month report
May 2012
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
May 2012 closed with 434 published CVEs. 89 criticals, oracle led volume, mostly via financial services software. Top weakness class — CWE-119 (62 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
434
— MoM— YoY
Severity mix
89 / 77
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.6%
7 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
5037.1
n=7
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
3640
n=2
Detection gap
KEV pressure, no Nuclei coverage
May 2012 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1oracle81 CVE
Weakness × Vendor
What's spreading where in May 2012
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — May 2012
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #20puppet6 CVE
- #25mariadb4 CVE
- #26php group4 CVE
- #28puppetlabs4 CVE
- #30xarrow4 CVE
- #31connman3 CVE
- #36artiphp2 CVE
- #39chevereto2 CVE
- #41grboard2 CVE
- #42hypermethod2 CVE
Top vendors
Ranked by distinct CVE count this period.
- 81 CVE3 critCVSS 4.7KEV 1PoC 1financial services software (17) · peoplesoft products (15) · database server (13)
- 38 CVE13 critCVSS 7.7PoC 2chrome (38)
- 36 CVE1 critCVSS 6.1PoC 4linux kernel (36)
- 35 CVE1 critCVSS 6.2ios (14) · 5500 series adaptive security appliance (5) · adaptive security appliance software (5)
- 31 CVE12 critCVSS 7.1KEV 1Nuclei 1PoC 2mac os x (14) · mac os x server (11) · quicktime (10)
- 22 CVE15 critCVSS 8.3office (9) · windows server 2008 (8) · windows 7 (7)
- 19 CVE2 critCVSS 7.0KEV 1Nuclei 1PoC 1enterprise linux (8) · enterprise linux workstation (5) · enterprise linux desktop (5)
- 15 CVE15 critCVSS 9.8illustrator (6) · illustrator cs5.5 (6) · shockwave player (5)
- 14 CVE3 critCVSS 6.7KEV 1Nuclei 1insight management agents (4) · performance insight (3) · snmp agents for linux (2)
- 14 CVE3 critCVSS 7.1rational appscan (9) · cognos tm1 (1) · aix (1)
- 13 CVE2 critCVSS 5.7PoC 3gentoo linux (13)
- 10 CVECVSS 5.5sunos (8) · jdk (2) · jre (2)
- 8 CVECVSS 4.6PoC 1typo3/cms (3) · typo3/cms-frontend (2) · typo3/cms-install (1)
- 8 CVE3 critCVSS 7.2endpoint protection (4) · web gateway (4) · network access control (1)
- 8 CVECVSS 4.5PoC 1typo3 (8)
- 8 CVE1 critCVSS 6.9debian gnu/linux (7) · libxml2 (1)
- 7 CVECVSS 6.1PoC 1ubuntu linux (4) · ubuntu (3)
- 7 CVE1 critCVSS 6.6suse linux enterprise (4) · opensuse leap (2) · opensuse (1)
- 7 CVE2 critCVSS 7.2KEV 1Nuclei 1PoC 1php (7)
- 6 CVECVSS 4.4NEWPoC 3puppet (6) · puppet enterprise (6)
- 6 CVE1 critCVSS 5.7PoC 3netweaver (6)
- 5 CVE1 critCVSS 6.6KEV 1Nuclei 1PoC 1linux enterprise server (5) · linux enterprise desktop (4) · linux enterprise high availability extension (4)
- 5 CVE4 critCVSS 8.9esx (5) · esxi (5) · fusion (2)
- 4 CVE1 critCVSS 6.2KEV 1Nuclei 1PoC 1debian linux (3) · texlive-extra-utils (1)
- 4 CVECVSS 4.7NEWmariadb (4)
- 4 CVE1 critCVSS 7.0NEWKEV 1Nuclei 1php (4)
- 4 CVECVSS 5.7PoC 1pligg cms (4)
- 4 CVECVSS 4.2NEWPoC 1puppet (4) · puppet enterprise users (4)
