month report
September 2012
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
September 2012 closed with 655 published CVEs. 76 criticals, apple led volume, mostly via itunes. Top weakness class — CWE-79 (113 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
655
— MoM— YoY
Severity mix
76 / 83
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
2.1%
14 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4918.3
n=14
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
3547
n=2
Weakness × Vendor
What's spreading where in September 2012
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — September 2012
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #6libav23 CVE
- #11owncloud11 CVE
- #13silverstripe10 CVE
- #16trevor mckay8 CVE
- #18cyberlink7 CVE
- #23moodle6 CVE
- #25siemens6 CVE
- #27condor project5 CVE
- #28wikkawiki5 CVE
- #30flatnux4 CVE
Top vendors
Ranked by distinct CVE count this period.
- 87 CVE6 critCVSS 6.2itunes (51) · iphone os (32) · mac os x (8)
- 35 CVE1 critCVSS 6.0PoC 1chrome (33) · mod pagespeed (2) · google chrome (1)
- 29 CVE28 critCVSS 9.8ffmpeg (29)
- 28 CVE2 critCVSS 6.6ios (14) · cisco ios (4) · ios xe (4)
- 23 CVE3 critCVSS 5.8maximo service desk (10) · smartcloud control desk (10) · tivoli asset management for it (10)
- 23 CVE23 critCVSS 10.0NEWlibav (23)
- 14 CVECVSS 6.6opensuse (14)
- 13 CVECVSS 4.8PoC 1typo3/cms (9) · matomo/matomo (1) · piwik/piwik (1)
- 12 CVECVSS 5.2PoC 1joomla\! (11) · com weblinks (1)
- 11 CVE6 critCVSS 8.0sitescope (6) · business availability center (3) · network node manager i (1)
- 11 CVECVSS 5.4NEWPoC 4owncloud server (11) · owncloud (10)
- 10 CVECVSS 5.9PoC 4enterprise mrg (8) · red hat enterprise linux (2)
- 10 CVECVSS 5.7NEWPoC 2silverstripe (10)
- 9 CVE4 critCVSS 7.5KEV 1internet explorer (5) · system center configuration manager (1) · systems management server (1)
- 9 CVECVSS 4.3typo3 (9)
- 8 CVECVSS 5.4NEWPoC 2cumin (8)
- 7 CVE1 critCVSS 7.8KEV 1audition (1) · coldfusion (1) · device central cs4 (1)
- 7 CVE1 critCVSS 7.2NEWPoC 1power2go (2) · powerdirector (2) · labelprint (1)
- 7 CVE3 critCVSS 6.7groupwise (7)
- 6 CVECVSS 4.7PoC 1debian linux (6)
- 6 CVECVSS 4.8PoC 2gentoo linux (6)
- 6 CVECVSS 5.5PoC 1mediawiki (6)
- 6 CVECVSS 4.7NEWmoodle (6)
- 6 CVECVSS 7.2realplayer sp (6) · realplayer (5)
- 6 CVECVSS 4.9NEWwincc (5) · simatic pcs7 (5) · simatic s7-1200 cpu 1211c firmware (1)
- 5 CVECVSS 5.1struts (2) · cxf (1) · wicket (1)
- 5 CVE2 critCVSS 7.2NEWcondor (5)
- 5 CVECVSS 6.4NEWPoC 2wikkawiki (5)
- 5 CVECVSS 5.0Nuclei 3PoC 2wordpress (4) · lanoba social plugin (1)
- 4 CVECVSS 5.1NEWNuclei 1PoC 1flatnux (4)
- 4 CVECVSS 6.1webmin (4)
- 4 CVECVSS 3.8PoC 1bugzilla (2) · firefox (2)
- 4 CVECVSS 4.7keystone (2) · beaker (1) · moin (1)
- 3 CVECVSS 6.7NEWfotoslate (1) · photo editor 2008 (1) · picture frame manager (1)
- 3 CVECVSS 6.9NEWdatabasespy 2011 (1) · diffdog 2011 (1) · mapforce (1)
- 3 CVECVSS 6.4NEWPoC 2banana dance (3)
