month report
April 2013
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
April 2013 closed with 434 published CVEs. 66 criticals, oracle led volume, mostly via jre. Top weakness class — CWE-264 (38 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
434
— MoM— YoY
Severity mix
66 / 69
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.8%
8 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4712.9
n=8
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
3384
n=2
Weakness × Vendor
What's spreading where in April 2013
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
264CWE-264119Memory Buffer Bounds200Information Exposure20Improper Input Validation79XSS352CSRF287Improper Authentication362Race Condition399CWE-39916CWE-16oracle1cisco58313332sunredhat41111111ibm34110111linux41811mariadbmicrosoft113142rubygems31411сообщество свободного программного обеспечения1111mozilla2211canonical131
Most discussed CVEs — April 2013
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #7mariadb19 CVE
- #22chatelao4 CVE
- #25ithemes4 CVE
- #28openstack4 CVE
- #37todd miller3 CVE
- #38xmlsoft3 CVE
- #39crunchify2 CVE
- #42fenrir-inc2 CVE
- #43motorola2 CVE
- #45parallels2 CVE
Top vendors
Ranked by distinct CVE count this period.
- 137 CVE23 critCVSS 6.0KEV 1PoC 1jre (38) · jdk (37) · mysql (24)
- 47 CVE7 critCVSS 7.6adaptive security appliance software (9) · unified computing system infrastructure and unified computing system software (7) · unified computing system 6248up fabric interconnect (7)
- 39 CVE12 critCVSS 7.0jdk (23) · jre (23) · sunos (16)
- 31 CVECVSS 4.8KEV 1PoC 4enterprise linux desktop (15) · enterprise linux eus (15) · enterprise linux server (15)
- 28 CVE6 critCVSS 5.4websphere application server (6) · spss samplepower (4) · tririga application platform (3)
- 26 CVECVSS 4.9KEV 1PoC 14linux kernel (26)
- 19 CVECVSS 4.4NEWmariadb (19)
- 14 CVE3 critCVSS 6.6windows vista (6) · windows server 2008 (6) · windows 8 (5)
- 14 CVE3 critCVSS 7.5PoC 12activerecord (1) · crack (1) · devise (1)
- 14 CVECVSS 5.2PoC 13debian gnu/linux (14)
- 13 CVE5 critCVSS 7.3firefox (13) · seamonkey (10) · thunderbird (8)
- 11 CVECVSS 5.6KEV 1PoC 2ubuntu linux (11) · ubuntu (1)
- 10 CVE1 critCVSS 6.1KEV 1PoC 1opensuse (10)
- 9 CVE7 critCVSS 9.7shockwave player (4) · flash player (3) · adobe air (3)
- 9 CVECVSS 4.9gentoo linux (9)
- 7 CVE2 critCVSS 6.4PoC 2modicon m340 (3) · modicon premium (2) · modicon quantum plc (2)
- 6 CVE1 critCVSS 5.7PoC 1chrome os (5) · authenticator (1)
- 5 CVE2 critCVSS 7.4imanager (2) · suse linux enterprise desktop (1) · groupwise (1)
- 5 CVECVSS 5.4PoC 2phpmyadmin (5)
- 5 CVE2 critCVSS 7.8postgresql (5)
- 4 CVECVSS 5.4activemq (3) · maven (1)
- 4 CVECVSS 6.7NEWPoC 2php address book (4)
- 4 CVECVSS 6.8cogent datahub (4) · opc datahub (4) · datahub quicktrend (4)
- 4 CVECVSS 5.1color laserjet 3000 (1) · color laserjet 3800 (1) · color laserjet 4700 (1)
- 4 CVECVSS 6.9NEWNuclei 4PoC 4backupbuddy (4)
- 4 CVECVSS 5.1org.apache.activemq:activemq-core (1) · org.apache.activemq:activemq-web-demo (1) · org.jruby:jruby (1)
- 4 CVECVSS 7.0driver (2) · display driver (1) · gpu driver (1)
- 4 CVECVSS 5.2NEWfolsom (2) · keystone (2) · keystone essex (2)
