month report
February 2013
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
February 2013 closed with 410 published CVEs. 104 criticals, oracle led volume, mostly via jdk. Top weakness class — CWE-119 (46 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
410
— MoM— YoY
Severity mix
104 / 57
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.2%
5 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4770.0
n=5
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
3762
n=4
Detection gap
KEV pressure, no Nuclei coverage
February 2013 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 4opensuse38 CVE
- KEV 4redhat37 CVE
- KEV 4adobe26 CVE
- KEV 4suse6 CVE
- KEV 2novell inc.8 CVE
Weakness × Vendor
What's spreading where in February 2013
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
119Memory Buffer Bounds79XSS20Improper Input Validation362Race Condition399CWE-399264CWE-264200Information Exposure310CWE-310416Use After Free287Improper Authenticationoracle1microsoft13215211opensuse2118sunredhat45161231ibm212153adobe1731google2213canonical221215linux5512332cisco32422111wireshark21121
Most discussed CVEs — February 2013
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #193s-software5 CVE
- #23cloudbees4 CVE
- #25jenkins4 CVE
- #29xen4 CVE
- #30bigantsoft3 CVE
- #31ffmpeg3 CVE
- #34openstack3 CVE
- #36qt3 CVE
- #37zend3 CVE
- #42moxa2 CVE
Top vendors
Ranked by distinct CVE count this period.
- 54 CVE31 critCVSS 7.8jdk (41) · jre (41) · javafx (13)
- 53 CVE15 critCVSS 5.8PoC 1windows server 2008 (38) · windows vista (36) · windows 7 (35)
- 38 CVE12 critCVSS 7.4KEV 4PoC 2opensuse (38)
- 37 CVE5 critCVSS 6.4KEV 4PoC 3enterprise linux server (14) · enterprise linux desktop (14) · enterprise linux workstation (14)
- 35 CVE19 critCVSS 8.1jdk (35) · jre (35)
- 30 CVECVSS 4.9maximo asset management essentials (8) · smartcloud control desk (8) · maximo asset management (8)
- 26 CVE21 critCVSS 9.4KEV 4flash player (22) · air (17) · air sdk (17)
- 26 CVECVSS 6.7chrome (23) · android (2) · android debug bridge (1)
- 25 CVE12 critCVSS 7.0PoC 2ubuntu linux (25)
- 24 CVECVSS 4.9PoC 4linux kernel (24)
- 19 CVE1 critCVSS 6.3unified meetingplace (2) · unified communications manager (2) · unity express software (2)
- 19 CVECVSS 2.9wireshark (19)
- 17 CVE11 critCVSS 8.2PoC 2firefox (14) · seamonkey (14) · thunderbird esr (12)
- 11 CVE4 critCVSS 3.6lefthand p4000 virtual san appliance (4) · san\/iq (4) · arcsight connector appliance (3)
- 9 CVE7 critCVSS 8.4debian linux (9)
- 8 CVECVSS 6.2KEV 2PoC 1opensuse (8) · suse linux enterprise desktop (2)
- 6 CVECVSS 4.3gentoo linux (6)
- 6 CVE1 critCVSS 7.9KEV 4linux enterprise desktop (5) · linux enterprise server (2) · linux enterprise software development kit (1)
- 5 CVE4 critCVSS 9.6NEWcodesys gateway-server (5)
- 5 CVE2 critCVSS 6.8fedora (3) · sssd (2)