- 3 CVECVSS 5.5ubuntu linux (3)
- 3 CVE1 critCVSS 6.0NEWkunai (2) · kunai browser for remote service (1)
- 3 CVECVSS 5.5PoC 1crowbar (2) · sonicwall viewpoint (1)
- 3 CVECVSS 6.1NEWPoC 1limesurvey (3)
- 3 CVECVSS 5.4org.apache.cxf:cxf (1) · org.apache.struts:struts2-core (1) · org.apache.struts.xwork:xwork-core (1)
- 3 CVECVSS 6.2NEWPoC 3openemr (3)
- 3 CVECVSS 4.6NEWhorizon (2) · essex (1) · keystone (1)
- 3 CVECVSS 6.1NEWosclass (3)
- 3 CVECVSS 5.6NEWPoC 1open journal systems (3)
- 3 CVECVSS 6.8NEWPoC 3open conference systems (1) · open harvester systems (1) · open journal systems (1)
- 3 CVECVSS 4.3NEWPoC 2taglib (3)
- 3 CVECVSS 6.9NEWdvd architect pro (1) · dvd architect studio (1) · moviez hd (1)
- 3 CVECVSS 6.2NEWPoC 1interscan messaging security suite (2) · control manager (1)
- 2 CVECVSS 6.9NEW3dvia composer (1) · 3d xml player (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | apple | 87 | 6 | · | · | itunes (51) · iphone os (32) · mac os x (8) | — | ||
| 2 | 35 | 1 | · | · | PoC 1 | chrome (33) · mod pagespeed (2) · google chrome (1) | — | ||
| 3 | ffmpeg | 29 | 28 | · | · | ffmpeg (29) | — | ||
| 4 | cisco | 28 | 2 | · | · | ios (14) · cisco ios (4) · ios xe (4) | — | ||
| 5 | ibm | 23 | 3 | · | · | maximo service desk (10) · smartcloud control desk (10) · tivoli asset management for it (10) | — | ||
| 6 | libav | 23 | 23 | · | · | NEW | libav (23) | — | |
| 7 | opensuse | 14 | · | · | · | opensuse (14) | — | ||
| 8 | packagist | 13 | · | · | · | PoC 1 | typo3/cms (9) · matomo/matomo (1) · piwik/piwik (1) | — | |
| 9 | joomla | 12 | · | · | · | PoC 1 | joomla\! (11) · com weblinks (1) | — | |
| 10 | hp | 11 | 6 | · | · | sitescope (6) · business availability center (3) · network node manager i (1) | — | ||
| 11 | owncloud | 11 | · | · | · | NEWPoC 4 | owncloud server (11) · owncloud (10) | — | |
| 12 | redhat | 10 | · | · | · | PoC 4 | enterprise mrg (8) · red hat enterprise linux (2) | — | |
| 13 | silverstripe | 10 | · | · | · | NEWPoC 2 | silverstripe (10) | — | |
| 14 | microsoft | 9 | 4 | 1 | · | KEV 1 | internet explorer (5) · system center configuration manager (1) · systems management server (1) | — | |
| 15 | typo3 | 9 | · | · | · | typo3 (9) | — | ||
| 16 | trevor mckay | 8 | · | · | · | NEWPoC 2 | cumin (8) | — | |
| 17 | adobe | 7 | 1 | 1 | · | KEV 1 | audition (1) · coldfusion (1) · device central cs4 (1) | — | |
| 18 | cyberlink | 7 | 1 | · | · | NEWPoC 1 | power2go (2) · powerdirector (2) · labelprint (1) | — | |
| 19 | novell | 7 | 3 | · | · | groupwise (7) | — | ||
| 20 | debian | 6 | · | · | · | PoC 1 | debian linux (6) | — | |
| 21 | gentoo foundation inc. | 6 | · | · | · | PoC 2 | gentoo linux (6) | — | |
| 22 | mediawiki | 6 | · | · | · | PoC 1 | mediawiki (6) | — | |
| 23 | moodle | 6 | · | · | · | NEW | moodle (6) | — | |
| 24 | realnetworks | 6 | · | · | · | realplayer sp (6) · realplayer (5) | — | ||
| 25 | siemens | 6 | · | · | · | NEW | wincc (5) · simatic pcs7 (5) · simatic s7-1200 cpu 1211c firmware (1) | — | |
