month report
October 2012
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
October 2012 closed with 559 published CVEs. 90 criticals, oracle led volume, mostly via jre. Top weakness class — CWE-79 (84 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
559
— MoM— YoY
Severity mix
90 / 88
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
4.7%
26 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4897.0
n=26
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
3450
n=3
Detection gap
KEV pressure, no Nuclei coverage
October 2012 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1suse27 CVE
Weakness × Vendor
What's spreading where in October 2012
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — October 2012
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #12mariadb10 CVE
- #18vwar6 CVE
- #19atutor5 CVE
- #23devscripts devel team4 CVE
- #24drupal4 CVE
- #28mavili guestbook project4 CVE
- #31activestate3 CVE
- #32apprain3 CVE
- #33cartpauj3 CVE
- #34dlink3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 121 CVE13 critCVSS 5.1KEV 3Nuclei 1PoC 2jre (27) · jdk (26) · fusion middleware (23)
- 41 CVE18 critCVSS 7.0PoC 2ubuntu linux (40) · ubuntu software properties (1)
- 38 CVE16 critCVSS 6.7PoC 2enterprise linux server (35) · enterprise linux workstation (34) · enterprise linux desktop (34)
- 37 CVE6 critCVSS 6.4jdk (21) · jre (21) · sunos (15)
- 32 CVE19 critCVSS 7.7PoC 3firefox (32) · seamonkey (30) · thunderbird (30)
- 31 CVE31 critCVSS 10.0adobe air (25) · adobe air sdk (25) · flash player (25)
- 27 CVE16 critCVSS 7.6KEV 1PoC 2linux enterprise desktop (27) · linux enterprise server (25) · linux enterprise sdk (17)
- 20 CVE8 critCVSS 6.4debian linux (20)
- 13 CVECVSS 5.7PoC 3lotus notes traveler (5) · aix (2) · vios (2)
- 12 CVE7 critCVSS 7.7catalyst 6504-e (6) · 5500 series adaptive security appliance (6) · adaptive security appliance software (6)
- 11 CVECVSS 5.2PoC 2linux kernel (11)
- 10 CVE1 critCVSS 4.8NEWmariadb (10)
- 9 CVE4 critCVSS 7.9chrome (7) · android (1) · sketchup (1)
- 8 CVE3 critCVSS 6.2windows 7 (2) · word (2) · windows server 2008 (2)
- 6 CVECVSS 5.8PoC 4subrion cms (6)
- 6 CVECVSS 4.4joomla\! (6)
- 6 CVECVSS 5.2PoC 2phpmyadmin/phpmyadmin (2) · drupal/drupal (1) · impresspages/impresspages (1)
- 6 CVECVSS 5.5NEWPoC 3virtual war (6)
- 5 CVECVSS 6.5NEWPoC 3acontent (5)
- 5 CVE1 critCVSS 5.8fedora (3) · 389 directory server (1) · crypto-utils (1)
- 5 CVE1 critCVSS 6.2PoC 1opensuse (5)
- 4 CVE2 critCVSS 8.1PoC 1axis2 (2) · cloudstack (1) · ofbiz (1)
- 4 CVECVSS 5.1NEWdevscripts (4)
- 4 CVECVSS 4.1NEWPoC 1drupal (4)
- 4 CVE1 critCVSS 4.4networker module for microsoft applications (2) · rsa adaptive authentication on-premise (1) · avamar (1)
- 4 CVECVSS 5.7PoC 1libsocialweb (2) · gnome-keyring (1) · gnome-shell (1)
- 4 CVECVSS 6.0PoC 1org.apache.axis2:axis2 (2) · org.postgresql:postgresql (1) · org.jboss.mod_cluster:mod_cluster (1)
- 4 CVECVSS 6.1NEWPoC 2mavili guestbook (4)
- 4 CVECVSS 4.9opensuse (3) · suse linux enterprise (1)
