month report
January 2013
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
January 2013 closed with 443 published CVEs. 101 criticals, oracle led volume, mostly via mysql. Top weakness class — CWE-119 (75 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
443
— MoM— YoY
Severity mix
101 / 67
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
2.0%
9 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4789.8
n=9
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
3344
n=6
Weakness × Vendor
What's spreading where in January 2013
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — January 2013
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #11mariadb17 CVE
- #15opera13 CVE
- #16moodle10 CVE
- #17rockwell automation8 CVE
- #20portable sdk for upnp project6 CVE
- #22ge5 CVE
- #27miniupnp project4 CVE
- #28moinmo4 CVE
- #30tivoli storage productivity center4 CVE
- #33diy-cms3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 80 CVE6 critCVSS 5.3KEV 2PoC 1mysql (17) · enterprise manager grid control (13) · peoplesoft products (12)
- 47 CVE24 critCVSS 7.4KEV 1PoC 3ubuntu linux (46) · ubuntu (2)
- 46 CVE24 critCVSS 7.9KEV 1PoC 4opensuse (46)
- 45 CVE14 critCVSS 7.0KEV 2PoC 2enterprise linux workstation (23) · enterprise linux desktop (23) · enterprise linux server (22)
- 32 CVE29 critCVSS 9.8KEV 4PoC 1acrobat reader (27) · acrobat (27) · coldfusion (4)
- 29 CVE2 critCVSS 6.9chrome (29) · v8 (1)
- 27 CVE23 critCVSS 8.8PoC 3firefox (27) · seamonkey (27) · thunderbird (26)
- 27 CVE23 critCVSS 8.8PoC 3linux enterprise desktop (26) · linux enterprise server (26) · linux enterprise software development kit (26)
- 24 CVE6 critCVSS 7.8infosphere information server (10) · websphere application server (5) · websphere real time (4)
- 18 CVE3 critCVSS 7.27500 wireless lan controller (4) · wireless lan controller software (4) · 2000 wireless lan controller (4)
- 17 CVECVSS 5.1NEWmariadb (17)
- 16 CVECVSS 5.8iphone os (16) · tvos (1)
- 16 CVE5 critCVSS 7.9PoC 2.net framework (5) · windows 7 (5) · windows server 2008 (5)
- 14 CVE8 critCVSS 8.0PoC 7debian gnu/linux (13) · grep (1) · perl (1)
- 13 CVE3 critCVSS 5.8NEWopera browser (13)
- 10 CVECVSS 5.2NEWmoodle (10)
- 8 CVE1 critCVSS 7.3NEW1788-enbt flexlogix adapter (8) · 1794-aentr flex i/o ethernet/ip adapter (8) · compactlogix and softlogix controllers (8)
- 8 CVE1 critCVSS 7.3compactlogix l35e controller (7) · 1756-enbt (7) · 1756-eweb (7)
- 7 CVECVSS 4.6sunos (7)
- 6 CVE6 critCVSS 10.0NEWPoC 3portable sdk for upnp (6)
- 5 CVE2 critCVSS 8.0PoC 1alphastor (3) · avamar (1) · avamar plugin (1)
- 5 CVE1 critCVSS 5.8NEWintelligent platforms proficy hmi\/scada cimplicity (3) · intelligent platforms proficy process systems (3) · intelligent platforms proficy process systems with cimplicity (3)
- 5 CVECVSS 4.7linux kernel (5)
- 5 CVE1 critCVSS 6.3KEV 1opensuse (3) · suse linux enterprise (1) · suse linux enterprise desktop (1)
- 5 CVECVSS 6.8PoC 3activerecord (2) · authlogic (1) · activesupport (1)
- 5 CVECVSS 7.0PoC 3rails (5) · ruby on rails (4)
- 4 CVE1 critCVSS 8.3NEWPoC 1miniupnpd (4)
