15 | ibm | 5 | 1 | · | · | tivoli directory server (3) · tivoli event pump (1) · rational clearquest (1) | — | ||
| 16 | invensys | 5 | · | · | · | wonderware information server (5) · archestra application object toolkit (2) · foxboro control software (2) | — | ||
| 17 | koyo | 5 | 2 | · | · | NEW | h0-ecom (5) · h0-ecom100 (5) · h2-ecom (5) | — | |
| 18 | novell | 5 | 2 | · | · | PoC 2 | zenworks configuration management (4) · imanager (1) | — | |
| 19 | siemens | 5 | 1 | · | · | NEWPoC 1 | ruggedcom rugged operating system (2) · scalance s602 (2) · scalance s612 (2) | — | |
| 20 | arcinfo | 4 | 2 | · | · | NEW | frontvue (4) · pcvue (4) · plantvue (4) | — | |
| 21 | atvise | 4 | · | · | · | NEW | webmi2ads (4) | — | |
| 22 | f5 | 4 | · | · | · | PoC 1 | firepass (2) · nginx (2) | — | |
| 23 | freebsd | 4 | · | · | · | libarchive (4) | — | ||
| 24 | owncloud | 4 | · | · | · | NEWPoC 2 | owncloud (4) · owncloud server (4) | — | |
| 25 | asterisk | 3 | · | · | · | NEW | open source (3) | — | |
| 26 | cisco | 3 | 3 | · | · | webex recording format player (3) | — | ||
| 27 | quagga | 3 | · | · | · | quagga (3) | — | ||
| 28 | apache | 2 | · | · | · | hadoop (1) · http server (1) | — | ||
| 29 | cloudera | 2 | · | · | · | NEW | cloudera cdh (1) · cloudera manager (1) · cloudera service and configuration manager (1) | — | |
| 30 | debian | 2 | · | · | · | debian linux (2) | — | ||
| 31 | dnnsoftware | 2 | · | · | · | NEW | dotnetnuke (2) | — | |
| 32 | emc | 2 | · | · | · | PoC 2 | data protection advisor (2) | — | |
| 33 | fedoraproject | 2 | · | · | · | fedora (2) | — | ||
| 34 | iconics | 2 | 2 | · | · | NEW | genesis32 (2) · bizviz (2) | — | |
| 35 | icz | 2 | · | · | · | NEW | sencha sns (2) | — | |
| 36 | justsystems | 2 | 1 | · | · | ichitaro portable with oreplug (2) · ichitaro (2) · ichitaro viewer (2) | — | ||
| 37 | maian | 2 | 1 | · | · | NEW | gallery (2) | — | |
| 38 | menalto | 2 | 1 | · | · | NEW | gallery (2) | — | |
| 39 | openssl | 2 | · | · | · | PoC 1 | openssl (2) | — | |
| 40 | redmine | 2 | · | · | · | redmine (2) | — | ||
| 41 | rockwellautomation | 2 | · | · | · | NEW | factorytalk (2) · rslogix 5000 (2) | — | |
| 42 | rubygems | 2 | · | · | · | PoC 2 | spree (2) | — | |
| 43 | samba | 2 | 1 | · | · | samba (2) | — | ||
| 44 | sixapart | 2 | · | · | · | NEW | movable type (2) | — | |
| 45 | spreecommerce | 2 | · | · | · | NEWPoC 2 | spree (2) | — | |
| 46 | the centos project | 2 | · | · | · | centos (2) | — | ||
| 47 | vmware | 2 | · | · | · | esx (2) · esxi (2) · fusion (1) | — | ||
| 48 | 360zip | 1 | · | · | · | NEW | 360zip (1) | — | |
| 49 | abb | 1 | · | · | · | NEW | interlink module (1) · quickteach (1) · robotstudio lite (1) | — | |
| 50 | adastra | 1 | · | · | · | NEW | trace mode data center (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems62 CVE31 crit34 KEV14 vendorsCVSS 8.4opensuse (21) · gentoo linux (9) · enterprise linux (4)
- Consumer Software49 CVE52 crit7 vendorsCVSS 9.2firefox mobile (19) · firefox (12) · seamonkey (12)
- Enterprise Software32 CVE18 crit6 vendorsCVSS 8.4onboard administrator (3) · system management homepage (3) · tivoli directory server (3)
