month report
March 2013
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
March 2013 closed with 446 published CVEs. 42 criticals, redhat led volume, mostly via enterprise linux. Top weakness class — CWE-264 (63 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
446
— MoM— YoY
Severity mix
42 / 94
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.1%
5 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4732.2
n=5
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
3332
n=2
Detection gap
KEV pressure, no Nuclei coverage
March 2013 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 2microsoft28 CVE
Weakness × Vendor
What's spreading where in March 2013
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
264CWE-26479XSS119Memory Buffer Bounds399CWE-399200Information Exposure20Improper Input Validation189CWE-189352CSRF22Path Traversal94Code Injectionlinux1251442redhat82183ibm313113231microsoft413911google5661111hp11canonical41311opensuse2116rubygems34144сообщество свободного программного обеспечения112111apple4111debian1325
Most discussed CVEs — March 2013
No CVE mentions in the news this month yet.
Top vendors
Ranked by distinct CVE count this period.
- 40 CVE1 critCVSS 4.7PoC 7enterprise linux (14) · red hat enterprise linux (6) · enterprise linux server (5)
- 39 CVECVSS 3.7PoC 8linux kernel (39)
- 31 CVE1 critCVSS 5.1security appscan (7) · cognos business intelligence (7) · rational policy tester (5)
- 28 CVE10 critCVSS 7.6KEV 2PoC 1internet explorer (12) · windows 7 (6) · sharepoint foundation (5)
- 25 CVE1 critCVSS 7.0chrome (23) · v8 (1) · chrome os (1)
- 23 CVE3 critCVSS 7.8intelligent management center (12) · intelligent management center for automated network manager (12) · systems insight manager (5)
- 21 CVE1 critCVSS 5.6Nuclei 1PoC 5ubuntu linux (18) · ubuntu (3)
- 18 CVE1 critCVSS 5.0PoC 1opensuse (18)
- 18 CVECVSS 5.5Nuclei 1PoC 15rack (3) · actionpack (2) · command_wrap (1)
- 17 CVECVSS 3.7Nuclei 1PoC 1linux (10) · debian gnu/linux (7) · perl (1)
- 15 CVECVSS 5.3mac os x (8) · iphone os (5) · mac os x server (4)
- 14 CVE2 critCVSS 5.3PoC 1debian linux (10) · advanced package tool (1) · apache2 (1)
- 14 CVE1 critCVSS 5.7NEWwincc tia portal (7) · simatic pcs7 (6) · wincc (6)
- 14 CVECVSS 4.5wireshark (14)
- 13 CVECVSS 6.6ios (7) · ios xe (2) · cisco ios (2)
- 12 CVE1 critCVSS 6.2PoC 2gentoo linux (12)
- 12 CVE6 critCVSS 8.5PoC 2jre (6) · jdk (6) · mysql (3)
- 11 CVECVSS 4.9Nuclei 1PoC 4org.jenkins-ci.main:jenkins-core (5) · org.webjars.npm:jquery (1) · org.apache.cxf:cxf-rt-frontend-jaxrs (1)
- 11 CVECVSS 4.9NEWmoodle/moodle (7) · piwik/piwik (2) · matomo/matomo (2)
- 10 CVECVSS 2.1NEWbest responsive (1) · business (1) · clean theme (1)
- 9 CVECVSS 6.4PoC 2opensuse (6) · opensuse leap (2) · suse linux enterprise (1)
- 8 CVECVSS 5.0PoC 3qpid (4) · cxf (2) · commons fileupload (1)
- 8 CVECVSS 4.4NEWmoodle (8)
- 7 CVE5 critCVSS 9.8flash player (5) · adobe air (4) · adobe air sdk (4)
- 7 CVE3 critCVSS 8.1PoC 2zenworks mobile management (2) · zenworks configuration management (2) · messenger (1)