| 26 | apache | 5 | · | · | · | struts (2) · cxf (1) · wicket (1) | — | ||
| 27 | condor project | 5 | 2 | · | · | NEW | condor (5) | — | |
| 28 | wikkawiki | 5 | · | · | · | NEWPoC 2 | wikkawiki (5) | — | |
| 29 | wordpress | 5 | · | · | 3 | Nuclei 3PoC 2 | wordpress (4) · lanoba social plugin (1) | — | |
| 30 | flatnux | 4 | · | · | 1 | NEWNuclei 1PoC 1 | flatnux (4) | — | |
| 31 | gentoo | 4 | · | · | · | webmin (4) | — | ||
| 32 | mozilla | 4 | · | · | · | PoC 1 | bugzilla (2) · firefox (2) | — | |
| 33 | pypi | 4 | · | · | · | keystone (2) · beaker (1) · moin (1) | — | ||
| 34 | acdsee | 3 | · | · | · | NEW | fotoslate (1) · photo editor 2008 (1) · picture frame manager (1) | — | |
| 35 | altova | 3 | · | · | · | NEW | databasespy 2011 (1) · diffdog 2011 (1) · mapforce (1) | — | |
| 36 | bananadance | 3 | · | · | · | NEWPoC 2 | banana dance (3) | — | |
| 37 | canonical | 3 | · | · | · | ubuntu linux (3) | — | ||
| 38 | cybozu | 3 | 1 | · | · | NEW | kunai (2) · kunai browser for remote service (1) | — | |
| 39 | dell | 3 | · | · | · | PoC 1 | crowbar (2) · sonicwall viewpoint (1) | — | |
| 40 | limesurvey | 3 | · | · | · | NEWPoC 1 | limesurvey (3) | — | |
| 41 | maven | 3 | · | · | · | org.apache.cxf:cxf (1) · org.apache.struts:struts2-core (1) · org.apache.struts.xwork:xwork-core (1) | — | ||
| 42 | open-emr | 3 | · | · | · | NEWPoC 3 | openemr (3) | — | |
| 43 | openstack | 3 | · | · | · | NEW | horizon (2) · essex (1) · keystone (1) | — | |
| 44 | osclass | 3 | · | · | · | NEW | osclass (3) | — | |
| 45 | pkp | 3 | · | · | · | NEWPoC 1 | open journal systems (3) | — | |
| 46 | public knowledge project | 3 | · | · | · | NEWPoC 3 | open conference systems (1) · open harvester systems (1) · open journal systems (1) | — | |
| 47 | scott wheeler | 3 | · | · | · | NEWPoC 2 | taglib (3) | — | |
| 48 | sony | 3 | · | · | · | NEW | dvd architect pro (1) · dvd architect studio (1) · moviez hd (1) | — | |
| 49 | trendmicro | 3 | · | · | · | NEWPoC 1 | interscan messaging security suite (2) · control manager (1) | — | |
| 50 | 3ds | 2 | · | · | · | NEW | 3dvia composer (1) · 3d xml player (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins126 CVE1 crit58 vendorsCVSS 6.0joomla\! (11) · silverstripe (10) · typo3 (9)
- Mobile Apps122 CVE13 crit3 vendorsCVSS 6.2itunes (51) · iphone os (32) · mac os x (8)
- Enterprise Software73 CVE12 crit26 vendorsCVSS 8.1change and configuration management database (10) · maximo asset management (10) · maximo service desk (10)
- Consumer Software73 CVE8 crit2 KEV46 vendorsCVSS 7.2realplayer sp (6) · realplayer (5) · power2go (2)
- OSS Libraries71 CVE54 crit22 vendorsCVSS 8.8ffmpeg (29) · libav (23) · taglib (3)
- Operating Systems61 CVE7 crit2 KEV15 vendorsCVSS 8.5opensuse (16) · enterprise mrg (8) · groupwise (7)
- 4 crit12 vendorsCVSS 7.6ios (14) · cisco ios (4) · ios xe (4)