- 4 CVECVSS 5.7NEWPoC 1moinmoin (4)
- 4 CVECVSS 5.7PoC 1moin (4)
- 4 CVE4 critCVSS 9.3NEW5.0 (4) · 5.1 (4) · 5.1.1 (4)
- 3 CVE1 critCVSS 5.3cxf (2) · cloudstack (1)
- 3 CVECVSS 6.6PoC 1debian linux (3)
- 3 CVECVSS 6.2NEWPoC 3diy-cms (3)
- 3 CVECVSS 5.3NEWdrupal (3)
- 3 CVECVSS 4.3NEWfreetype (3)
- 3 CVECVSS 4.3gentoo linux (3)
- 3 CVECVSS 6.2NEWPoC 2car portal (3)
- 3 CVECVSS 6.4NEWPoC 3php volunteer management (2) · php ticket system (1)
- 3 CVE1 critCVSS 7.8centos (3)
- 3 CVECVSS 4.6NEWfreeflow print server (3)
- 2 CVE2 critCVSS 9.9NEWcodesys runtime system (2)
- 2 CVE2 critCVSS 9.9NEWcodesys (2) · codesys control rte (2) · codesys control runtime embedded (2)
- 2 CVECVSS 4.7asterisk (2) · certified asterisk (2)
- 2 CVECVSS 6.8PoC 2e107 (2)
- 2 CVE2 critCVSS 9.9NEWcecx-x-c1 modular master controller with codesys (2) · cecx-x-m1 modular controller with codesys and softmotion (2)
- 2 CVE1 critCVSS 7.2diagnostics server (1) · pki activex control (1)
- 2 CVE2 critCVSS 10.0NEWPoC 2libupnp (2)
- 2 CVE1 critCVSS 7.2org.apache.cxf:cxf (2)
- 2 CVECVSS 5.9NEWdocuments pro file viewer (2)
- 2 CVECVSS 4.7NEWNuclei 2organizer (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 80 | 6 | 2 | · | KEV 2PoC 1 | mysql (17) · enterprise manager grid control (13) · peoplesoft products (12) | — | |
| 2 | canonical | 47 | 24 | 1 | · | KEV 1PoC 3 | ubuntu linux (46) · ubuntu (2) | — | |
| 3 | opensuse | 46 | 24 | 1 | · | KEV 1PoC 4 | opensuse (46) | — | |
| 4 | redhat | 45 | 14 | 2 | · | KEV 2PoC 2 | enterprise linux workstation (23) · enterprise linux desktop (23) · enterprise linux server (22) | — | |
| 5 | adobe | 32 | 29 | 4 | · | KEV 4PoC 1 | acrobat reader (27) · acrobat (27) · coldfusion (4) | — | |
| 6 | 29 | 2 | · | · | chrome (29) · v8 (1) | — | |||
| 7 | mozilla | 27 | 23 | · | · | PoC 3 | firefox (27) · seamonkey (27) · thunderbird (26) | — | |
| 8 | suse | 27 | 23 | · | · | PoC 3 | linux enterprise desktop (26) · linux enterprise server (26) · linux enterprise software development kit (26) | — | |
| 9 | ibm | 24 | 6 | · | · | infosphere information server (10) · websphere application server (5) · websphere real time (4) | — | ||
| 10 | cisco | 18 | 3 | · | · | 7500 wireless lan controller (4) · wireless lan controller software (4) · 2000 wireless lan controller (4) | — | ||
| 11 | mariadb | 17 | · | · | · | NEW | mariadb (17) | — | |
| 12 | apple | 16 | · | · | · | iphone os (16) · tvos (1) | — | ||
| 13 | microsoft | 16 | 5 | · | · | PoC 2 | .net framework (5) · windows 7 (5) · windows server 2008 (5) | — | |
| 14 | сообщество свободного программного обеспечения | 14 | 8 | · | · | PoC 7 | debian gnu/linux (13) · grep (1) · perl (1) | — | |
| 15 | opera | 13 | 3 | · | · | NEW | opera browser (13) | — | |
| 16 | moodle | 10 | · | · | · | NEW | moodle (10) | — | |
| 17 | rockwell automation | 8 | 1 | · | · | NEW | 1788-enbt flexlogix adapter (8) · 1794-aentr flex i/o ethernet/ip adapter (8) · compactlogix and softlogix controllers (8) | — | |
| 18 | rockwellautomation | 8 | 1 | · | · | compactlogix l35e controller (7) · 1756-enbt (7) · 1756-eweb (7) | — | ||