- 7 CVE1 critCVSS 6.3NEWPoC 1puppet (7) · puppet enterprise (7)
- 6 CVECVSS 5.7NEWfolsom (5) · essex (4) · grizzly (2)
- 6 CVECVSS 5.8NEWPoC 1puppet (6)
- 6 CVE1 critCVSS 6.7NEWvxworks (6)
- 5 CVECVSS 6.2NEWbitcoin core (5) · bitcoind (5) · bitcoin-qt (5)
- 5 CVECVSS 5.3NEWjenkins (5)
- 5 CVECVSS 5.7PoC 2centos (5)
- 4 CVECVSS 4.2fedora (2) · sssd (1) · 389 directory server (1)
- 4 CVECVSS 5.0gnome online accounts (2) · evolution (1) · gnome screensaver (1)
- 4 CVECVSS 5.1nova (2) · keystone (1) · glance (1)
- 4 CVECVSS 4.8PoC 3rails (4) · ruby on rails (4)
- 3 CVECVSS 5.3NEWopen source (3) · certified asterisk (2) · digiumphones (2)
- 3 CVE2 critCVSS 5.5smarts network configuration manager (2) · smarts ip manager (1) · smarts network protocol manager (1)
- 3 CVECVSS 4.5NEWPoC 2rack (3)
- 3 CVECVSS 5.2spotfire web player (2) · spotfire statistics services (1)
- 2 CVECVSS 5.9NEWaskiaweb (2)
- 2 CVECVSS 4.3NEWdopvcomet\* (1) · dopvstar\* (1)
- 2 CVECVSS 4.8NEWvino (2)
- 2 CVECVSS 7.5NEWffmpeg (2)
- 2 CVECVSS 6.3bind (1) · dhcp (1)
- 2 CVECVSS 2.1NEWkatello (2) · katello-configure (1)
- 2 CVECVSS 5.0NEWNuclei 2PoC 1wp-mailup (2)
- 2 CVECVSS 4.7NEWmatomo (2)
- 2 CVECVSS 5.0kerberos 5 (2)
- 2 CVE1 critCVSS 7.6thunderbird (2) · thunderbird esr (2) · firefox (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | redhat | 40 | 1 | · | · | PoC 7 | enterprise linux (14) · red hat enterprise linux (6) · enterprise linux server (5) | — | |
| 2 | linux | 39 | · | · | · | PoC 8 | linux kernel (39) | — | |
| 3 | ibm | 31 | 1 | · | · | security appscan (7) · cognos business intelligence (7) · rational policy tester (5) | — | ||
| 4 | microsoft | 28 | 10 | 2 | · | KEV 2PoC 1 | internet explorer (12) · windows 7 (6) · sharepoint foundation (5) | — | |
| 5 | 25 | 1 | · | · | chrome (23) · v8 (1) · chrome os (1) | — | |||
| 6 | hp | 23 | 3 | · | · | intelligent management center (12) · intelligent management center for automated network manager (12) · systems insight manager (5) | — | ||
| 7 | canonical | 21 | 1 | · | 1 | Nuclei 1PoC 5 | ubuntu linux (18) · ubuntu (3) | — | |
| 8 | opensuse | 18 | 1 | · | · | PoC 1 | opensuse (18) | — | |
| 9 | rubygems | 18 | · | · | 1 | Nuclei 1PoC 15 | rack (3) · actionpack (2) · command_wrap (1) | — | |
| 10 | сообщество свободного программного обеспечения | 17 | · | · | 1 | Nuclei 1PoC 1 | linux (10) · debian gnu/linux (7) · perl (1) | — | |
| 11 | apple | 15 | · | · | · | mac os x (8) · iphone os (5) · mac os x server (4) | — | ||
| 12 | debian | 14 | 2 | · | · | PoC 1 | debian linux (10) · advanced package tool (1) · apache2 (1) | — | |
| 13 | siemens | 14 | 1 | · | · | NEW | wincc tia portal (7) · simatic pcs7 (6) · wincc (6) | — | |
| 14 | wireshark | 14 | · | · | · | wireshark (14) | — | ||
| 15 | cisco | 13 | · | · | · | ios (7) · ios xe (2) · cisco ios (2) | — | ||
| 16 | gentoo foundation inc. | 12 | 1 | · | · | PoC 2 | gentoo linux (12) | — | |
| 17 | oracle | 12 | 6 | · | · | PoC 2 | jre (6) · jdk (6) · mysql (3) | — | |
| 18 | maven | 11 | · | · | 1 | Nuclei 1PoC 4 | org.jenkins-ci.main:jenkins-core (5) · org.webjars.npm:jquery (1) · org.apache.cxf:cxf-rt-frontend-jaxrs (1) | — | |