- 5 CVECVSS 4.0org.jenkins-ci.main:jenkins-core (4) · org.bouncycastle:bcprov-jdk15on (1)
- 5 CVE1 critCVSS 6.5PoC 4rack (2) · activerecord (2) · json gem (1)
- 4 CVECVSS 4.0NEWjenkins (4)
- 4 CVECVSS 6.3rsa archer egrc (4) · rsa archer smartsuite (4)
- 4 CVECVSS 4.0NEWjenkins (4)
- 4 CVE2 critCVSS 7.3opera browser (4)
- 4 CVECVSS 4.9pidgin (4)
- 4 CVE1 critCVSS 8.4esxi (3) · vcenter server (3) · esx (2)
- 4 CVECVSS 5.1NEWxen (4)
- 3 CVE1 critCVSS 7.5NEWbigant im message server (3)
- 3 CVECVSS 7.5NEWffmpeg (3)
- 3 CVECVSS 5.8joomla\! (3)
- 3 CVECVSS 4.2openssl (3)
- 3 CVECVSS 5.5NEWkeystone (1) · essex (1) · folsom (1)
- 3 CVE1 critCVSS 6.8zendframework/zendframework1 (3)
- 3 CVECVSS 4.1NEWqt (3)
- 3 CVE1 critCVSS 6.8NEWzend framework (3)
- 3 CVECVSS 4.0Nuclei 1PoC 1linux (2) · debian gnu/linux (1)
- 2 CVECVSS 4.3http server (2)
- 2 CVECVSS 5.2garoon (2)
- 2 CVECVSS 4.5gnutls (1) · glibc (1)
- 2 CVECVSS 6.7NEWedr-g903 (1) · edr g903 firmware (1) · edr-g903 firmware (1)
- 2 CVECVSS 3.5NEWmoxa edr-810 (2)
- 2 CVE2 critCVSS 9.7groupwise (2)
- 2 CVECVSS 5.0openssl (2)
- 2 CVECVSS 5.5PoC 2orangehrm (2)
- 2 CVECVSS 3.5NEWpolarssl (2)
- 2 CVECVSS 4.7NEWPoC 1rack (2)
- 2 CVE1 critCVSS 8.1PoC 2rails (2) · ruby on rails (1)
- 2 CVECVSS 5.1samba (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 54 | 31 | · | · | jdk (41) · jre (41) · javafx (13) | — | ||
| 2 | microsoft | 53 | 15 | · | · | PoC 1 | windows server 2008 (38) · windows vista (36) · windows 7 (35) | — | |
| 3 | opensuse | 38 | 12 | 4 | · | KEV 4PoC 2 | opensuse (38) | — | |
| 4 | redhat | 37 | 5 | 4 | · | KEV 4PoC 3 | enterprise linux server (14) · enterprise linux desktop (14) · enterprise linux workstation (14) | — | |
| 5 | sun | 35 | 19 | · | · | jdk (35) · jre (35) | — | ||
| 6 | ibm | 30 | · | · | · | maximo asset management essentials (8) · smartcloud control desk (8) · maximo asset management (8) | — | ||
| 7 | adobe | 26 | 21 | 4 | · | KEV 4 | flash player (22) · air (17) · air sdk (17) | — | |
| 8 | 26 | · | · | · | chrome (23) · android (2) · android debug bridge (1) | — | |||
| 9 | canonical | 25 | 12 | · | · | PoC 2 | ubuntu linux (25) | — | |
| 10 | linux | 24 | · | · | · | PoC 4 | linux kernel (24) | — | |
| 11 | cisco | 19 | 1 | · | · | unified meetingplace (2) · unified communications manager (2) · unity express software (2) | — | ||
| 12 | wireshark | 19 | · | · | · | wireshark (19) | — | ||
| 13 | mozilla | 17 | 11 | · | · | PoC 2 | firefox (14) · seamonkey (14) · thunderbird esr (12) | — | |
| 14 | hp | 11 | 4 | · | · | lefthand p4000 virtual san appliance (4) · san\/iq (4) · arcsight connector appliance (3) | — | ||
| 15 | debian | 9 | 7 | · | · | debian linux (9) | — | ||
| 16 | novell inc. | 8 | · | 2 | · | KEV 2PoC 1 | opensuse (8) · suse linux enterprise desktop (2) | — | |
| 17 | gentoo foundation inc. | 6 | · | · | · | gentoo linux (6) | — | ||
