month report
July 2013
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
July 2013 closed with 500 published CVEs. 73 criticals, oracle led volume, mostly via mysql. Top weakness class — CWE-79 (64 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
500
— MoM— YoY
Severity mix
73 / 87
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
3.8%
19 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4624.0
n=19
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
3361
n=2
Detection gap
KEV pressure, no Nuclei coverage
July 2013 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1microsoft34 CVE
Weakness × Vendor
What's spreading where in July 2013
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — July 2013
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #20mariadb10 CVE
- #21moodle10 CVE
- #27juniper7 CVE
- #29yahoo5 CVE
- #30bestpractical4 CVE
- #33npm4 CVE
- #34typo34 CVE
- #35verizon4 CVE
- #36videolan4 CVE
- #37blackberry3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 68 CVE4 critCVSS 5.6KEV 1Nuclei 2PoC 2mysql (17) · peoplesoft products (9) · fusion middleware (8)
- 46 CVE4 critCVSS 6.8KEV 1Nuclei 1PoC 1unified communications manager (7) · secure access control system (5) · intrusion prevention system (4)
- 42 CVE10 critCVSS 5.8PoC 1sterling b2b integrator (22) · sterling file gateway (22) · java (8)
- 34 CVE23 critCVSS 7.9KEV 1PoC 2internet explorer (18) · windows server 2008 (9) · windows 7 (9)
- 30 CVE7 critCVSS 7.6PoC 1system management homepage (11) · loadrunner (8) · vpn firewall appliance (2)
- 24 CVE2 critCVSS 6.5PoC 1chrome (21) · android studio (1) · android (1)
- 21 CVE1 critCVSS 5.8PoC 3enterprise linux (9) · red hat enterprise linux (3) · openstack (3)
- 20 CVE1 critCVSS 5.9debian linux (20)
- 20 CVECVSS 5.1PoC 5opensuse (20)
- 19 CVE6 critCVSS 7.6KEV 1Nuclei 3PoC 5struts (7) · subversion (4) · openoffice (2)
- 17 CVECVSS 5.4wireshark (17)
- 14 CVECVSS 5.4PoC 2ubuntu linux (14)
- 14 CVE6 critCVSS 6.8KEV 1Nuclei 3PoC 4org.apache.struts:struts2-core (7) · org.apache.struts.xwork:xwork-core (4) · net.liftweb:lift-webkit_2.8.0 (1)
- 13 CVECVSS 5.5sunos (13)
- 12 CVECVSS 4.7PoC 6linux kernel (12)
- 12 CVECVSS 4.6PoC 1typo3/cms (4) · phpmyadmin/phpmyadmin (3) · moodle/moodle (3)
- 12 CVECVSS 4.5PoC 1linux enterprise server (11) · linux enterprise desktop (11) · linux enterprise software development kit (10)
- 11 CVECVSS 4.5PoC 1phpmyadmin (11)
- 11 CVECVSS 4.5Nuclei 11PoC 2wordpress (11)
- 10 CVECVSS 4.0NEWmariadb (10)
- 10 CVECVSS 4.2NEWmoodle (10)
- 10 CVECVSS 5.7PoC 5web gateway appliance 8450 (6) · web gateway (6) · web gateway appliance 8490 (6)
- 8 CVE5 critCVSS 8.5KEV 1Nuclei 3PoC 3struts (7) · xerces2 java (1)
- 8 CVE5 critCVSS 8.6KEV 1Nuclei 3PoC 3ibm call center for commerce (7) · ibm java (1) · ibm platform symphony (1)
- 8 CVE2 critCVSS 8.1enterprise openscape branch (4) · openscape session border controller (4) · scalance w700 series firmware (2)
- 7 CVE6 critCVSS 9.3flash player (3) · coldfusion (2) · shockwave player (1)
- 7 CVE1 critCVSS 7.2NEWjunos (6) · srx3600 (5) · srx3400 (5)
- 5 CVE1 critCVSS 5.1avamar server virtual edition (2) · avamar server (2) · replication manager (1)
- 5 CVECVSS 4.4NEWyui (4) · tumblr (1)