| 19 | sun | 7 | · | · | · | sunos (7) | — | ||
| 20 | portable sdk for upnp project | 6 | 6 | · | · | NEWPoC 3 | portable sdk for upnp (6) | — | |
| 21 | emc | 5 | 2 | · | · | PoC 1 | alphastor (3) · avamar (1) · avamar plugin (1) | — | |
| 22 | ge | 5 | 1 | · | · | NEW | intelligent platforms proficy hmi\/scada cimplicity (3) · intelligent platforms proficy process systems (3) · intelligent platforms proficy process systems with cimplicity (3) | — | |
| 23 | linux | 5 | · | · | · | linux kernel (5) | — | ||
| 24 | novell inc. | 5 | 1 | 1 | · | KEV 1 | opensuse (3) · suse linux enterprise (1) · suse linux enterprise desktop (1) | — | |
| 25 | rubygems | 5 | · | · | · | PoC 3 | activerecord (2) · authlogic (1) · activesupport (1) | — | |
| 26 | rubyonrails | 5 | · | · | · | PoC 3 | rails (5) · ruby on rails (4) | — | |
| 27 | miniupnp project | 4 | 1 | · | · | NEWPoC 1 | miniupnpd (4) | — | |
| 28 | moinmo | 4 | · | · | · | NEWPoC 1 | moinmoin (4) | — | |
| 29 | pypi | 4 | · | · | · | PoC 1 | moin (4) | — | |
| 30 | tivoli storage productivity center | 4 | 4 | · | · | NEW | 5.0 (4) · 5.1 (4) · 5.1.1 (4) | — | |
| 31 | apache | 3 | 1 | · | · | cxf (2) · cloudstack (1) | — | ||
| 32 | debian | 3 | · | · | · | PoC 1 | debian linux (3) | — | |
| 33 | diy-cms | 3 | · | · | · | NEWPoC 3 | diy-cms (3) | — | |
| 34 | drupal | 3 | · | · | · | NEW | drupal (3) | — | |
| 35 | freetype | 3 | · | · | · | NEW | freetype (3) | — | |
| 36 | gentoo foundation inc. | 3 | · | · | · | gentoo linux (3) | — | ||
| 37 | netartmedia | 3 | · | · | · | NEWPoC 2 | car portal (3) | — | |
| 38 | shawn bradley | 3 | · | · | · | NEWPoC 3 | php volunteer management (2) · php ticket system (1) | — | |
| 39 | the centos project | 3 | 1 | · | · | centos (3) | — | ||
| 40 | xerox | 3 | · | · | · | NEW | freeflow print server (3) | — | |
| 41 | 3s-software | 2 | 2 | · | · | NEW | codesys runtime system (2) | — | |
| 42 | codesys | 2 | 2 | · | · | NEW | codesys (2) · codesys control rte (2) · codesys control runtime embedded (2) | — | |
| 43 | digium | 2 | · | · | · | asterisk (2) · certified asterisk (2) | — | ||
| 44 | e107 | 2 | · | · | · | PoC 2 | e107 (2) | — | |
| 45 | festo | 2 | 2 | · | · | NEW | cecx-x-c1 modular master controller with codesys (2) · cecx-x-m1 modular controller with codesys and softmotion (2) | — | |
| 46 | hp | 2 | 1 | · | · | diagnostics server (1) · pki activex control (1) | — | ||
| 47 | libupnp project | 2 | 2 | · | · | NEWPoC 2 | libupnp (2) | — | |
| 48 | maven | 2 | 1 | · | · | org.apache.cxf:cxf (2) | — | ||
| 49 | olivetoast | 2 | · | · | · | NEW | documents pro file viewer (2) | — | |
| 50 | organizer project | 2 | · | · | 2 | NEWNuclei 2 | organizer (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems135 CVE213 crit12 KEV18 vendorsCVSS 7.9opensuse (49) · ubuntu linux (46) · linux enterprise desktop (26)
- Consumer Software81 CVE156 crit5 KEV13 vendorsCVSS 9.7firefox (27) · seamonkey (27) · thunderbird (26)
- Databases80 CVE11 crit6 KEV3 vendorsCVSS 5.3mariadb (17) · mysql (17) · enterprise manager grid control (13)
