month report
December 2013
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
December 2013 closed with 495 published CVEs. 60 criticals, ibm led volume, mostly via sterling b2b integrator. Top weakness class — CWE-79 (93 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
495
— MoM— YoY
Severity mix
60 / 70
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.2%
6 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4459.8
n=6
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2952
n=1
Detection gap
KEV pressure, no Nuclei coverage
December 2013 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1microsoft24 CVE
Weakness × Vendor
What's spreading where in December 2013
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
79XSS119Memory Buffer Bounds20Improper Input Validation264CWE-26489SQL Injection94Code Injection200Information Exposure310CWE-310352CSRF287Improper Authenticationibm1624616213ffmpeg197cisco711416131сообщество свободного программного обеспечения462311cybozu181121microsoft275111redhat31151111opensuse1113122canonical121111fedoraproject111131suse111111mozilla1111
Most discussed CVEs — December 2013
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #25hot6 CVE
- #33op54 CVE
- #39xen4 CVE
- #40cooperindustries3 CVE
- #42esri3 CVE
- #43etoshop3 CVE
- #45idleman3 CVE
- #46juniper3 CVE
- #50cru-inc2 CVE
- #51devscripts devel team2 CVE
Top vendors
Ranked by distinct CVE count this period.
- 48 CVECVSS 4.2PoC 2sterling b2b integrator (6) · sterling file gateway (6) · spss collaboration and deployment services (5)
- 46 CVE16 critCVSS 7.4PoC 6ffmpeg (46)
- 38 CVECVSS 5.0PoC 3webex training center (10) · webex meeting center (5) · ios xe (4)
- 26 CVE6 critCVSS 7.5PoC 2enterprise linux workstation (8) · enterprise linux desktop (8) · enterprise linux server (8)
- 24 CVECVSS 4.5garoon (23) · dezie (1)
- 24 CVE8 critCVSS 6.2KEV 1PoC 1internet explorer (9) · windows server 2012 (5) · windows 7 (5)
- 24 CVE6 critCVSS 6.7PoC 2debian gnu/linux (21) · linux (3)
- 21 CVE7 critCVSS 7.0PoC 2opensuse (20) · zypper (1)
- 19 CVE7 critCVSS 7.0PoC 1ubuntu linux (18) · ubuntu (1)
- 18 CVE7 critCVSS 6.8PoC 2fedora (18)
- 15 CVE7 critCVSS 7.6PoC 3linux enterprise server (8) · linux enterprise desktop (7) · suse linux enterprise software development kit (7)
- 13 CVE7 critCVSS 8.1PoC 1firefox (13) · seamonkey (12) · thunderbird (7)
- 12 CVE1 critCVSS 6.6safari (9) · itunes (7) · webkit (7)
- 12 CVECVSS 5.5PoC 11actionpack (5) · sup (2) · sprout (1)
- 11 CVECVSS 5.0PoC 2linux kernel (11)
- 10 CVE1 critCVSS 5.6PoC 1suse lifecycle management server (3) · identity manager roles based provisioning module (1) · iprint (1)
- 10 CVECVSS 4.9PoC 1typo3/cms-core (3) · typo3/cms (3) · joomla/joomla-cms (1)
- 9 CVE1 critCVSS 5.1service manager (2) · service manager web client (2) · service manager web tier (2)
- 9 CVECVSS 4.8PoC 1typo3 (8) · flow (1)
- 8 CVECVSS 4.8PoC 1solr (4) · roller (2) · subversion (2)
- 8 CVECVSS 5.7gentoo linux (8)
- 8 CVECVSS 7.2chrome (7) · v8 (3) · android (1)
- 7 CVE1 critCVSS 5.4solaris (6) · fusion middleware (1)
- 6 CVE1 critCVSS 6.5debian linux (5) · adequate (1)
- 6 CVECVSS 4.5NEWPoC 6hotbox router firmware (6) · hotbox router (6)
- 6 CVECVSS 5.5PoC 1org.apache.solr:solr-core (4) · org.jenkins-ci.main:jenkins-core (1) · org.jenkins-ci.plugins:sonar (1)
- 5 CVECVSS 4.8drupal (5)