- 4 CVECVSS 5.4keystone (2) · django (2)
- 4 CVE1 critCVSS 8.2rslinx enterprise (2) · factorytalk services platform (2)
- 4 CVE1 critCVSS 7.9PoC 2modicon m340 (3) · citect scada (1) · citect facilities (1)
- 3 CVECVSS 4.4mac os x (3)
- 3 CVECVSS 6.3PoC 1fedora (3)
- 3 CVECVSS 6.0poppler (3)
- 3 CVECVSS 6.3suse linux enterprise (3)
- 3 CVECVSS 5.0ruby (3)
- 3 CVECVSS 4.4NEWsudo (3)
- 3 CVECVSS 5.6NEWlibxml2 (2) · libxslt (1)
- 2 CVECVSS 6.8NEWNuclei 2all-in-on-webmaster (1) · foursquare-checkins (1)
- 2 CVECVSS 6.8cybozu office (2) · cybozu dezie (1) · mailwise (1)
- 2 CVECVSS 7.2debian linux (2)
- 2 CVECVSS 5.4NEWsleipnir (1) · sleipnir mobile (1)
- 2 CVECVSS 6.5NEWKEV 1android (2) · razr m (1) · atrix hd (1)
- 2 CVE1 critCVSS 7.5opera browser (2)
- 2 CVECVSS 7.0NEWparallels plesk panel (2)
- 2 CVECVSS 7.8simatic s7-1200 cpu 1211c firmware (2) · simatic s7-1200 cpu 1212c firmware (2) · simatic s7-1200 cpu 1212fc firmware (2)
- 2 CVECVSS 7.0PoC 1linux enterprise desktop (2) · linux enterprise server (2) · linux enterprise high availability extension (1)
- 1 CVECVSS 4.3NEWairdroid (1)
- 1 CVECVSS 7.8NEWvision av1355dn megadome camera (1)
- 1 CVECVSS 1.9NEWavast\! mobile security (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 137 | 23 | 1 | · | KEV 1PoC 1 | jre (38) · jdk (37) · mysql (24) | — | |
| 2 | cisco | 47 | 7 | · | · | adaptive security appliance software (9) · unified computing system infrastructure and unified computing system software (7) · unified computing system 6248up fabric interconnect (7) | — | ||
| 3 | sun | 39 | 12 | · | · | jdk (23) · jre (23) · sunos (16) | — | ||
| 4 | redhat | 31 | · | 1 | · | KEV 1PoC 4 | enterprise linux desktop (15) · enterprise linux eus (15) · enterprise linux server (15) | — | |
| 5 | ibm | 28 | 6 | · | · | websphere application server (6) · spss samplepower (4) · tririga application platform (3) | — | ||
| 6 | linux | 26 | · | 1 | · | KEV 1PoC 14 | linux kernel (26) | — | |
| 7 | mariadb | 19 | · | · | · | NEW | mariadb (19) | — | |
| 8 | microsoft | 14 | 3 | · | · | windows vista (6) · windows server 2008 (6) · windows 8 (5) | — | ||
| 9 | rubygems | 14 | 3 | · | · | PoC 12 | activerecord (1) · crack (1) · devise (1) | — | |
| 10 | сообщество свободного программного обеспечения | 14 | · | · | · | PoC 13 | debian gnu/linux (14) | — | |
| 11 | mozilla | 13 | 5 | · | · | firefox (13) · seamonkey (10) · thunderbird (8) | — | ||
| 12 | canonical | 11 | · | 1 | · | KEV 1PoC 2 | ubuntu linux (11) · ubuntu (1) | — | |
| 13 | opensuse | 10 | 1 | 1 | · | KEV 1PoC 1 | opensuse (10) | — | |
| 14 | adobe | 9 | 7 | · | · | shockwave player (4) · flash player (3) · adobe air (3) | — | ||
| 15 | gentoo foundation inc. | 9 | · | · | · | gentoo linux (9) | — | ||
| 16 | schneider-electric | 7 | 2 | · | · | PoC 2 | modicon m340 (3) · modicon premium (2) · modicon quantum plc (2) | — | |
| 17 | 6 | 1 | · | · | PoC 1 | chrome os (5) · authenticator (1) | — | ||
| 18 | novell | 5 | 2 | · | · | imanager (2) · suse linux enterprise desktop (1) · groupwise (1) | — | ||
| 19 | phpmyadmin | 5 | · | · | · | PoC 2 | phpmyadmin (5) | — | |
| 20 | postgresql | 5 | 2 | · | · | postgresql (5) | — | ||
