month report
November 2012
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
November 2012 closed with 445 published CVEs. 74 criticals, mozilla led volume, mostly via firefox. Top weakness class — CWE-20 (75 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
445
— MoM— YoY
Severity mix
74 / 68
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.7%
3 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4857.0
n=3
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
—
n=0
Weakness × Vendor
What's spreading where in November 2012
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — November 2012
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #7xen21 CVE
- #11paypal12 CVE
- #17agilefleet7 CVE
- #19oscommerce7 CVE
- #20moodle6 CVE
- #24david alkire5 CVE
- #27libssh5 CVE
- #28patterninsight5 CVE
- #29amazon4 CVE
- #30c3-ilex4 CVE
Top vendors
Ranked by distinct CVE count this period.
- 36 CVE18 critCVSS 8.0PoC 5firefox (29) · seamonkey (25) · thunderbird (25)
- 34 CVE17 critCVSS 7.7PoC 3opensuse (34)
- 32 CVE11 critCVSS 7.3PoC 3enterprise linux desktop (17) · enterprise linux workstation (17) · enterprise linux eus (17)
- 30 CVECVSS 6.6PoC 1chrome (22) · android (3) · web toolkit (2)
- 29 CVE17 critCVSS 7.9PoC 4ubuntu linux (29)
- 26 CVE17 critCVSS 8.2PoC 3linux enterprise desktop (25) · linux enterprise server (25) · linux enterprise software development kit (25)
- 21 CVECVSS 4.7NEWxen (21)
- 17 CVE10 critCVSS 8.0windows 7 (5) · .net framework (5) · windows server 2008 (4)
- 16 CVE9 critCVSS 7.4PoC 2quicktime (9) · iphone os (5) · safari (2)
- 12 CVE11 critCVSS 9.9flash player (11) · air sdk (9) · air (9)
- 12 CVECVSS 5.8NEWPoC 6payments pro (2) · payments standard (2) · paypal pro (1)
- 11 CVECVSS 5.4PoC 2tomcat (5) · axis2 (1) · cxf (1)
- 11 CVE1 critCVSS 5.7websphere application server (4) · websphere datapower xc10 appliance (3) · tivoli federated identity manager (1)
- 11 CVECVSS 5.4PoC 3org.apache.tomcat:tomcat (2) · org.jboss.resteasy:resteasy-client (1) · org.jboss.resteasy:resteasy-jaxb-provider (1)
- 11 CVECVSS 6.0debian gnu/linux (11)
- 9 CVE4 critCVSS 7.1debian linux (9)
- 7 CVE1 critCVSS 6.6NEWfleetcommander (7) · fleetcommander kiosk (7)
- 7 CVE1 critCVSS 5.6mahara (7)
- 7 CVECVSS 5.8NEWPoC 3oscommerce (7)
- 6 CVECVSS 5.2NEWmoodle (6)
- 6 CVECVSS 5.2PoC 1glance (2) · django (1) · apache-libcloud (1)
- 5 CVECVSS 4.9rt (4) · rtfm (1)
- 5 CVECVSS 5.1xenserver (5)
- 5 CVECVSS 5.7NEWPoC 1drag \& drop gallery (5)
- 5 CVE1 critCVSS 5.2PoC 1it operations intelligence (2) · rsa data protection manager appliance (2) · rsa adaptive authentication on-premise (1)
- 5 CVE1 critCVSS 7.7gentoo linux (5)
- 5 CVECVSS 6.9NEWlibssh (5)
- 5 CVECVSS 5.6NEWpattern insight (5)
- 4 CVECVSS 6.2NEWPoC 1flexible payments service (1) · ec2 api tools java library (1) · elastic load balancing (1)
- 4 CVECVSS 6.4NEWeoscada (4)
- 4 CVECVSS 5.9NEWPoC 2cms (4)
- 4 CVE2 critCVSS 8.9PoC 1file reporter (4)
- 4 CVECVSS 5.7opensuse (4)
- 4 CVECVSS 5.0b13/seo_basics (1) · in2code/powermail (1) · moodle/moodle (1)