| 19 | packagist | 11 | · | · | · | NEW | moodle/moodle (7) · piwik/piwik (2) · matomo/matomo (2) | — | |
| 20 | devsaran | 10 | · | · | · | NEW | best responsive (1) · business (1) · clean theme (1) | — | |
| 21 | novell inc. | 9 | · | · | · | PoC 2 | opensuse (6) · opensuse leap (2) · suse linux enterprise (1) | — | |
| 22 | apache | 8 | · | · | · | PoC 3 | qpid (4) · cxf (2) · commons fileupload (1) | — | |
| 23 | moodle | 8 | · | · | · | NEW | moodle (8) | — | |
| 24 | adobe | 7 | 5 | · | · | flash player (5) · adobe air (4) · adobe air sdk (4) | — | ||
| 25 | novell | 7 | 3 | · | · | PoC 2 | zenworks mobile management (2) · zenworks configuration management (2) · messenger (1) | — | |
| 26 | puppet | 7 | 1 | · | · | NEWPoC 1 | puppet (7) · puppet enterprise (7) | — | |
| 27 | openstack | 6 | · | · | · | NEW | folsom (5) · essex (4) · grizzly (2) | — | |
| 28 | puppetlabs | 6 | · | · | · | NEWPoC 1 | puppet (6) | — | |
| 29 | windriver | 6 | 1 | · | · | NEW | vxworks (6) | — | |
| 30 | bitcoin | 5 | · | · | · | NEW | bitcoin core (5) · bitcoind (5) · bitcoin-qt (5) | — | |
| 31 | jenkins | 5 | · | · | · | NEW | jenkins (5) | — | |
| 32 | the centos project | 5 | · | · | · | PoC 2 | centos (5) | — | |
| 33 | fedoraproject | 4 | · | · | · | fedora (2) · sssd (1) · 389 directory server (1) | — | ||
| 34 | gnome | 4 | · | · | · | gnome online accounts (2) · evolution (1) · gnome screensaver (1) | — | ||
| 35 | pypi | 4 | · | · | · | nova (2) · keystone (1) · glance (1) | — | ||
| 36 | rubyonrails | 4 | · | · | · | PoC 3 | rails (4) · ruby on rails (4) | — | |
| 37 | asterisk | 3 | · | · | · | NEW | open source (3) · certified asterisk (2) · digiumphones (2) | — | |
| 38 | emc | 3 | 2 | · | · | smarts network configuration manager (2) · smarts ip manager (1) · smarts network protocol manager (1) | — | ||
| 39 | rack project | 3 | · | · | · | NEWPoC 2 | rack (3) | — | |
| 40 | tibco | 3 | · | · | · | spotfire web player (2) · spotfire statistics services (1) | — | ||
| 41 | askia | 2 | · | · | · | NEW | askiaweb (2) | — | |
| 42 | bayashi | 2 | · | · | · | NEW | dopvcomet\* (1) · dopvstar\* (1) | — | |
| 43 | david king | 2 | · | · | · | NEW | vino (2) | — | |
| 44 | ffmpeg | 2 | · | · | · | NEW | ffmpeg (2) | — | |
| 45 | isc | 2 | · | · | · | bind (1) · dhcp (1) | — | ||
| 46 | katello | 2 | · | · | · | NEW | katello (2) · katello-configure (1) | — | |
| 47 | mailup | 2 | · | · | 2 | NEWNuclei 2PoC 1 | wp-mailup (2) | — | |
| 48 | matomo | 2 | · | · | · | NEW | matomo (2) | — | |
| 49 | mit | 2 | · | · | · | kerberos 5 (2) | — | ||
| 50 | mozilla | 2 | 1 | · | · | thunderbird (2) · thunderbird esr (2) · firefox (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems166 CVE32 crit3 KEV29 vendorsCVSS 7.6linux kernel (39) · opensuse (24) · ubuntu linux (18)
- Enterprise Software85 CVE18 crit10 vendorsCVSS 9.3intelligent management center (12) · intelligent management center for automated network manager (12) · cognos business intelligence (7)