| 18 | suse | 6 | 1 | 4 | · | KEV 4 | linux enterprise desktop (5) · linux enterprise server (2) · linux enterprise software development kit (1) | — | |
| 19 | 3s-software | 5 | 4 | · | · | NEW | codesys gateway-server (5) | — | |
| 20 | fedoraproject | 5 | 2 | · | · | fedora (3) · sssd (2) | — | ||
| 21 | maven | 5 | · | · | · | org.jenkins-ci.main:jenkins-core (4) · org.bouncycastle:bcprov-jdk15on (1) | — | ||
| 22 | rubygems | 5 | 1 | · | · | PoC 4 | rack (2) · activerecord (2) · json gem (1) | — | |
| 23 | cloudbees | 4 | · | · | · | NEW | jenkins (4) | — | |
| 24 | emc | 4 | · | · | · | rsa archer egrc (4) · rsa archer smartsuite (4) | — | ||
| 25 | jenkins | 4 | · | · | · | NEW | jenkins (4) | — | |
| 26 | opera | 4 | 2 | · | · | opera browser (4) | — | ||
| 27 | pidgin | 4 | · | · | · | pidgin (4) | — | ||
| 28 | vmware | 4 | 1 | · | · | esxi (3) · vcenter server (3) · esx (2) | — | ||
| 29 | xen | 4 | · | · | · | NEW | xen (4) | — | |
| 30 | bigantsoft | 3 | 1 | · | · | NEW | bigant im message server (3) | — | |
| 31 | ffmpeg | 3 | · | · | · | NEW | ffmpeg (3) | — | |
| 32 | joomla | 3 | · | · | · | joomla\! (3) | — | ||
| 33 | openssl | 3 | · | · | · | openssl (3) | — | ||
| 34 | openstack | 3 | · | · | · | NEW | keystone (1) · essex (1) · folsom (1) | — | |
| 35 | packagist | 3 | 1 | · | · | zendframework/zendframework1 (3) | — | ||
| 36 | qt | 3 | · | · | · | NEW | qt (3) | — | |
| 37 | zend | 3 | 1 | · | · | NEW | zend framework (3) | — | |
| 38 | сообщество свободного программного обеспечения | 3 | · | · | 1 | Nuclei 1PoC 1 | linux (2) · debian gnu/linux (1) | — | |
| 39 | apache | 2 | · | · | · | http server (2) | — | ||
| 40 | cybozu | 2 | · | · | · | garoon (2) | — | ||
| 41 | gnu | 2 | · | · | · | gnutls (1) · glibc (1) | — | ||
| 42 | moxa | 2 | · | · | · | NEW | edr-g903 (1) · edr g903 firmware (1) · edr-g903 firmware (1) | — | |
| 43 | moxa inc. | 2 | · | · | · | NEW | moxa edr-810 (2) | — | |
| 44 | novell | 2 | 2 | · | · | groupwise (2) | — | ||
| 45 | openssl software foundation | 2 | · | · | · | openssl (2) | — | ||
| 46 | orangehrm | 2 | · | · | · | PoC 2 | orangehrm (2) | — | |
| 47 | polarssl | 2 | · | · | · | NEW | polarssl (2) | — | |
| 48 | rack project | 2 | · | · | · | NEWPoC 1 | rack (2) | — | |
| 49 | rubyonrails | 2 | 1 | · | · | PoC 2 | rails (2) · ruby on rails (1) | — | |
| 50 | samba | 2 | · | · | · | samba (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems186 CVE120 crit32 KEV16 vendorsCVSS 8.1opensuse (46) · ubuntu linux (25) · linux kernel (24)
- Databases55 CVE54 crit3 vendorsCVSS 7.8jdk (41) · jre (41) · javafx (13)
- Consumer Software49 CVE99 crit10 KEV6 vendorsCVSS 9.4flash player (22) · air (17) · air sdk (17)
- Enterprise Software48 CVE8 crit6 vendorsCVSS 5.5maximo asset management (8) · maximo asset management essentials (8) · smartcloud control desk (8)