- 4 CVECVSS 5.1Nuclei 4PoC 4pay-with-tweet (2) · slideshow gallery2 (1) · wordpress (1)
- 3 CVECVSS 6.4NEWPoC 1activeperl (1) · activepython (1) · activetcl (1)
- 3 CVECVSS 6.2NEWPoC 3apprain (3)
- 3 CVECVSS 5.0NEWNuclei 3PoC 1mingle-forum (2) · shortcode-redirect (1)
- 3 CVE1 critCVSS 7.5NEWPoC 3dsl-2640b (1) · dsl-2640b firmware (1) · dcs-900 (1)
- 3 CVECVSS 5.0eucalyptus (3)
- 3 CVECVSS 6.2NEWmonkey (3)
- 3 CVECVSS 6.4NEWPoC 2nextbbs (3)
- 3 CVECVSS 5.0NEWocportal (3)
- 3 CVECVSS 4.8ibacm (2) · librdmacm (1)
- 3 CVE1 critCVSS 7.1NEWkeystone (2) · swift (1)
- 3 CVECVSS 6.6postgresql (3) · postgresql jdbc driver (1)
- 3 CVE1 critCVSS 7.1keystone (2) · swift (1)
- 3 CVECVSS 5.3redmine (3)
- 3 CVECVSS 6.0NEWNuclei 1PoC 1webtitan (3)
- 3 CVECVSS 6.2NEWNuclei 3sentinel (3)
- 3 CVECVSS 5.4capacityiq (1) · movie decoder (1) · vcenter operations (1)
- 3 CVECVSS 4.1wireshark (3)
- 3 CVECVSS 4.7PoC 1debian gnu/linux (2) · linux (1)
- 2 CVECVSS 4.7NEWPoC 2webboard (2)
- 2 CVE1 critCVSS 8.3iphone os (1) · mac os x server (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 121 | 13 | 3 | 1 | KEV 3Nuclei 1PoC 2 | jre (27) · jdk (26) · fusion middleware (23) | — | |
| 2 | canonical | 41 | 18 | · | · | PoC 2 | ubuntu linux (40) · ubuntu software properties (1) | — | |
| 3 | redhat | 38 | 16 | · | · | PoC 2 | enterprise linux server (35) · enterprise linux workstation (34) · enterprise linux desktop (34) | — | |
| 4 | sun | 37 | 6 | · | · | jdk (21) · jre (21) · sunos (15) | — | ||
| 5 | mozilla | 32 | 19 | · | · | PoC 3 | firefox (32) · seamonkey (30) · thunderbird (30) | — | |
| 6 | adobe | 31 | 31 | · | · | adobe air (25) · adobe air sdk (25) · flash player (25) | — | ||
| 7 | suse | 27 | 16 | 1 | · | KEV 1PoC 2 | linux enterprise desktop (27) · linux enterprise server (25) · linux enterprise sdk (17) | — | |
| 8 | debian | 20 | 8 | · | · | debian linux (20) | — | ||
| 9 | ibm | 13 | · | · | · | PoC 3 | lotus notes traveler (5) · aix (2) · vios (2) | — | |
| 10 | cisco | 12 | 7 | · | · | catalyst 6504-e (6) · 5500 series adaptive security appliance (6) · adaptive security appliance software (6) | — | ||
| 11 | linux | 11 | · | · | · | PoC 2 | linux kernel (11) | — | |
| 12 | mariadb | 10 | 1 | · | · | NEW | mariadb (10) | — | |
| 13 | 9 | 4 | · | · | chrome (7) · android (1) · sketchup (1) | — | |||
| 14 | microsoft | 8 | 3 | · | · | windows 7 (2) · word (2) · windows server 2008 (2) | — | ||
| 15 | intelliants | 6 | · | · | · | PoC 4 | subrion cms (6) | — | |
| 16 | joomla | 6 | · | · | · | joomla\! (6) | — | ||
| 17 | packagist | 6 | · | · | · | PoC 2 | phpmyadmin/phpmyadmin (2) · drupal/drupal (1) · impresspages/impresspages (1) | — | |
| 18 | vwar | 6 | · | · | · | NEWPoC 3 | virtual war (6) | — | |
| 19 | atutor | 5 | · | · | · | NEWPoC 3 | acontent (5) | — | |
| 20 | fedoraproject | 5 | 1 | · | · | fedora (3) · 389 directory server (1) · crypto-utils (1) | — | ||
| 21 | opensuse | 5 | 1 | · | · | PoC 1 | opensuse (5) | — | |
| 22 | apache | 4 | 2 | · | · | PoC 1 | axis2 (2) · cloudstack (1) · ofbiz (1) | — | |