- OSS Libraries67 CVE23 vendorsCVSS 6.1rack (6) · actionpack (2) · activerecord (1)
- Web & CMS Plugins44 CVE18 vendorsCVSS 5.9moodle (8) · qpid (4) · cxf (2)
- Mobile Apps40 CVE1 crit2 vendorsCVSS 7.0chrome (23) · chrome frame (1) · chrome os (1)
- 11 vendorsCVSS 7.3ios (7) · cisco ios (2) · ios xe (2)
- Security Products24 CVE2 crit8 vendorsCVSS 7.5wireshark (14)
- Consumer Software18 CVE30 crit8 vendorsCVSS 9.3flash player (5) · adobe air (4) · adobe air sdk (4)
- DevTools & CI14 CVE5 vendorsCVSS 5.6puppet (6) · drush debian packaging (1)
- Databases13 CVE13 crit5 vendorsCVSS 8.2jdk (6) · jre (6) · mysql (5)
- Cloud & SaaS13 CVE6 vendorsCVSS 5.8folsom (5) · essex (4) · grizzly (2)
- ICS / OT / IoT6 CVE6 vendorsCVSS 6.8zoneminder (2) · fi8919w (1)
- Communications5 CVE3 vendorsCVSS 5.8open source (3) · certified asterisk (2) · digiumphones (2)
- Hardware Firmware1 CVE1 vendorsCVSS 5.9m10-1 firmware (1) · m10-4 firmware (1) · m10-4s firmware (1)
- Unclassified22 CVE4 crit14 vendorsCVSS 6.0bitcoin core (5) · bitcoin-qt (5) · bitcoind (5)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 4 | 166 | 32 | 3 | 29 | 76 | 7.6 | linux kernel (39) · opensuse (24) · ubuntu linux (18) |
| Enterprise Software▸ 4 | 85 | 18 | · | 10 | 65 | 9.3 | intelligent management center (12) · intelligent management center for automated network manager (12) · cognos business intelligence (7) |
| OSS Libraries▸ 8 | 67 | · | · | 23 | 52 | 6.1 | rack (6) · actionpack (2) · activerecord (1) |
| Web & CMS Plugins▸ 5 | 44 | · | · | 18 | 30 | 5.9 | moodle (8) · qpid (4) · cxf (2) |
| Mobile Apps▸ 2 | 40 | 1 | · | 2 | 9 | 7.0 | chrome (23) · chrome frame (1) · chrome os (1) |
| Networking Infrastructure▸ 4 | 24 | · | · | 11 | 30 | 7.3 | ios (7) · cisco ios (2) · ios xe (2) |
| Security Products▸ 3 | 24 | 2 | · | 8 | 19 | 7.5 | wireshark (14) |
| Consumer Software▸ 4 | 18 | 30 | · | 8 | 25 | 9.3 | flash player (5) · adobe air (4) · adobe air sdk (4) |
| DevTools & CI▸ 3 | 14 | · | · | 5 | 5 | 5.6 | puppet (6) · drush debian packaging (1) |
| Databases▸ 1 | 13 | 13 | · | 5 | 11 | 8.2 | jdk (6) · jre (6) · mysql (5) |
| Cloud & SaaS▸ 4 | 13 | · | · | 6 | 9 | 5.8 | folsom (5) · essex (4) · grizzly (2) |
| ICS / OT / IoT▸ 2 | 6 | · | · | 6 | 8 | 6.8 | zoneminder (2) · fi8919w (1) |
| Communications▸ 3 | 5 | · | · | 3 | 6 | 5.8 | open source (3) · certified asterisk (2) · digiumphones (2) |
| Hardware Firmware | 1 | · | · | 1 | 8 | 5.9 | m10-1 firmware (1) · m10-4 firmware (1) · m10-4s firmware (1) |
| Unclassified | 22 | 4 | · | 14 | 20 | 6.0 | bitcoin core (5) · bitcoin-qt (5) · bitcoind (5) |
Weakness × Sector
Which weaknesses hit which solution categories in March 2013
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
264CWE-26479XSS119Memory Buffer Bounds399CWE-399200Information Exposure20Improper Input Validation189CWE-189352CSRF22Path Traversal94Code InjectionOperating Systems2751591718941OSS Libraries897759247Enterprise Software5172144211Consumer Software71111731112Networking Infrastructure48417541Web & CMS Plugins72025121ICS / OT / IoT3421125Security Products3111111DevTools & CI132Cloud & SaaS6111