- 4 CVE3 critCVSS 9.3NEWPoC 4esolar (4) · esolar duo (4) · esolar light (4)
- 4 CVE3 critCVSS 9.3NEWPoC 4esolar duo photovoltaic system monitor (4) · esolar light photovoltaic system monitor (4) · esolar photovoltaic system monitor (4)
- 4 CVE1 critCVSS 7.8PoC 1player (3) · workstation (3) · esxi (1)
- 4 CVECVSS 5.8NEWPoC 3zen cart (4)
- 3 CVE1 critCVSS 7.6prime data center network manager (1) · secure access control server (1) · unified meetingplace (1)
- 3 CVE3 critCVSS 10.0NEWintelligent platforms proficy real-time information portal (3)
- 3 CVE2 critCVSS 9.0performance insight (2) · integrated lights-out 3 firmware (1) · integrated lights-out 4 firmware (1)
- 3 CVECVSS 6.1PoC 2kde (3)
- 3 CVECVSS 6.8NEWmcrypt (3)
- 3 CVECVSS 4.2NEWPoC 2seditio (3)
- 3 CVECVSS 5.8NEWPoC 1prestashop (3) · ebay (1) · ebay module (1)
- 3 CVECVSS 6.2NEWPoC 3landshop (3)
- 3 CVECVSS 5.5NEWpebble (3)
- 3 CVECVSS 5.8NEWPoC 1ubercart (3)
- 3 CVECVSS 4.3NEWyui (3)
- 2 CVECVSS 5.0PoC 1ar web content manager (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | mozilla | 36 | 18 | · | · | PoC 5 | firefox (29) · seamonkey (25) · thunderbird (25) | — | |
| 2 | opensuse | 34 | 17 | · | · | PoC 3 | opensuse (34) | — | |
| 3 | redhat | 32 | 11 | · | · | PoC 3 | enterprise linux desktop (17) · enterprise linux workstation (17) · enterprise linux eus (17) | — | |
| 4 | 30 | · | · | · | PoC 1 | chrome (22) · android (3) · web toolkit (2) | — | ||
| 5 | canonical | 29 | 17 | · | · | PoC 4 | ubuntu linux (29) | — | |
| 6 | suse | 26 | 17 | · | · | PoC 3 | linux enterprise desktop (25) · linux enterprise server (25) · linux enterprise software development kit (25) | — | |
| 7 | xen | 21 | · | · | · | NEW | xen (21) | — | |
| 8 | microsoft | 17 | 10 | · | · | windows 7 (5) · .net framework (5) · windows server 2008 (4) | — | ||
| 9 | apple | 16 | 9 | · | · | PoC 2 | quicktime (9) · iphone os (5) · safari (2) | — | |
| 10 | adobe | 12 | 11 | · | · | flash player (11) · air sdk (9) · air (9) | — | ||
| 11 | paypal | 12 | · | · | · | NEWPoC 6 | payments pro (2) · payments standard (2) · paypal pro (1) | — | |
| 12 | apache | 11 | · | · | · | PoC 2 | tomcat (5) · axis2 (1) · cxf (1) | — | |
| 13 | ibm | 11 | 1 | · | · | websphere application server (4) · websphere datapower xc10 appliance (3) · tivoli federated identity manager (1) | — | ||
| 14 | maven | 11 | · | · | · | PoC 3 | org.apache.tomcat:tomcat (2) · org.jboss.resteasy:resteasy-client (1) · org.jboss.resteasy:resteasy-jaxb-provider (1) | — | |
| 15 | сообщество свободного программного обеспечения | 11 | · | · | · | debian gnu/linux (11) | — | ||
| 16 | debian | 9 | 4 | · | · | debian linux (9) | — | ||
| 17 | agilefleet | 7 | 1 | · | · | NEW | fleetcommander (7) · fleetcommander kiosk (7) | — | |
| 18 | mahara | 7 | 1 | · | · | mahara (7) | — | ||
| 19 | oscommerce | 7 | · | · | · | NEWPoC 3 | oscommerce (7) | — | |
| 20 | moodle | 6 | · | · | · | NEW | moodle (6) | — | |
| 21 | pypi | 6 | · | · | · | PoC 1 | glance (2) · django (1) · apache-libcloud (1) | — | |