| 23 | devscripts devel team | 4 | · | · | · | NEW | devscripts (4) | — | |
| 24 | drupal | 4 | · | · | · | NEWPoC 1 | drupal (4) | — | |
| 25 | emc | 4 | 1 | · | · | networker module for microsoft applications (2) · rsa adaptive authentication on-premise (1) · avamar (1) | — | ||
| 26 | gnome | 4 | · | · | · | PoC 1 | libsocialweb (2) · gnome-keyring (1) · gnome-shell (1) | — | |
| 27 | maven | 4 | · | · | · | PoC 1 | org.apache.axis2:axis2 (2) · org.postgresql:postgresql (1) · org.jboss.mod_cluster:mod_cluster (1) | — | |
| 28 | mavili guestbook project | 4 | · | · | · | NEWPoC 2 | mavili guestbook (4) | — | |
| 29 | novell inc. | 4 | · | · | · | opensuse (3) · suse linux enterprise (1) | — | ||
| 30 | wordpress | 4 | · | · | 4 | Nuclei 4PoC 4 | pay-with-tweet (2) · slideshow gallery2 (1) · wordpress (1) | — | |
| 31 | activestate | 3 | · | · | · | NEWPoC 1 | activeperl (1) · activepython (1) · activetcl (1) | — | |
| 32 | apprain | 3 | · | · | · | NEWPoC 3 | apprain (3) | — | |
| 33 | cartpauj | 3 | · | · | 3 | NEWNuclei 3PoC 1 | mingle-forum (2) · shortcode-redirect (1) | — | |
| 34 | dlink | 3 | 1 | · | · | NEWPoC 3 | dsl-2640b (1) · dsl-2640b firmware (1) · dcs-900 (1) | — | |
| 35 | eucalyptus | 3 | · | · | · | eucalyptus (3) | — | ||
| 36 | monkey-project | 3 | · | · | · | NEW | monkey (3) | — | |
| 37 | nextbbs | 3 | · | · | · | NEWPoC 2 | nextbbs (3) | — | |
| 38 | ocportal | 3 | · | · | · | NEW | ocportal (3) | — | |
| 39 | openfabrics | 3 | · | · | · | ibacm (2) · librdmacm (1) | — | ||
| 40 | openstack | 3 | 1 | · | · | NEW | keystone (2) · swift (1) | — | |
| 41 | postgresql | 3 | · | · | · | postgresql (3) · postgresql jdbc driver (1) | — | ||
| 42 | pypi | 3 | 1 | · | · | keystone (2) · swift (1) | — | ||
| 43 | redmine | 3 | · | · | · | redmine (3) | — | ||
| 44 | spamtitan | 3 | · | · | 1 | NEWNuclei 1PoC 1 | webtitan (3) | — | |
| 45 | trioniclabs | 3 | · | · | 3 | NEWNuclei 3 | sentinel (3) | — | |
| 46 | vmware | 3 | · | · | · | capacityiq (1) · movie decoder (1) · vcenter operations (1) | — | ||
| 47 | wireshark | 3 | · | · | · | wireshark (3) | — | ||
| 48 | сообщество свободного программного обеспечения | 3 | · | · | · | PoC 1 | debian gnu/linux (2) · linux (1) | — | |
| 49 | akiva | 2 | · | · | · | NEWPoC 2 | webboard (2) | — | |
| 50 | apple | 2 | 1 | · | · | iphone os (1) · mac os x server (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Databases126 CVE24 crit3 KEV4 vendorsCVSS 5.1jre (27) · jdk (26) · fusion middleware (23)
- Operating Systems113 CVE157 crit1 KEV16 vendorsCVSS 10.0ubuntu linux (40) · enterprise linux server (35) · enterprise linux desktop (34)
- Web & CMS Plugins110 CVE4 crit62 vendorsCVSS 7.5joomla\! (6) · subrion cms (6) · acontent (5)
- Consumer Software79 CVE181 crit13 vendorsCVSS 9.8adobe air (25) · adobe air sdk (25) · flash player (25)
- Enterprise Software32 CVE16 vendorsCVSS 5.9lotus notes traveler (5) · redmine (3) · aix (2)
- OSS Libraries32 CVE2 crit17 vendorsCVSS 7.1iptools (2) · memcache (2) · python (2)