| 21 | apache | 4 | · | · | · | activemq (3) · maven (1) | — | ||
| 22 | chatelao | 4 | · | · | · | NEWPoC 2 | php address book (4) | — | |
| 23 | cogentdatahub | 4 | · | · | · | cogent datahub (4) · opc datahub (4) · datahub quicktrend (4) | — | ||
| 24 | hp | 4 | · | · | · | color laserjet 3000 (1) · color laserjet 3800 (1) · color laserjet 4700 (1) | — | ||
| 25 | ithemes | 4 | · | · | 4 | NEWNuclei 4PoC 4 | backupbuddy (4) | — | |
| 26 | maven | 4 | · | · | · | org.apache.activemq:activemq-core (1) · org.apache.activemq:activemq-web-demo (1) · org.jruby:jruby (1) | — | ||
| 27 | nvidia | 4 | · | · | · | driver (2) · display driver (1) · gpu driver (1) | — | ||
| 28 | openstack | 4 | · | · | · | NEW | folsom (2) · keystone (2) · keystone essex (2) | — | |
| 29 | pypi | 4 | · | · | · | keystone (2) · django (2) | — | ||
| 30 | rockwellautomation | 4 | 1 | · | · | rslinx enterprise (2) · factorytalk services platform (2) | — | ||
| 31 | schneider electric | 4 | 1 | · | · | PoC 2 | modicon m340 (3) · citect scada (1) · citect facilities (1) | — | |
| 32 | apple | 3 | · | · | · | mac os x (3) | — | ||
| 33 | fedoraproject | 3 | · | · | · | PoC 1 | fedora (3) | — | |
| 34 | freedesktop | 3 | · | · | · | poppler (3) | — | ||
| 35 | novell inc. | 3 | · | · | · | suse linux enterprise (3) | — | ||
| 36 | ruby-lang | 3 | · | · | · | ruby (3) | — | ||
| 37 | todd miller | 3 | · | · | · | NEW | sudo (3) | — | |
| 38 | xmlsoft | 3 | · | · | · | NEW | libxml2 (2) · libxslt (1) | — | |
| 39 | crunchify | 2 | · | · | 2 | NEWNuclei 2 | all-in-on-webmaster (1) · foursquare-checkins (1) | — | |
| 40 | cybozu | 2 | · | · | · | cybozu office (2) · cybozu dezie (1) · mailwise (1) | — | ||
| 41 | debian | 2 | · | · | · | debian linux (2) | — | ||
| 42 | fenrir-inc | 2 | · | · | · | NEW | sleipnir (1) · sleipnir mobile (1) | — | |
| 43 | motorola | 2 | · | 1 | · | NEWKEV 1 | android (2) · razr m (1) · atrix hd (1) | — | |
| 44 | opera | 2 | 1 | · | · | opera browser (2) | — | ||
| 45 | parallels | 2 | · | · | · | NEW | parallels plesk panel (2) | — | |
| 46 | siemens | 2 | · | · | · | simatic s7-1200 cpu 1211c firmware (2) · simatic s7-1200 cpu 1212c firmware (2) · simatic s7-1200 cpu 1212fc firmware (2) | — | ||
| 47 | suse | 2 | · | · | · | PoC 1 | linux enterprise desktop (2) · linux enterprise server (2) · linux enterprise high availability extension (1) | — | |
| 48 | airdroid | 1 | · | · | · | NEW | airdroid (1) | — | |
| 49 | arecont | 1 | · | · | · | NEW | vision av1355dn megadome camera (1) | — | |
| 50 | avast | 1 | · | · | · | NEW | avast\! mobile security (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Databases151 CVE52 crit2 KEV6 vendorsCVSS 6.8jre (38) · jdk (37) · mysql (26)
- Operating Systems134 CVE30 crit7 KEV19 vendorsCVSS 6.9linux kernel (26) · enterprise linux desktop (15) · enterprise linux eus (15)
- 40 crit3 vendorsCVSS 7.6adaptive security appliance software (9) · unified computing system 6248up fabric interconnect (7) · unified computing system 6296up fabric interconnect (7)
- Enterprise Software41 CVE10 crit10 vendorsCVSS 10.0websphere application server (6) · spss samplepower (4) · tririga application platform (3)