- 5 CVE1 critCVSS 6.2PoC 3connectrix manager (1) · replication manager (1) · rsa archer egrc (1)
- 5 CVECVSS 4.9PoC 5rails (5) · ruby on rails (4)
- 4 CVE4 critCVSS 9.5air (2) · air sdk (2) · flash player (2)
- 4 CVECVSS 4.9mediawiki (4)
- 4 CVE1 critCVSS 7.9PoC 2raidiator (2) · prosafe gs748t (2) · prosafe firmware (2)
- 4 CVE3 critCVSS 9.0NEWPoC 2monitor (4) · system-op5config (1) · system-portal (1)
- 4 CVECVSS 3.2PoC 1heat (2) · folsom (1) · grizzly (1)
- 4 CVE1 critCVSS 7.5customer relationship management (1) · emr unwired (1) · netweaver (1)
- 4 CVE1 critCVSS 9.6ruggedcom rugged operating system (2) · sinamics g110 (1) · sinamics g110d (1)
- 4 CVECVSS 6.1centos (4)
- 4 CVECVSS 6.3openjpeg (4)
- 4 CVECVSS 5.7NEWxen (4)
- 3 CVECVSS 6.1NEWsmp 4 gateway \(data concentrator\) (2) · smp 16 gateway \(data concentrator\) (2) · smp 4\/dp gateway \(data concentrator\) (2)
- 3 CVE1 critCVSS 7.6PoC 3dsr-1000 (3) · dsr-1000 firmware (3) · dsr-1000n (3)
- 3 CVECVSS 4.8NEWarcgis server (3)
- 3 CVECVSS 7.5NEWPoC 3classifieds creator (1) · c2c forward auction creator (1) · dynamic biz website builder quickweb (1)
- 3 CVECVSS 5.5PoC 1libmicrohttpd (2) · glibc (1)
- 3 CVECVSS 6.4NEWPoC 1leed (3)
- 3 CVECVSS 5.1NEWidp250 (1) · idp75 (1) · idp800 (1)
- 3 CVE2 critCVSS 8.2PoC 3email gateway (3)
- 3 CVECVSS 6.2PoC 2opensuse (1) · opensuse leap (1) · suse linux enterprise debuginfo (1)
- 3 CVECVSS 5.0PoC 1wireshark (3)
- 2 CVECVSS 5.5NEWPoC 2ditto forensic fieldstation (2) · ditto forensic fieldstation firmware (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | ibm | 48 | · | · | · | PoC 2 | sterling b2b integrator (6) · sterling file gateway (6) · spss collaboration and deployment services (5) | — | |
| 2 | ffmpeg | 46 | 16 | · | · | PoC 6 | ffmpeg (46) | — | |
| 3 | cisco | 38 | · | · | · | PoC 3 | webex training center (10) · webex meeting center (5) · ios xe (4) | — | |
| 4 | redhat | 26 | 6 | · | · | PoC 2 | enterprise linux workstation (8) · enterprise linux desktop (8) · enterprise linux server (8) | — | |
| 5 | cybozu | 24 | · | · | · | garoon (23) · dezie (1) | — | ||
| 6 | microsoft | 24 | 8 | 1 | · | KEV 1PoC 1 | internet explorer (9) · windows server 2012 (5) · windows 7 (5) | — | |
| 7 | сообщество свободного программного обеспечения | 24 | 6 | · | · | PoC 2 | debian gnu/linux (21) · linux (3) | — | |
| 8 | opensuse | 21 | 7 | · | · | PoC 2 | opensuse (20) · zypper (1) | — | |
| 9 | canonical | 19 | 7 | · | · | PoC 1 | ubuntu linux (18) · ubuntu (1) | — | |
| 10 | fedoraproject | 18 | 7 | · | · | PoC 2 | fedora (18) | — | |
| 11 | suse | 15 | 7 | · | · | PoC 3 | linux enterprise server (8) · linux enterprise desktop (7) · suse linux enterprise software development kit (7) | — | |
| 12 | mozilla | 13 | 7 | · | · | PoC 1 | firefox (13) · seamonkey (12) · thunderbird (7) | — | |
| 13 | apple | 12 | 1 | · | · | safari (9) · itunes (7) · webkit (7) | — | ||
| 14 | rubygems | 12 | · | · | · | PoC 11 | actionpack (5) · sup (2) · sprout (1) | — | |
| 15 | linux | 11 | · | · | · | PoC 2 | linux kernel (11) | — | |
| 16 | novell | 10 | 1 | · | · | PoC 1 | suse lifecycle management server (3) · identity manager roles based provisioning module (1) · iprint (1) | — | |
| 17 | packagist | 10 | · | · | · | PoC 1 | typo3/cms-core (3) · typo3/cms (3) · joomla/joomla-cms (1) | — | |