- 4 CVECVSS 4.8NEWrequest tracker (4)
- 4 CVECVSS 5.9Nuclei 1PoC 1fedora (3) · 389 directory server (1)
- 4 CVECVSS 6.6PoC 1client (2) · suse linux (1) · groupwise (1)
- 4 CVECVSS 4.3NEWyui (4)
- 4 CVECVSS 4.3NEWtypo3 (4)
- 4 CVECVSS 5.3NEWwireless network extender (4)
- 4 CVE1 critCVSS 6.7NEWPoC 2vlc media player (4)
- 3 CVECVSS 6.7NEWPoC 1qnx neutrino rtos (2) · qnx software development platform (2) · z10 (1)
- 3 CVECVSS 6.8NEWPoC 1subversion (3)
- 3 CVECVSS 7.0freebsd (3)
- 3 CVECVSS 6.2NEWPoC 3machform (3)
- 3 CVECVSS 3.9debian gnu/linux (2) · linux (1)
- 2 CVECVSS 5.0NEWPoC 2commons (2) · commons group (1)
- 2 CVECVSS 6.7NEWcrowd (2)
- 2 CVECVSS 5.9NEWPoC 2service desk express (2)
- 2 CVE2 critCVSS 10.0idrac6 firmware (1) · idrac6 bmc (1)
- 2 CVECVSS 3.2PoC 2drupal (2)
- 2 CVECVSS 6.7NEWPoC 1nginx (2)
- 2 CVE1 critCVSS 7.8NEWKEV 1Nuclei 2PoC 1interstage business process manager analytics (2)
- 2 CVECVSS 6.0gentoo linux (2)
- 2 CVECVSS 5.9NEWmyquizpoll (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 68 | 4 | 1 | 2 | KEV 1Nuclei 2PoC 2 | mysql (17) · peoplesoft products (9) · fusion middleware (8) | — | |
| 2 | cisco | 46 | 4 | 1 | 1 | KEV 1Nuclei 1PoC 1 | unified communications manager (7) · secure access control system (5) · intrusion prevention system (4) | — | |
| 3 | ibm | 42 | 10 | · | · | PoC 1 | sterling b2b integrator (22) · sterling file gateway (22) · java (8) | — | |
| 4 | microsoft | 34 | 23 | 1 | · | KEV 1PoC 2 | internet explorer (18) · windows server 2008 (9) · windows 7 (9) | — | |
| 5 | hp | 30 | 7 | · | · | PoC 1 | system management homepage (11) · loadrunner (8) · vpn firewall appliance (2) | — | |
| 6 | 24 | 2 | · | · | PoC 1 | chrome (21) · android studio (1) · android (1) | — | ||
| 7 | redhat | 21 | 1 | · | · | PoC 3 | enterprise linux (9) · red hat enterprise linux (3) · openstack (3) | — | |
| 8 | debian | 20 | 1 | · | · | debian linux (20) | — | ||
| 9 | opensuse | 20 | · | · | · | PoC 5 | opensuse (20) | — | |
| 10 | apache | 19 | 6 | 1 | 3 | KEV 1Nuclei 3PoC 5 | struts (7) · subversion (4) · openoffice (2) | — | |
| 11 | wireshark | 17 | · | · | · | wireshark (17) | — | ||
| 12 | canonical | 14 | · | · | · | PoC 2 | ubuntu linux (14) | — | |
| 13 | maven | 14 | 6 | 1 | 3 | KEV 1Nuclei 3PoC 4 | org.apache.struts:struts2-core (7) · org.apache.struts.xwork:xwork-core (4) · net.liftweb:lift-webkit_2.8.0 (1) | — | |
| 14 | sun | 13 | · | · | · | sunos (13) | — | ||
| 15 | linux | 12 | · | · | · | PoC 6 | linux kernel (12) | — | |
| 16 | packagist | 12 | · | · | · | PoC 1 | typo3/cms (4) · phpmyadmin/phpmyadmin (3) · moodle/moodle (3) | — | |
| 17 | suse | 12 | · | · | · | PoC 1 | linux enterprise server (11) · linux enterprise desktop (11) · linux enterprise software development kit (10) | — | |
| 18 | phpmyadmin | 11 | · | · | · | PoC 1 | phpmyadmin (11) | — | |
| 19 | wordpress | 11 | · | · | 11 | Nuclei 11PoC 2 | wordpress (11) | — | |
| 20 | mariadb | 10 | · | · | · | NEW | mariadb (10) | — | |
| 21 | moodle | 10 | · | · | · | NEW | moodle (10) | — | |
| 22 | symantec | 10 | · | · | · | PoC 5 | web gateway appliance 8450 (6) · web gateway (6) · web gateway appliance 8490 (6) | — | |