| 22 | bestpractical | 5 | · | · | · | rt (4) · rtfm (1) | — | ||
| 23 | citrix | 5 | · | · | · | xenserver (5) | — | ||
| 24 | david alkire | 5 | · | · | · | NEWPoC 1 | drag \& drop gallery (5) | — | |
| 25 | emc | 5 | 1 | · | · | PoC 1 | it operations intelligence (2) · rsa data protection manager appliance (2) · rsa adaptive authentication on-premise (1) | — | |
| 26 | gentoo foundation inc. | 5 | 1 | · | · | gentoo linux (5) | — | ||
| 27 | libssh | 5 | · | · | · | NEW | libssh (5) | — | |
| 28 | patterninsight | 5 | · | · | · | NEW | pattern insight (5) | — | |
| 29 | amazon | 4 | · | · | · | NEWPoC 1 | flexible payments service (1) · ec2 api tools java library (1) · elastic load balancing (1) | — | |
| 30 | c3-ilex | 4 | · | · | · | NEW | eoscada (4) | — | |
| 31 | havalite | 4 | · | · | · | NEWPoC 2 | cms (4) | — | |
| 32 | novell | 4 | 2 | · | · | PoC 1 | file reporter (4) | — | |
| 33 | novell inc. | 4 | · | · | · | opensuse (4) | — | ||
| 34 | packagist | 4 | · | · | · | b13/seo_basics (1) · in2code/powermail (1) · moodle/moodle (1) | — | ||
| 35 | sinapsi | 4 | 3 | · | · | NEWPoC 4 | esolar (4) · esolar duo (4) · esolar light (4) | — | |
| 36 | sinapsitech | 4 | 3 | · | · | NEWPoC 4 | esolar duo photovoltaic system monitor (4) · esolar light photovoltaic system monitor (4) · esolar photovoltaic system monitor (4) | — | |
| 37 | vmware | 4 | 1 | · | · | PoC 1 | player (3) · workstation (3) · esxi (1) | — | |
| 38 | zen-cart | 4 | · | · | · | NEWPoC 3 | zen cart (4) | — | |
| 39 | cisco | 3 | 1 | · | · | prime data center network manager (1) · secure access control server (1) · unified meetingplace (1) | — | ||
| 40 | ge | 3 | 3 | · | · | NEW | intelligent platforms proficy real-time information portal (3) | — | |
| 41 | hp | 3 | 2 | · | · | performance insight (2) · integrated lights-out 3 firmware (1) · integrated lights-out 4 firmware (1) | — | ||
| 42 | kde | 3 | · | · | · | PoC 2 | kde (3) | — | |
| 43 | mcrypt | 3 | · | · | · | NEW | mcrypt (3) | — | |
| 44 | neocrome | 3 | · | · | · | NEWPoC 2 | seditio (3) | — | |
| 45 | prestashop | 3 | · | · | · | NEWPoC 1 | prestashop (3) · ebay (1) · ebay module (1) | — | |
| 46 | samedia | 3 | · | · | · | NEWPoC 3 | landshop (3) | — | |
| 47 | simon brown | 3 | · | · | · | NEW | pebble (3) | — | |
| 48 | ubercart | 3 | · | · | · | NEWPoC 1 | ubercart (3) | — | |
| 49 | yahoo | 3 | · | · | · | NEW | yui (3) | — | |
| 50 | awcm-cms | 2 | · | · | · | PoC 1 | ar web content manager (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems95 CVE163 crit19 vendorsCVSS 8.0opensuse (38) · ubuntu linux (29) · linux enterprise desktop (25)
- Web & CMS Plugins80 CVE1 crit37 vendorsCVSS 5.8moodle (6) · tomcat (5) · cms (4)
- Cloud & SaaS60 CVE5 crit12 vendorsCVSS 7.2xen (21)
- Consumer Software58 CVE101 crit10 vendorsCVSS 9.4firefox (29) · seamonkey (25) · thunderbird (25)
- OSS Libraries50 CVE22 vendorsCVSS 6.4libssh (5) · mcrypt (3) · jruby (2)
- Mobile Apps48 CVE9 crit4 vendorsCVSS 7.4chrome (22) · android (3) · v8 (2)