| 18 | hp | 9 | 1 | · | · | service manager (2) · service manager web client (2) · service manager web tier (2) | — | ||
| 19 | typo3 | 9 | · | · | · | PoC 1 | typo3 (8) · flow (1) | — | |
| 20 | apache | 8 | · | · | · | PoC 1 | solr (4) · roller (2) · subversion (2) | — | |
| 21 | gentoo foundation inc. | 8 | · | · | · | gentoo linux (8) | — | ||
| 22 | 8 | · | · | · | chrome (7) · v8 (3) · android (1) | — | |||
| 23 | oracle | 7 | 1 | · | · | solaris (6) · fusion middleware (1) | — | ||
| 24 | debian | 6 | 1 | · | · | debian linux (5) · adequate (1) | — | ||
| 25 | hot | 6 | · | · | · | NEWPoC 6 | hotbox router firmware (6) · hotbox router (6) | — | |
| 26 | maven | 6 | · | · | · | PoC 1 | org.apache.solr:solr-core (4) · org.jenkins-ci.main:jenkins-core (1) · org.jenkins-ci.plugins:sonar (1) | — | |
| 27 | drupal | 5 | · | · | · | drupal (5) | — | ||
| 28 | emc | 5 | 1 | · | · | PoC 3 | connectrix manager (1) · replication manager (1) · rsa archer egrc (1) | — | |
| 29 | rubyonrails | 5 | · | · | · | PoC 5 | rails (5) · ruby on rails (4) | — | |
| 30 | adobe | 4 | 4 | · | · | air (2) · air sdk (2) · flash player (2) | — | ||
| 31 | mediawiki | 4 | · | · | · | mediawiki (4) | — | ||
| 32 | netgear | 4 | 1 | · | · | PoC 2 | raidiator (2) · prosafe gs748t (2) · prosafe firmware (2) | — | |
| 33 | op5 | 4 | 3 | · | · | NEWPoC 2 | monitor (4) · system-op5config (1) · system-portal (1) | — | |
| 34 | openstack | 4 | · | · | · | PoC 1 | heat (2) · folsom (1) · grizzly (1) | — | |
| 35 | sap | 4 | 1 | · | · | customer relationship management (1) · emr unwired (1) · netweaver (1) | — | ||
| 36 | siemens | 4 | 1 | · | · | ruggedcom rugged operating system (2) · sinamics g110 (1) · sinamics g110d (1) | — | ||
| 37 | the centos project | 4 | · | · | · | centos (4) | — | ||
| 38 | uclouvain | 4 | · | · | · | openjpeg (4) | — | ||
| 39 | xen | 4 | · | · | · | NEW | xen (4) | — | |
| 40 | cooperindustries | 3 | · | · | · | NEW | smp 4 gateway \(data concentrator\) (2) · smp 16 gateway \(data concentrator\) (2) · smp 4\/dp gateway \(data concentrator\) (2) | — | |
| 41 | dlink | 3 | 1 | · | · | PoC 3 | dsr-1000 (3) · dsr-1000 firmware (3) · dsr-1000n (3) | — | |
| 42 | esri | 3 | · | · | · | NEW | arcgis server (3) | — | |
| 43 | etoshop | 3 | · | · | · | NEWPoC 3 | classifieds creator (1) · c2c forward auction creator (1) · dynamic biz website builder quickweb (1) | — | |
| 44 | gnu | 3 | · | · | · | PoC 1 | libmicrohttpd (2) · glibc (1) | — | |
| 45 | idleman | 3 | · | · | · | NEWPoC 1 | leed (3) | — | |
| 46 | juniper | 3 | · | · | · | NEW | idp250 (1) · idp75 (1) · idp800 (1) | — | |
| 47 | mcafee | 3 | 2 | · | · | PoC 3 | email gateway (3) | — | |
| 48 | novell inc. | 3 | · | · | · | PoC 2 | opensuse (1) · opensuse leap (1) · suse linux enterprise debuginfo (1) | — | |
| 49 | wireshark | 3 | · | · | · | PoC 1 | wireshark (3) | — | |
| 50 | cru-inc | 2 | · | · | · | NEWPoC 2 | ditto forensic fieldstation (2) · ditto forensic fieldstation firmware (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems120 CVE103 crit62 KEV23 vendorsCVSS 6.9opensuse (22) · debian gnu/linux (21) · fedora (18)
- Enterprise Software110 CVE22 crit18 vendorsCVSS 7.5sterling b2b integrator (6) · sterling file gateway (6) · spss collaboration and deployment services (5)
- OSS Libraries100 CVE17 crit23 vendorsCVSS 6.9ffmpeg (46) · openjpeg (4) · libmicrohttpd (2)