- OSS Libraries33 CVE5 crit16 vendorsCVSS 7.5openssl (5) · qt (4) · ffmpeg (3)
- Mobile Apps28 CVE3 vendorsCVSS 7.5chrome (23) · android (2) · -ma5200g (1)
- Security Products28 CVE5 vendorsCVSS 6.3wireshark (19)
- 3 crit5 vendorsCVSS 7.5unified communications manager (2) · unified meetingplace (2) · unity express software (2)
- ICS / OT / IoT16 CVE8 crit10 vendorsCVSS 9.3codesys gateway-server (5) · accutech manager (1) · comfortpoint open manager station (1)
- Web & CMS Plugins15 CVE1 crit12 vendorsCVSS 7.4joomla\! (3) · http server (2) · digilibe (1)
- Cloud & SaaS12 CVE7 crit4 vendorsCVSS 9.3esxi (3) · vcenter server (3) · esx (2)
- Communications9 CVE1 crit4 vendorsCVSS 5.9pidgin (4) · bigant im message server (3) · ircd-hybrid (1)
- DevTools & CI5 CVE3 vendorsCVSS 4.0jenkins (8)
- Unclassified5 CVE1 crit5 vendorsCVSS 5.63ware disk manager (1) · classipress (1) · lazyest-backup (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 186 | 120 | 32 | 16 | 45 | 8.1 | opensuse (46) · ubuntu linux (25) · linux kernel (24) |
| Databases▸ 1 | 55 | 54 | · | 3 | 13 | 7.8 | jdk (41) · jre (41) · javafx (13) |
| Consumer Software▸ 3 | 49 | 99 | 10 | 6 | 18 | 9.4 | flash player (22) · air (17) · air sdk (17) |
| Enterprise Software▸ 4 | 48 | 8 | · | 6 | 698 | 5.5 | maximo asset management (8) · maximo asset management essentials (8) · smartcloud control desk (8) |
| OSS Libraries▸ 6 | 33 | 5 | · | 16 | 20 | 7.5 | openssl (5) · qt (4) · ffmpeg (3) |
| Mobile Apps▸ 2 | 28 | · | · | 3 | 15 | 7.5 | chrome (23) · android (2) · -ma5200g (1) |
| Security Products▸ 5 | 28 | · | · | 5 | 7 | 6.3 | wireshark (19) |
| Networking Infrastructure▸ 4 | 23 | 3 | · | 5 | 37 | 7.5 | unified communications manager (2) · unified meetingplace (2) · unity express software (2) |
| ICS / OT / IoT▸ 5 | 16 | 8 | · | 10 | 15 | 9.3 | codesys gateway-server (5) · accutech manager (1) · comfortpoint open manager station (1) |
| Web & CMS Plugins▸ 4 | 15 | 1 | · | 12 | 13 | 7.4 | joomla\! (3) · http server (2) · digilibe (1) |
| Cloud & SaaS▸ 3 | 12 | 7 | · | 4 | 16 | 9.3 | esxi (3) · vcenter server (3) · esx (2) |
| Communications▸ 2 | 9 | 1 | · | 4 | 4 | 5.9 | pidgin (4) · bigant im message server (3) · ircd-hybrid (1) |
| DevTools & CI▸ 2 | 5 | · | · | 3 | 2 | 4.0 | jenkins (8) |
| Unclassified | 5 | 1 | · | 5 | 5 | 5.6 | 3ware disk manager (1) · classipress (1) · lazyest-backup (1) |
Weakness × Sector
Which weaknesses hit which solution categories in February 2013
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds79XSS20Improper Input Validation362Race Condition399CWE-399264CWE-264200Information Exposure310CWE-310416Use After Free287Improper AuthenticationOperating Systems11112358117881OSS Libraries13145337Consumer Software212215318Networking Infrastructure751643121Enterprise Software213152Communications21141Cloud & SaaS212111Web & CMS Plugins913ICS / OT / IoT41212Databases311