- Cloud & SaaS22 CVE8 vendorsCVSS 6.9owncloud server (11) · owncloud (10) · horizon (2)
- Security Products21 CVE3 crit16 vendorsCVSS 7.7interscan messaging security suite (2) · alsee (1) · control manager (1)
- DevTools & CI16 CVE6 vendorsCVSS 7.5cumin (8) · testlink (1)
- Communications11 CVE8 vendorsCVSS 6.1phplist (2) · groupware (1) · horde (1)
- Databases6 CVE1 crit4 vendorsCVSS 6.8ibm call center for commerce (2) · database server (1) · hyperion strategic finance (1)
- ICS / OT / IoT5 CVE2 crit6 vendorsCVSS 7.8mx4 scada (2) · wago i\/o system 758 industrial pc device (2) · citect scada (1)
- Hardware Firmware4 CVE2 crit3 vendorsCVSS 9.33450 chipset (1) · 5500 chipset (1) · 5520 chipset (1)
- Unclassified37 CVE1 crit27 vendorsCVSS 5.4flatnux (4) · banana dance (3) · admintools (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 5 | 126 | 1 | · | 58 | 65 | 6.0 | joomla\! (11) · silverstripe (10) · typo3 (9) |
| Mobile Apps▸ 2 | 122 | 13 | · | 3 | 8 | 6.2 | itunes (51) · iphone os (32) · mac os x (8) |
| Enterprise Software▸ 6 | 73 | 12 | · | 26 | 61 | 8.1 | change and configuration management database (10) · maximo asset management (10) · maximo service desk (10) |
| Consumer Software▸ 4 | 73 | 8 | 2 | 46 | 74 | 7.2 | realplayer sp (6) · realplayer (5) · power2go (2) |
| OSS Libraries▸ 5 | 71 | 54 | · | 22 | 33 | 8.8 | ffmpeg (29) · libav (23) · taglib (3) |
| Operating Systems▸ 3 | 61 | 7 | 2 | 15 | 25 | 8.5 | opensuse (16) · enterprise mrg (8) · groupwise (7) |
| Networking Infrastructure▸ 6 | 39 | 4 | · | 12 | 45 | 7.6 | ios (14) · cisco ios (4) · ios xe (4) |
| Cloud & SaaS▸ 3 | 22 | · | · | 8 | 16 | 6.9 | owncloud server (11) · owncloud (10) · horizon (2) |
| Security Products▸ 4 | 21 | 3 | · | 16 | 21 | 7.7 | interscan messaging security suite (2) · alsee (1) · control manager (1) |
| DevTools & CI▸ 3 | 16 | · | · | 6 | 8 | 7.5 | cumin (8) · testlink (1) |
| Communications▸ 2 | 11 | · | · | 8 | 9 | 6.1 | phplist (2) · groupware (1) · horde (1) |
| Databases▸ 2 | 6 | 1 | · | 4 | 6 | 6.8 | ibm call center for commerce (2) · database server (1) · hyperion strategic finance (1) |
| ICS / OT / IoT▸ 2 | 5 | 2 | · | 6 | 9 | 7.8 | mx4 scada (2) · wago i\/o system 758 industrial pc device (2) · citect scada (1) |
| Hardware Firmware▸ 3 | 4 | 2 | · | 3 | 25 | 9.3 | 3450 chipset (1) · 5500 chipset (1) · 5520 chipset (1) |
| Unclassified | 37 | 1 | · | 27 | 28 | 5.4 | flatnux (4) · banana dance (3) · admintools (2) |
Weakness × Sector
Which weaknesses hit which solution categories in September 2012
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS119Memory Buffer Bounds264CWE-26489SQL Injection352CSRF399CWE-399200Information Exposure20Improper Input Validation22Path Traversal310CWE-310Consumer Software9268211323Web & CMS Plugins611323118461Operating Systems723131295815OSS Libraries948111361Enterprise Software101345233Networking Infrastructure7511215Security Products122221Cloud & SaaS45411DevTools & CI342211ICS / OT / IoT131111111