| 23 | apache software foundation | 8 | 5 | 1 | 3 | KEV 1Nuclei 3PoC 3 | struts (7) · xerces2 java (1) | — | |
| 24 | ibm corp. | 8 | 5 | 1 | 3 | KEV 1Nuclei 3PoC 3 | ibm call center for commerce (7) · ibm java (1) · ibm platform symphony (1) | — | |
| 25 | siemens | 8 | 2 | · | · | enterprise openscape branch (4) · openscape session border controller (4) · scalance w700 series firmware (2) | — | ||
| 26 | adobe | 7 | 6 | · | · | flash player (3) · coldfusion (2) · shockwave player (1) | — | ||
| 27 | juniper | 7 | 1 | · | · | NEW | junos (6) · srx3600 (5) · srx3400 (5) | — | |
| 28 | emc | 5 | 1 | · | · | avamar server virtual edition (2) · avamar server (2) · replication manager (1) | — | ||
| 29 | yahoo | 5 | · | · | · | NEW | yui (4) · tumblr (1) | — | |
| 30 | bestpractical | 4 | · | · | · | NEW | request tracker (4) | — | |
| 31 | fedoraproject | 4 | · | · | 1 | Nuclei 1PoC 1 | fedora (3) · 389 directory server (1) | — | |
| 32 | novell | 4 | · | · | · | PoC 1 | client (2) · suse linux (1) · groupwise (1) | — | |
| 33 | npm | 4 | · | · | · | NEW | yui (4) | — | |
| 34 | typo3 | 4 | · | · | · | NEW | typo3 (4) | — | |
| 35 | verizon | 4 | · | · | · | NEW | wireless network extender (4) | — | |
| 36 | videolan | 4 | 1 | · | · | NEWPoC 2 | vlc media player (4) | — | |
| 37 | blackberry | 3 | · | · | · | NEWPoC 1 | qnx neutrino rtos (2) · qnx software development platform (2) · z10 (1) | — | |
| 38 | collabnet | 3 | · | · | · | NEWPoC 1 | subversion (3) | — | |
| 39 | freebsd | 3 | · | · | · | freebsd (3) | — | ||
| 40 | machform | 3 | · | · | · | NEWPoC 3 | machform (3) | — | |
| 41 | сообщество свободного программного обеспечения | 3 | · | · | · | debian gnu/linux (2) · linux (1) | — | ||
| 42 | acquia | 2 | · | · | · | NEWPoC 2 | commons (2) · commons group (1) | — | |
| 43 | atlassian | 2 | · | · | · | NEW | crowd (2) | — | |
| 44 | bmc | 2 | · | · | · | NEWPoC 2 | service desk express (2) | — | |
| 45 | dell | 2 | 2 | · | · | idrac6 firmware (1) · idrac6 bmc (1) | — | ||
| 46 | drupal | 2 | · | · | · | PoC 2 | drupal (2) | — | |
| 47 | f5 | 2 | · | · | · | NEWPoC 1 | nginx (2) | — | |
| 48 | fujitsu limited | 2 | 1 | 1 | 2 | NEWKEV 1Nuclei 2PoC 1 | interstage business process manager analytics (2) | — | |
| 49 | gentoo foundation inc. | 2 | · | · | · | gentoo linux (2) | — | ||
| 50 | kurt gusbeth | 2 | · | · | · | NEW | myquizpoll (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems125 CVE34 crit1 KEV19 vendorsCVSS 7.9debian linux (20) · opensuse (20) · ubuntu linux (14)
- Enterprise Software102 CVE60 crit15 vendorsCVSS 9.3sterling b2b integrator (22) · sterling file gateway (22) · system management homepage (11)
- Databases85 CVE19 crit6 KEV8 vendorsCVSS 6.5mysql (17) · mariadb (10) · peoplesoft products (9)
- 28 crit5 KEV9 vendorsCVSS 7.8unified communications manager (7) · junos (6) · secure access control system (5)
- Web & CMS Plugins61 CVE13 crit3 KEV19 vendorsCVSS 6.0struts (14) · wordpress (11) · moodle (10)
- OSS Libraries45 CVE11 crit1 KEV15 vendorsCVSS 6.8org.apache.struts:struts2-core (7) · org.apache.struts.xwork:xwork-core (4) · net.liftweb:lift-webkit (1)
- Security Products41 CVE2 crit11 vendorsCVSS 7.5wireshark (17) · modsecurity (1)