- 21 crit12 vendorsCVSS 7.75500 series adaptive security appliance (6) · adaptive security appliance software (6) · catalyst 6500 (6)
- Security Products20 CVE14 crit10 vendorsCVSS 9.0networker module for microsoft applications (2) · avamar (1) · rsa adaptive authentication on-premise (1)
- Cloud & SaaS18 CVE2 crit9 vendorsCVSS 8.5eucalyptus (3) · license software (2) · capacityiq (1)
- Mobile Apps11 CVE5 crit2 vendorsCVSS 8.3chrome (7) · android (1) · sketchup (1)
- Communications8 CVE7 vendorsCVSS 5.6ftp server (2) · axigen free mail server (1) · claws-mail (1)
- DevTools & CI3 CVE3 vendorsCVSS 5.5cgit (1) · gitolite (1)
- ICS / OT / IoT3 CVE1 crit3 vendorsCVSS 9.3deltav (1) · kingview (1)
- Hardware Firmware1 CVE1 vendorsCVSS 6.8f\@st 2604 (1) · f\@st 2604 firmware (1)
- Unclassified42 CVE28 vendorsCVSS 5.0virtual war (6) · devscripts (4) · jcore (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Databases▸ 2 | 126 | 24 | 3 | 4 | 32 | 5.1 | jre (27) · jdk (26) · fusion middleware (23) |
| Operating Systems▸ 4 | 113 | 157 | 1 | 16 | 59 | 10.0 | ubuntu linux (40) · enterprise linux server (35) · enterprise linux desktop (34) |
| Web & CMS Plugins▸ 6 | 110 | 4 | · | 62 | 66 | 7.5 | joomla\! (6) · subrion cms (6) · acontent (5) |
| Consumer Software▸ 5 | 79 | 181 | · | 13 | 22 | 9.8 | adobe air (25) · adobe air sdk (25) · flash player (25) |
| Enterprise Software▸ 4 | 32 | · | · | 16 | 40 | 5.9 | lotus notes traveler (5) · redmine (3) · aix (2) |
| OSS Libraries▸ 5 | 32 | 2 | · | 17 | 26 | 7.1 | iptools (2) · memcache (2) · python (2) |
| Networking Infrastructure▸ 5 | 28 | 21 | · | 12 | 31 | 7.7 | 5500 series adaptive security appliance (6) · adaptive security appliance software (6) · catalyst 6500 (6) |
| Security Products▸ 5 | 20 | 14 | · | 10 | 25 | 9.0 | networker module for microsoft applications (2) · avamar (1) · rsa adaptive authentication on-premise (1) |
| Cloud & SaaS▸ 5 | 18 | 2 | · | 9 | 13 | 8.5 | eucalyptus (3) · license software (2) · capacityiq (1) |
| Mobile Apps▸ 2 | 11 | 5 | · | 2 | 5 | 8.3 | chrome (7) · android (1) · sketchup (1) |
| Communications▸ 2 | 8 | · | · | 7 | 7 | 5.6 | ftp server (2) · axigen free mail server (1) · claws-mail (1) |
| DevTools & CI▸ 1 | 3 | · | · | 3 | 3 | 5.5 | cgit (1) · gitolite (1) |
| ICS / OT / IoT▸ 2 | 3 | 1 | · | 3 | 3 | 9.3 | deltav (1) · kingview (1) |
| Hardware Firmware▸ 1 | 1 | · | · | 1 | 2 | 6.8 | f\@st 2604 (1) · f\@st 2604 firmware (1) |
| Unclassified | 42 | · | · | 28 | 28 | 5.0 | virtual war (6) · devscripts (4) · jcore (2) |
Weakness × Sector
Which weaknesses hit which solution categories in October 2012
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS119Memory Buffer Bounds264CWE-26489SQL Injection20Improper Input Validation22Path Traversal352CSRF399CWE-39994Code Injection287Improper AuthenticationWeb & CMS Plugins401631458273OSS Libraries63141351114Consumer Software84741442Operating Systems71210351Enterprise Software11421311Communications1283111Networking Infrastructure11711231Databases312Cloud & SaaS27222Security Products213221111