- OSS Libraries29 CVE19 crit10 vendorsCVSS 8.5freetype (19) · openssl (3) · activescriptruby (1)
- Web & CMS Plugins25 CVE4 crit14 vendorsCVSS 5.8wordpress (6) · gallery (4) · dotnetnuke (3)
- Mobile Apps24 CVE3 crit3 vendorsCVSS 7.2chrome (14) · sketchup (1) · spmode mail android (1)
- ICS / OT / IoT22 CVE27 crit9 vendorsCVSS 9.7h0-ecom (5) · h0-ecom100 (5) · h2-ecom (5)
- Security Products20 CVE7 vendorsCVSS 7.9wireshark (10)
- 3 crit5 vendorsCVSS 6.8quagga (3) · webex recording format player (3) · 8840t (1)
- Cloud & SaaS9 CVE4 vendorsCVSS 8.3owncloud (4) · owncloud server (4) · cloudera cdh (1)
- Communications4 CVE2 vendorsCVSS 5.4open source (3) · mumble (1)
- Hardware Firmware2 CVE64 crit2 vendorsCVSS 10.0e-studio-167 with network printer kit (1) · e-studio-167 with network printer kit firmware (1) · e-studio-181 with network printer kit (1)
- DevTools & CI2 CVE2 vendorsCVSS 7.5cumin (1)
- Databases1 CVE1 vendorsCVSS 4.3phpmyadmin (1)
- Unclassified7 CVE6 vendorsCVSS 5.6sencha sns (2) · 360zip (1) · dokodemo rikunabi 2013 (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 62 | 31 | 34 | 14 | 49 | 8.4 | opensuse (21) · gentoo linux (9) · enterprise linux (4) |
| Consumer Software▸ 4 | 49 | 52 | · | 7 | 16 | 9.2 | firefox mobile (19) · firefox (12) · seamonkey (12) |
| Enterprise Software▸ 4 | 32 | 18 | · | 6 | 51 | 8.4 | onboard administrator (3) · system management homepage (3) · tivoli directory server (3) |
| OSS Libraries▸ 3 | 29 | 19 | · | 10 | 10 | 8.5 | freetype (19) · openssl (3) · activescriptruby (1) |
| Web & CMS Plugins▸ 4 | 25 | 4 | · | 14 | 13 | 5.8 | wordpress (6) · gallery (4) · dotnetnuke (3) |
| Mobile Apps▸ 2 | 24 | 3 | · | 3 | 6 | 7.2 | chrome (14) · sketchup (1) · spmode mail android (1) |
| ICS / OT / IoT▸ 3 | 22 | 27 | · | 9 | 34 | 9.7 | h0-ecom (5) · h0-ecom100 (5) · h2-ecom (5) |
| Security Products▸ 4 | 20 | · | · | 7 | 8 | 7.9 | wireshark (10) |
| Networking Infrastructure▸ 2 | 9 | 3 | · | 5 | 5 | 6.8 | quagga (3) · webex recording format player (3) · 8840t (1) |
| Cloud & SaaS▸ 3 | 9 | · | · | 4 | 12 | 8.3 | owncloud (4) · owncloud server (4) · cloudera cdh (1) |
| Communications▸ 1 | 4 | · | · | 2 | 2 | 5.4 | open source (3) · mumble (1) |
| Hardware Firmware▸ 2 | 2 | 64 | · | 2 | 65 | 10.0 | e-studio-167 with network printer kit (1) · e-studio-167 with network printer kit firmware (1) · e-studio-181 with network printer kit (1) |
| DevTools & CI▸ 2 | 2 | · | · | 2 | 2 | 7.5 | cumin (1) |
| Databases▸ 1 | 1 | · | · | 1 | 1 | 4.3 | phpmyadmin (1) |
| Unclassified | 7 | · | · | 6 | 6 | 5.6 | sencha sns (2) · 360zip (1) · dokodemo rikunabi 2013 (1) |
Weakness × Sector
Which weaknesses hit which solution categories in April 2012
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds79XSS264CWE-26420Improper Input Validation94Code Injection416Use After Free399CWE-399189CWE-189200Information Exposure310CWE-310Consumer Software2846189231Operating Systems292418131OSS Libraries2322131ICS / OT / IoT102231111Networking Infrastructure745112Web & CMS Plugins122111Enterprise Software321114Communications532111Cloud & SaaS2212Databases11112