- Web & CMS Plugins57 CVE2 crit31 vendorsCVSS 6.2moodle (10) · diy-cms (3) · drupal (3)
- Mobile Apps45 CVE2 crit2 vendorsCVSS 6.9chrome (29) · v8 (1)
- OSS Libraries39 CVE10 crit16 vendorsCVSS 7.9portable sdk for upnp (6) · miniupnpd (4) · freetype (3)
- Enterprise Software33 CVE69 crit11 vendorsCVSS 7.9infosphere information server (10) · websphere application server (5) · 5.0 (4)
- 19 crit6 vendorsCVSS 7.12000 wireless lan controller (4) · 2100 wireless lan controller (4) · 2500 wireless lan controller (4)
- ICS / OT / IoT18 CVE64 crit10 vendorsCVSS 7.6micrologix (15) · 1756-enbt, 1756-eweb, 1768-enbt, 1768-eweb communication modules (8) · 1788-enbt flexlogix adapter (8)
- Security Products10 CVE2 crit6 vendorsCVSS 6.9alphastor (3) · avamar (1) · avamar plugin (1)
- Communications5 CVE5 vendorsCVSS 5.0asterisk (2) · certified asterisk (2)
- Cloud & SaaS5 CVE4 vendorsCVSS 5.0owncloud server (2)
- Hardware Firmware4 CVE2 vendorsCVSS 4.6freeflow print server (3)
- Unclassified6 CVE1 crit5 vendorsCVSS 6.5rssh (2) · age verification (1) · atomymaxsite (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 135 | 213 | 12 | 18 | 67 | 7.9 | opensuse (49) · ubuntu linux (46) · linux enterprise desktop (26) |
| Consumer Software▸ 5 | 81 | 156 | 5 | 13 | 21 | 9.7 | firefox (27) · seamonkey (27) · thunderbird (26) |
| Databases▸ 1 | 80 | 11 | 6 | 3 | 21 | 5.3 | mariadb (17) · mysql (17) · enterprise manager grid control (13) |
| Web & CMS Plugins▸ 5 | 57 | 2 | · | 31 | 33 | 6.2 | moodle (10) · diy-cms (3) · drupal (3) |
| Mobile Apps▸ 2 | 45 | 2 | · | 2 | 4 | 6.9 | chrome (29) · v8 (1) |
| OSS Libraries▸ 6 | 39 | 10 | · | 16 | 20 | 7.9 | portable sdk for upnp (6) · miniupnpd (4) · freetype (3) |
| Enterprise Software▸ 5 | 33 | 69 | · | 11 | 43 | 7.9 | infosphere information server (10) · websphere application server (5) · 5.0 (4) |
| Networking Infrastructure▸ 3 | 24 | 19 | · | 6 | 33 | 7.1 | 2000 wireless lan controller (4) · 2100 wireless lan controller (4) · 2500 wireless lan controller (4) |
| ICS / OT / IoT▸ 1 | 18 | 64 | · | 10 | 70 | 7.6 | micrologix (15) · 1756-enbt, 1756-eweb, 1768-enbt, 1768-eweb communication modules (8) · 1788-enbt flexlogix adapter (8) |
| Security Products▸ 4 | 10 | 2 | · | 6 | 10 | 6.9 | alphastor (3) · avamar (1) · avamar plugin (1) |
| Communications▸ 4 | 5 | · | · | 5 | 5 | 5.0 | asterisk (2) · certified asterisk (2) |
| Cloud & SaaS▸ 4 | 5 | · | · | 4 | 4 | 5.0 | owncloud server (2) |
| Hardware Firmware▸ 2 | 4 | · | · | 2 | 2 | 4.6 | freeflow print server (3) |
| Unclassified | 6 | 1 | · | 5 | 5 | 6.5 | rssh (2) · age verification (1) · atomymaxsite (1) |
Weakness × Sector
Which weaknesses hit which solution categories in January 2013
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds264CWE-26479XSS20Improper Input Validation200Information Exposure89SQL Injection399CWE-399189CWE-18922Path Traversal416Use After FreeOperating Systems3211314254110Consumer Software289284186210Enterprise Software3510221Web & CMS Plugins715551015OSS Libraries1641432132Databases11Communications3121119Networking Infrastructure253421ICS / OT / IoT6321112Security Products33121