- Mobile Apps25 CVE2 crit3 vendorsCVSS 6.6chrome (21) · android (1) · android studio (1)
- Consumer Software15 CVE8 crit6 vendorsCVSS 7.7flash player (3) · coldfusion (2) · autocad (1)
- Hardware Firmware8 CVE17 crit2 KEV7 vendorsCVSS 10.0interstage business process manager analytics (2) · my net n750 (1) · my net n900 (1)
- Communications5 CVE1 vendorsCVSS 4.4yui (4) · tumblr (1)
- Cloud & SaaS5 CVE4 vendorsCVSS 6.4parallels plesk panel (1) · parallels small business panel (1) · service desk manager (1)
- ICS / OT / IoT2 CVE2 crit2 vendorsCVSS 8.6intelligent platforms proficy hmi\/scada cimplicity (1) · intelligent platforms proficy process systems with cimplicity (1) · nano-10 plc (1)
- DevTools & CI2 CVE2 vendorsCVSS 4.3review board (1)
- Unclassified10 CVE1 crit9 vendorsCVSS 6.1myquizpoll (2) · accessible is browse results (1) · category-grid-view-gallery (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 4 | 125 | 34 | 1 | 19 | 70 | 7.9 | debian linux (20) · opensuse (20) · ubuntu linux (14) |
| Enterprise Software▸ 4 | 102 | 60 | · | 15 | 80 | 9.3 | sterling b2b integrator (22) · sterling file gateway (22) · system management homepage (11) |
| Databases▸ 3 | 85 | 19 | 6 | 8 | 44 | 6.5 | mysql (17) · mariadb (10) · peoplesoft products (9) |
| Networking Infrastructure▸ 4 | 62 | 28 | 5 | 9 | 96 | 7.8 | unified communications manager (7) · junos (6) · secure access control system (5) |
| Web & CMS Plugins▸ 3 | 61 | 13 | 3 | 19 | 27 | 6.0 | struts (14) · wordpress (11) · moodle (10) |
| OSS Libraries▸ 6 | 45 | 11 | 1 | 15 | 37 | 6.8 | org.apache.struts:struts2-core (7) · org.apache.struts.xwork:xwork-core (4) · net.liftweb:lift-webkit (1) |
| Security Products▸ 5 | 41 | 2 | · | 11 | 51 | 7.5 | wireshark (17) · modsecurity (1) |
| Mobile Apps▸ 1 | 25 | 2 | · | 3 | 6 | 6.6 | chrome (21) · android (1) · android studio (1) |
| Consumer Software▸ 3 | 15 | 8 | · | 6 | 22 | 7.7 | flash player (3) · coldfusion (2) · autocad (1) |
| Hardware Firmware▸ 4 | 8 | 17 | 2 | 7 | 23 | 10.0 | interstage business process manager analytics (2) · my net n750 (1) · my net n900 (1) |
| Communications▸ 1 | 5 | · | · | 1 | 2 | 4.4 | yui (4) · tumblr (1) |
| Cloud & SaaS▸ 3 | 5 | · | · | 4 | 8 | 6.4 | parallels plesk panel (1) · parallels small business panel (1) · service desk manager (1) |
| ICS / OT / IoT▸ 1 | 2 | 2 | · | 2 | 4 | 8.6 | intelligent platforms proficy hmi\/scada cimplicity (1) · intelligent platforms proficy process systems with cimplicity (1) · nano-10 plc (1) |
| DevTools & CI▸ 2 | 2 | · | · | 2 | 2 | 4.3 | review board (1) |
| Unclassified | 10 | 1 | · | 9 | 10 | 6.1 | myquizpoll (2) · accessible is browse results (1) · category-grid-view-gallery (1) |
Weakness × Sector
Which weaknesses hit which solution categories in July 2013
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS264CWE-264119Memory Buffer Bounds94Code Injection20Improper Input Validation200Information Exposure89SQL Injection399CWE-399287Improper Authentication352CSRFEnterprise Software116355963Operating Systems21814672101Networking Infrastructure117121613653OSS Libraries14571252221Consumer Software141416215Databases7215131Web & CMS Plugins238232513Security Products4313232Hardware Firmware12ICS / OT / IoT121121