- OSS Libraries38 CVE3 crit14 vendorsCVSS 7.5poppler (3) · ruby (3) · libxml2 (2)
- Consumer Software28 CVE29 crit6 vendorsCVSS 9.7firefox (13) · seamonkey (10) · thunderbird (8)
- Web & CMS Plugins17 CVE1 crit7 vendorsCVSS 9.3backupbuddy (4) · all-in-on-webmaster (1) · foursquare-checkins (1)
- ICS / OT / IoT12 CVE8 crit5 vendorsCVSS 7.0modicon m340 (6) · factorytalk services platform (2) · modicon premium (2)
- Mobile Apps12 CVE1 crit1 KEV4 vendorsCVSS 5.9chrome os (5) · android (2) · airdroid (1)
- Cloud & SaaS9 CVE1 crit5 vendorsCVSS 9.3folsom (2) · keystone (2) · keystone essex (2)
- Hardware Firmware7 CVE1 crit4 vendorsCVSS 9.3driver (2) · display driver (1) · gpu driver (1)
- Security Products5 CVE5 vendorsCVSS 8.0modsecurity (1) · trendlink (1)
- Communications2 CVE2 vendorsCVSS 5.8yahoo\! browser (1)
- DevTools & CI1 CVE1 vendorsCVSS 5.0puppet (1)
- Unclassified9 CVE1 crit9 vendorsCVSS 7.0bitzipper (1) · c2 webresource (1) · crack (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Databases▸ 3 | 151 | 52 | 2 | 6 | 27 | 6.8 | jre (38) · jdk (37) · mysql (26) |
| Operating Systems▸ 3 | 134 | 30 | 7 | 19 | 69 | 6.9 | linux kernel (26) · enterprise linux desktop (15) · enterprise linux eus (15) |
| Networking Infrastructure▸ 2 | 49 | 40 | · | 3 | 91 | 7.6 | adaptive security appliance software (9) · unified computing system 6248up fabric interconnect (7) · unified computing system 6296up fabric interconnect (7) |
| Enterprise Software▸ 4 | 41 | 10 | · | 10 | 78 | 10.0 | websphere application server (6) · spss samplepower (4) · tririga application platform (3) |
| OSS Libraries▸ 6 | 38 | 3 | · | 14 | 34 | 7.5 | poppler (3) · ruby (3) · libxml2 (2) |
| Consumer Software▸ 4 | 28 | 29 | · | 6 | 15 | 9.7 | firefox (13) · seamonkey (10) · thunderbird (8) |
| Web & CMS Plugins▸ 2 | 17 | 1 | · | 7 | 9 | 9.3 | backupbuddy (4) · all-in-on-webmaster (1) · foursquare-checkins (1) |
| ICS / OT / IoT▸ 1 | 12 | 8 | · | 5 | 25 | 7.0 | modicon m340 (6) · factorytalk services platform (2) · modicon premium (2) |
| Mobile Apps▸ 2 | 12 | 1 | 1 | 4 | 8 | 5.9 | chrome os (5) · android (2) · airdroid (1) |
| Cloud & SaaS▸ 4 | 9 | 1 | · | 5 | 12 | 9.3 | folsom (2) · keystone (2) · keystone essex (2) |
| Hardware Firmware▸ 4 | 7 | 1 | · | 4 | 6 | 9.3 | driver (2) · display driver (1) · gpu driver (1) |
| Security Products▸ 4 | 5 | · | · | 5 | 5 | 8.0 | modsecurity (1) · trendlink (1) |
| Communications▸ 2 | 2 | · | · | 2 | 2 | 5.8 | yahoo\! browser (1) |
| DevTools & CI▸ 1 | 1 | · | · | 1 | 1 | 5.0 | puppet (1) |
| Unclassified | 9 | 1 | · | 9 | 9 | 7.0 | bitzipper (1) · c2 webresource (1) · crack (1) |
Weakness × Sector
Which weaknesses hit which solution categories in April 2013
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
264CWE-264119Memory Buffer Bounds200Information Exposure20Improper Input Validation79XSS352CSRF287Improper Authentication362Race Condition399CWE-39916CWE-16Operating Systems1410203322541Enterprise Software45313311OSS Libraries583521231Networking Infrastructure69313432Databases22211Consumer Software47212ICS / OT / IoT1322Communications12121Web & CMS Plugins1142Cloud & SaaS1311