- 4 CVECVSS 4.9PoC 3puppet (4)
- 4 CVE3 critCVSS 9.4NEWxarrow (4)
- 3 CVE1 critCVSS 7.6NEWconnman (3)
- 3 CVECVSS 5.0drupal (3)
- 3 CVE1 critCVSS 7.1KEV 1Nuclei 1PoC 2fedora (3)
- 3 CVE2 critCVSS 9.0KEV 1Nuclei 1opensuse (3)
- 3 CVECVSS 5.0feedparser (1) · paste (1) · pastescript (1)
- 2 CVECVSS 4.7NEWPoC 2artiphp cms (2)
- 2 CVE1 critCVSS 8.5confluence server (2) · jira (2) · fisheye (1)
- 2 CVECVSS 5.7PoC 19608 firmware (1) · 9608g firmware (1) · 9611g firmware (1)
- 2 CVECVSS 4.7NEWchevereto (2)
- 2 CVECVSS 7.8PoC 2documentum information rights management (2)
- 2 CVECVSS 7.0NEWPoC 2grboard (2)
- 2 CVECVSS 7.5NEWPoC 2elearning server (2)
- 2 CVECVSS 5.4NEWPoC 2travelon express (2)
- 2 CVECVSS 4.0mysql (2) · mysql community server (1) · mysql server (1)
- 2 CVECVSS 3.5NEWPoC 2online merchant (2)
- 2 CVE2 critCVSS 9.3realplayer (2) · realplayer sp (2)
- 2 CVECVSS 5.2NEWjoomla content editor (2)
- 2 CVECVSS 4.3NEWbackupdb\(\) (1) · phpthumb\(\) (1)
- 2 CVECVSS 5.9NEWPoC 2viscacha (2)
- 2 CVECVSS 3.5NEWweb mart (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 81 | 3 | 1 | · | KEV 1PoC 1 | financial services software (17) · peoplesoft products (15) · database server (13) | — | |
| 2 | 38 | 13 | · | · | PoC 2 | chrome (38) | — | ||
| 3 | linux | 36 | 1 | · | · | PoC 4 | linux kernel (36) | — | |
| 4 | cisco | 35 | 1 | · | · | ios (14) · 5500 series adaptive security appliance (5) · adaptive security appliance software (5) | — | ||
| 5 | apple | 31 | 12 | 1 | 1 | KEV 1Nuclei 1PoC 2 | mac os x (14) · mac os x server (11) · quicktime (10) | — | |
| 6 | microsoft | 22 | 15 | · | · | office (9) · windows server 2008 (8) · windows 7 (7) | — | ||
| 7 | redhat | 19 | 2 | 1 | 1 | KEV 1Nuclei 1PoC 1 | enterprise linux (8) · enterprise linux workstation (5) · enterprise linux desktop (5) | — | |
| 8 | adobe | 15 | 15 | · | · | illustrator (6) · illustrator cs5.5 (6) · shockwave player (5) | — | ||
| 9 | hp | 14 | 3 | 1 | 1 | KEV 1Nuclei 1 | insight management agents (4) · performance insight (3) · snmp agents for linux (2) | — | |
| 10 | ibm | 14 | 3 | · | · | rational appscan (9) · cognos tm1 (1) · aix (1) | — | ||
| 11 | gentoo foundation inc. | 13 | 2 | · | · | PoC 3 | gentoo linux (13) | — | |
| 12 | sun | 10 | · | · | · | sunos (8) · jdk (2) · jre (2) | — | ||
| 13 | packagist | 8 | · | · | · | PoC 1 | typo3/cms (3) · typo3/cms-frontend (2) · typo3/cms-install (1) | — | |
| 14 | symantec | 8 | 3 | · | · | endpoint protection (4) · web gateway (4) · network access control (1) | — | ||
| 15 | typo3 | 8 | · | · | · | PoC 1 | typo3 (8) | — | |
| 16 | сообщество свободного программного обеспечения | 8 | 1 | · | · | debian gnu/linux (7) · libxml2 (1) | — | ||
| 17 | canonical | 7 | · | · | · | PoC 1 | ubuntu linux (4) · ubuntu (3) | — | |
| 18 | novell inc. | 7 | 1 | · | · | suse linux enterprise (4) · opensuse leap (2) · opensuse (1) | — | ||
| 19 | php | 7 | 2 | 1 | 1 | KEV 1Nuclei 1PoC 1 | php (7) | — | |