- Enterprise Software47 CVE18 crit17 vendorsCVSS 9.7esolar (4) · esolar duo (4) · esolar light (4)
- 3 crit9 vendorsCVSS 8.3n150 wireless router (1) · n300 wireless router (1) · n450 wireless router (1)
- ICS / OT / IoT11 CVE15 crit3 vendorsCVSS 9.3eoscada (4) · intelligent platforms proficy real-time information portal (3)
- Security Products9 CVE4 crit5 vendorsCVSS 9.3it operations intelligence (2) · rsa data protection manager appliance (2) · rsa adaptive authentication on-premise (1)
- Communications7 CVE5 vendorsCVSS 5.5yui (3) · aim (1) · gajim (1)
- DevTools & CI5 CVE4 vendorsCVSS 6.8cgit (1) · gaug.es (1) · viewvc (1)
- Databases4 CVE1 crit4 vendorsCVSS 10.0firebird (2) · jdk (2) · jre (2)
- Hardware Firmware4 CVE4 vendorsCVSS 7.8unix graphic driver (1) · vericentre web console (1)
- Unclassified33 CVE23 vendorsCVSS 5.6pattern insight (5) · pebble (3) · ar web content manager (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 95 | 163 | · | 19 | 57 | 8.0 | opensuse (38) · ubuntu linux (29) · linux enterprise desktop (25) |
| Web & CMS Plugins▸ 6 | 80 | 1 | · | 37 | 47 | 5.8 | moodle (6) · tomcat (5) · cms (4) |
| Cloud & SaaS▸ 5 | 60 | 5 | · | 12 | 34 | 7.2 | xen (21) |
| Consumer Software▸ 4 | 58 | 101 | · | 10 | 21 | 9.4 | firefox (29) · seamonkey (25) · thunderbird (25) |
| OSS Libraries▸ 6 | 50 | · | · | 22 | 40 | 6.4 | libssh (5) · mcrypt (3) · jruby (2) |
| Mobile Apps▸ 3 | 48 | 9 | · | 4 | 14 | 7.4 | chrome (22) · android (3) · v8 (2) |
| Enterprise Software▸ 5 | 47 | 18 | · | 17 | 28 | 9.7 | esolar (4) · esolar duo (4) · esolar light (4) |
| Networking Infrastructure▸ 4 | 13 | 3 | · | 9 | 15 | 8.3 | n150 wireless router (1) · n300 wireless router (1) · n450 wireless router (1) |
| ICS / OT / IoT▸ 2 | 11 | 15 | · | 3 | 6 | 9.3 | eoscada (4) · intelligent platforms proficy real-time information portal (3) |
| Security Products▸ 5 | 9 | 4 | · | 5 | 38 | 9.3 | it operations intelligence (2) · rsa data protection manager appliance (2) · rsa adaptive authentication on-premise (1) |
| Communications▸ 1 | 7 | · | · | 5 | 5 | 5.5 | yui (3) · aim (1) · gajim (1) |
| DevTools & CI▸ 2 | 5 | · | · | 4 | 4 | 6.8 | cgit (1) · gaug.es (1) · viewvc (1) |
| Databases▸ 2 | 4 | 1 | · | 4 | 5 | 10.0 | firebird (2) · jdk (2) · jre (2) |
| Hardware Firmware▸ 3 | 4 | · | · | 4 | 9 | 7.8 | unix graphic driver (1) · vericentre web console (1) |
| Unclassified | 33 | · | · | 23 | 24 | 5.6 | pattern insight (5) · pebble (3) · ar web content manager (2) |
Weakness × Sector
Which weaknesses hit which solution categories in November 2012
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
20Improper Input Validation264CWE-26479XSS119Memory Buffer Bounds399CWE-399200Information Exposure310CWE-310416Use After Free352CSRF89SQL InjectionOperating Systems510618862102Consumer Software35102685151Web & CMS Plugins21171525127OSS Libraries1388202471Cloud & SaaS287231211Enterprise Software51292242Communications1731921Networking Infrastructure36422ICS / OT / IoT3312111Security Products1142