- 17 crit13 vendorsCVSS 7.5webex training center (10) · hotbox router (6) · hotbox router firmware (6)
- Web & CMS Plugins49 CVE22 vendorsCVSS 7.2typo3 (8) · drupal (5) · mediawiki (4)
- Consumer Software30 CVE31 crit13 vendorsCVSS 9.3firefox (13) · seamonkey (12) · thunderbird (7)
- Mobile Apps20 CVE1 crit2 vendorsCVSS 7.2safari (9) · itunes (7) · webkit (7)
- Security Products17 CVE3 crit8 vendorsCVSS 7.9connectrix manager (1) · replication manager (1) · rsa archer egrc (1)
- Cloud & SaaS13 CVE1 crit6 vendorsCVSS 6.7heat (2) · compute (1) · folsom (1)
- Databases12 CVE1 crit5 vendorsCVSS 5.3solaris (6) · fusion middleware (1) · websphere application server (1)
- Communications11 CVE9 vendorsCVSS 6.8livezilla (2) · now sms \& mms gateway (2) · quassel irc (1)
- ICS / OT / IoT6 CVE3 vendorsCVSS 5.8orion5 dnp master (2) · orion5 dnp slave (2) · orion5r dnp master (2)
- DevTools & CI3 CVE3 vendorsCVSS 5.4ack (1) · jenkins plugin (1)
- Hardware Firmware3 CVE4 crit2 vendorsCVSS 10.0intelligent platform management firmware (2)
- Unclassified15 CVE2 crit10 vendorsCVSS 5.9leed (3) · bip (2) · devscripts (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 2 | 120 | 103 | 62 | 23 | 116 | 6.9 | opensuse (22) · debian gnu/linux (21) · fedora (18) |
| Enterprise Software▸ 5 | 110 | 22 | · | 18 | 117 | 7.5 | sterling b2b integrator (6) · sterling file gateway (6) · spss collaboration and deployment services (5) |
| OSS Libraries▸ 6 | 100 | 17 | · | 23 | 37 | 6.9 | ffmpeg (46) · openjpeg (4) · libmicrohttpd (2) |
| Networking Infrastructure▸ 4 | 61 | 17 | · | 13 | 112 | 7.5 | webex training center (10) · hotbox router (6) · hotbox router firmware (6) |
| Web & CMS Plugins▸ 5 | 49 | · | · | 22 | 29 | 7.2 | typo3 (8) · drupal (5) · mediawiki (4) |
| Consumer Software▸ 5 | 30 | 31 | · | 13 | 20 | 9.3 | firefox (13) · seamonkey (12) · thunderbird (7) |
| Mobile Apps▸ 2 | 20 | 1 | · | 2 | 10 | 7.2 | safari (9) · itunes (7) · webkit (7) |
| Security Products▸ 5 | 17 | 3 | · | 8 | 14 | 7.9 | connectrix manager (1) · replication manager (1) · rsa archer egrc (1) |
| Cloud & SaaS▸ 3 | 13 | 1 | · | 6 | 16 | 6.7 | heat (2) · compute (1) · folsom (1) |
| Databases▸ 3 | 12 | 1 | · | 5 | 6 | 5.3 | solaris (6) · fusion middleware (1) · websphere application server (1) |
| Communications▸ 4 | 11 | · | · | 9 | 11 | 6.8 | livezilla (2) · now sms \& mms gateway (2) · quassel irc (1) |
| ICS / OT / IoT▸ 1 | 6 | · | · | 3 | 12 | 5.8 | orion5 dnp master (2) · orion5 dnp slave (2) · orion5r dnp master (2) |
| DevTools & CI▸ 2 | 3 | · | · | 3 | 3 | 5.4 | ack (1) · jenkins plugin (1) |
| Hardware Firmware▸ 1 | 3 | 4 | · | 2 | 3 | 10.0 | intelligent platform management firmware (2) |
| Unclassified | 15 | 2 | · | 10 | 11 | 5.9 | leed (3) · bip (2) · devscripts (2) |
Weakness × Sector
Which weaknesses hit which solution categories in December 2013
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS119Memory Buffer Bounds20Improper Input Validation264CWE-26489SQL Injection94Code Injection200Information Exposure310CWE-310352CSRF287Improper AuthenticationOperating Systems7211417164712OSS Libraries1229157914Enterprise Software4377856125Networking Infrastructure131146138153Consumer Software126523231Web & CMS Plugins1644114134Communications33211111Security Products4141211Cloud & SaaS291ICS / OT / IoT7121