| 20 | puppet | 6 | · | · | · | NEWPoC 3 | puppet (6) · puppet enterprise (6) | — | |
| 21 | sap | 6 | 1 | · | · | PoC 3 | netweaver (6) | — | |
| 22 | suse | 5 | 1 | 1 | 1 | KEV 1Nuclei 1PoC 1 | linux enterprise server (5) · linux enterprise desktop (4) · linux enterprise high availability extension (4) | — | |
| 23 | vmware | 5 | 4 | · | · | esx (5) · esxi (5) · fusion (2) | — | ||
| 24 | debian | 4 | 1 | 1 | 1 | KEV 1Nuclei 1PoC 1 | debian linux (3) · texlive-extra-utils (1) | — | |
| 25 | mariadb | 4 | · | · | · | NEW | mariadb (4) | — | |
| 26 | php group | 4 | 1 | 1 | 1 | NEWKEV 1Nuclei 1 | php (4) | — | |
| 27 | pligg | 4 | · | · | · | PoC 1 | pligg cms (4) | — | |
| 28 | puppetlabs | 4 | · | · | · | NEWPoC 1 | puppet (4) · puppet enterprise users (4) | — | |
| 29 | rubygems | 4 | · | · | · | PoC 3 | puppet (4) | — | |
| 30 | xarrow | 4 | 3 | · | · | NEW | xarrow (4) | — | |
| 31 | connman | 3 | 1 | · | · | NEW | connman (3) | — | |
| 32 | drupal | 3 | · | · | · | drupal (3) | — | ||
| 33 | fedoraproject | 3 | 1 | 1 | 1 | KEV 1Nuclei 1PoC 2 | fedora (3) | — | |
| 34 | opensuse | 3 | 2 | 1 | 1 | KEV 1Nuclei 1 | opensuse (3) | — | |
| 35 | pypi | 3 | · | · | · | feedparser (1) · paste (1) · pastescript (1) | — | ||
| 36 | artiphp | 2 | · | · | · | NEWPoC 2 | artiphp cms (2) | — | |
| 37 | atlassian | 2 | 1 | · | · | confluence server (2) · jira (2) · fisheye (1) | — | ||
| 38 | avaya | 2 | · | · | · | PoC 1 | 9608 firmware (1) · 9608g firmware (1) · 9611g firmware (1) | — | |
| 39 | chevereto | 2 | · | · | · | NEW | chevereto (2) | — | |
| 40 | emc | 2 | · | · | · | PoC 2 | documentum information rights management (2) | — | |
| 41 | grboard | 2 | · | · | · | NEWPoC 2 | grboard (2) | — | |
| 42 | hypermethod | 2 | · | · | · | NEWPoC 2 | elearning server (2) | — | |
| 43 | itechscripts | 2 | · | · | · | NEWPoC 2 | travelon express (2) | — | |
| 44 | mysql | 2 | · | · | · | mysql (2) · mysql community server (1) · mysql server (1) | — | ||
| 45 | oscommerce | 2 | · | · | · | NEWPoC 2 | online merchant (2) | — | |
| 46 | realnetworks | 2 | 2 | · | · | realplayer (2) · realplayer sp (2) | — | ||
| 47 | ryan demmer | 2 | · | · | · | NEW | joomla content editor (2) | — | |
| 48 | silisoftware | 2 | · | · | · | NEW | backupdb\(\) (1) · phpthumb\(\) (1) | — | |
| 49 | viscacha | 2 | · | · | · | NEWPoC 2 | viscacha (2) | — | |
| 50 | webcreate | 2 | · | · | · | NEW | web mart (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems98 CVE63 crit14 KEV17 vendorsCVSS 8.3linux kernel (36) · gentoo linux (13) · enterprise linux (8)
- Databases83 CVE4 crit2 KEV6 vendorsCVSS 4.7financial services software (17) · peoplesoft products (15) · database server (13)
- Mobile Apps70 CVE27 crit1 KEV3 vendorsCVSS 7.7chrome (38)
- Enterprise Software45 CVE14 crit1 KEV8 vendorsCVSS 7.5rational appscan (9) · puppet (6) · puppet enterprise (6)
- 2 crit4 vendorsCVSS 6.2ios (14) · 5500 series adaptive security appliance (5) · adaptive security appliance software (5)
- Web & CMS Plugins37 CVE19 vendorsCVSS 5.4typo3 (8) · pligg cms (4) · drupal (3)
- OSS Libraries30 CVE3 crit2 KEV13 vendorsCVSS 6.6php (11) · openssl (2) · backupdb\(\) (1)
- Consumer Software23 CVE36 crit7 vendorsCVSS 9.8illustrator (6) · illustrator cs5.5 (6) · shockwave player (5)
- Security Products11 CVE16 crit3 vendorsCVSS 9.1endpoint protection (4) · web gateway (4) · network access control (1)
- ICS / OT / IoT9 CVE4 crit5 vendorsCVSS 7.7xarrow (4) · kingview (2) · kerweb (1)
- Cloud & SaaS6 CVE14 crit2 vendorsCVSS 8.9esx (5) · esxi (5) · fusion (2)
- DevTools & CI5 CVE1 crit2 vendorsCVSS 10.0puppet (4) · puppet enterprise users (4)
- Communications5 CVE4 vendorsCVSS 7.59608 firmware (1) · 9608g firmware (1) · 9611g firmware (1)
- Hardware Firmware2 CVE2 crit2 vendorsCVSS 10.0blackarmor nas (1)
- Unclassified16 CVE12 vendorsCVSS 5.3elearning server (2) · grboard (2) · viscacha (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 98 | 63 | 14 | 17 | 51 | 8.3 | linux kernel (36) · gentoo linux (13) · enterprise linux (8) |
| Databases▸ 3 | 83 | 4 | 2 | 6 | 26 | 4.7 | financial services software (17) · peoplesoft products (15) · database server (13) |
| Mobile Apps▸ 2 | 70 | 27 | 1 | 3 | 21 | 7.7 | chrome (38) |
| Enterprise Software▸ 4 | 45 | 14 | 1 | 8 | 28 | 7.5 | rational appscan (9) · puppet (6) · puppet enterprise (6) |
| Networking Infrastructure▸ 2 | 37 | 2 | · | 4 | 35 | 6.2 | ios (14) · 5500 series adaptive security appliance (5) · adaptive security appliance software (5) |
| Web & CMS Plugins▸ 5 | 37 | · | · | 19 | 19 | 5.4 | typo3 (8) · pligg cms (4) · drupal (3) |
| OSS Libraries▸ 5 | 30 | 3 | 2 | 13 | 19 | 6.6 | php (11) · openssl (2) · backupdb\(\) (1) |
| Consumer Software▸ 3 | 23 | 36 | · | 7 | 19 | 9.8 | illustrator (6) · illustrator cs5.5 (6) · shockwave player (5) |
| Security Products▸ 2 | 11 | 16 | · | 3 | 17 | 9.1 | endpoint protection (4) · web gateway (4) · network access control (1) |
| ICS / OT / IoT▸ 1 | 9 | 4 | · | 5 | 8 | 7.7 | xarrow (4) · kingview (2) · kerweb (1) |
| Cloud & SaaS▸ 2 | 6 | 14 | · | 2 | 6 | 8.9 | esx (5) · esxi (5) · fusion (2) |
| DevTools & CI▸ 2 | 5 | 1 | · | 2 | 3 | 10.0 | puppet (4) · puppet enterprise users (4) |
| Communications▸ 3 | 5 | · | · | 4 | 10 | 7.5 | 9608 firmware (1) · 9608g firmware (1) · 9611g firmware (1) |
| Hardware Firmware▸ 2 | 2 | 2 | · | 2 | 2 | 10.0 | blackarmor nas (1) |
| Unclassified | 16 | · | · | 12 | 14 | 5.3 | elearning server (2) · grboard (2) · viscacha (2) |
Weakness × Sector
Which weaknesses hit which solution categories in May 2012
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds264CWE-26420Improper Input Validation79XSS399CWE-399189CWE-189200Information Exposure89SQL Injection287Improper Authentication94Code InjectionOperating Systems1620116105111Enterprise Software79243Consumer Software2551011431OSS Libraries57763112Web & CMS Plugins33212521Networking Infrastructure14142313133Databases121Security Products342211ICS / OT / IoT2112DevTools & CI14