month report
February 2014
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
February 2014 closed with 445 published CVEs. 71 criticals, redhat led volume, mostly via enterprise linux workstation. Top weakness class — CWE-119 (69 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
445
— MoM— YoY
Severity mix
71 / 73
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.9%
4 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4400.7
n=4
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
3436
n=4
Weakness × Vendor
What's spreading where in February 2014
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
119Memory Buffer Bounds79XSS264CWE-26420Improper Input Validation200Information Exposure310CWE-31089SQL Injection189CWE-189287Improper Authentication352CSRFredhat41043722cisco25811583microsoft23232ibm199312microsoft corp22232opensuse2132111apple194112canonical14332suse111111mozilla2111debian1121pidgin373
Most discussed CVEs — February 2014
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #16марк спенсер, шон иган и др.10 CVE
- #23ecryptfs6 CVE
- #26belkin5 CVE
- #33catfish project4 CVE
- #34csounds4 CVE
- #38i-doit4 CVE
- #39opensuse project4 CVE
- #40ubuntu4 CVE
- #41codeaurora3 CVE
- #44light speed gaming3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 44 CVE3 critCVSS 6.6KEV 2PoC 5enterprise linux workstation (9) · enterprise linux desktop (9) · enterprise linux eus (9)
- 35 CVE3 critCVSS 6.3unified communications manager (20) · unified contact center express editor software (3) · ips sensor software (3)
- 34 CVE25 critCVSS 8.2KEV 2PoC 3internet explorer (26) · windows 8 (4) · microsoft .net framework 3.5.1 (3)
- 32 CVE2 critCVSS 5.3rational focal point (5) · sametime (5) · financial transaction manager (4)
- 29 CVE6 critCVSS 6.5KEV 2PoC 6opensuse (29) · leap (1) · osc (1)
- 28 CVE9 critCVSS 7.1PoC 1mac os x (17) · quicktime (9) · mac os x server (6)
- 28 CVE5 critCVSS 6.2PoC 4ubuntu linux (28)
- 20 CVE6 critCVSS 7.3KEV 2PoC 3linux enterprise desktop (11) · linux enterprise server (10) · linux enterprise software development kit (7)
- 18 CVE5 critCVSS 7.2PoC 3firefox (16) · seamonkey (15) · thunderbird (10)
- 14 CVE3 critCVSS 6.6PoC 2debian linux (13) · advanced package tool (1)
- 14 CVE2 critCVSS 5.9pidgin (14)
- 13 CVE3 critCVSS 6.1solaris (10) · vm server (2) · enterprise manager ops center (2)
- 12 CVE1 critCVSS 7.0KEV 1PoC 1chrome (12)
- 11 CVE3 critCVSS 6.8PoC 2fedora (11)
- 10 CVECVSS 5.3gentoo linux (10)
- 10 CVE1 critCVSS 5.9NEWpidgin (10)
- 9 CVECVSS 6.5PoC 1debian gnu/linux (7) · linux (2) · iptables (1)
- 8 CVECVSS 4.3tomcat (5) · activemq (1) · subversion (1)
- 8 CVECVSS 5.2PoC 2linux kernel (8)
- 8 CVECVSS 4.8org.apache.tomcat:tomcat (4) · org.jenkins-ci.main:jenkins-core (2) · org.apache.activemq:activemq-core (1)
- 7 CVECVSS 3.8suse linux enterprise (7)
- 6 CVE4 critCVSS 9.1KEV 2PoC 1flash player (4) · adobe air (3) · adobe air sdk (3)
- 6 CVECVSS 3.6NEWecryptfs utils (6) · ecryptfs-utils (6)
- 6 CVECVSS 5.7php (6)
- 6 CVECVSS 4.7netweaver (5) · customer relationship management (1) · netweaver exchange infrastructure \(bc-xi\) (1)
- 5 CVE2 critCVSS 8.4NEWwemo home automation firmware (5)
- 5 CVE1 critCVSS 7.7application information optimizer (2) · service manager (1) · lefthand (1)
- 5 CVECVSS 4.7grizzly (2) · havana (2) · compute (1)
- 5 CVECVSS 4.4nova (2) · glance (1) · python-bugzilla (1)
- 5 CVECVSS 4.8PoC 5actionpack (2) · rails (1) · activerecord (1)
- 5 CVECVSS 5.9simatic wincc open architecture (4) · simatic wincc oa (4) · ruggedcom rugged operating system (1)
- 5 CVECVSS 6.1PoC 2endpoint protection manager (2) · protection center (2) · web gateway (2)
- 4 CVECVSS 4.6NEWcatfish (4)
- 4 CVE3 critCVSS 8.8NEWcsound (4)
- 4 CVECVSS 4.7PoC 1bsafe ssl-j (3) · kace k1000 systems management appliance (1) · kace k1000 systems management appliance software (1)
- 4 CVE1 critCVSS 6.0rsa bsafe ssl-j (3) · documentum foundation services (1)
- 4 CVECVSS 6.0glibc (3) · cpio (1)
- 4 CVECVSS 5.1NEWPoC 1i-doit (4)
- 4 CVECVSS 4.8NEWPoC 1opensuse (4)
- 4 CVECVSS 4.2NEWmetal as a service (2) · linux (1) · obby (1)
- 3 CVECVSS 6.6NEWandroid-msm (3)
- 3 CVECVSS 5.1garoon (3)
- 3 CVECVSS 4.0fortiweb (2) · fortios (1)
- 3 CVECVSS 6.0NEWmumble (3) · mumblekit (2)
- 3 CVECVSS 6.7NEWrouter advertisement daemon (3)
- 3 CVECVSS 6.2NEWPoC 1otrs (3)
- 3 CVE1 critCVSS 7.1NEWquic mobile station modem kernel (3)
- 3 CVECVSS 5.1PoC 3rails (3) · ruby on rails (2)
- 3 CVECVSS 7.2NEWtlxcdltofs33 (1) · citect scada (1) · floating license manager (1)
- 3 CVECVSS 7.1NEWcitectscada (1) · floating license manager (1) · ofs test client tlxcdlfofs33 (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | redhat | 44 | 3 | 2 | · | KEV 2PoC 5 | enterprise linux workstation (9) · enterprise linux desktop (9) · enterprise linux eus (9) | — | |
| 2 | cisco | 35 | 3 | · | · | unified communications manager (20) · unified contact center express editor software (3) · ips sensor software (3) | — | ||
| 3 | microsoft | 34 | 25 | 2 | · | KEV 2PoC 3 | internet explorer (26) · windows 8 (4) · microsoft .net framework 3.5.1 (3) | — | |
| 4 | ibm | 32 | 2 | · | · | rational focal point (5) · sametime (5) · financial transaction manager (4) | — | ||
| 5 | opensuse | 29 | 6 | 2 | · | KEV 2PoC 6 | opensuse (29) · leap (1) · osc (1) | — | |
| 6 | apple | 28 | 9 | · | · | PoC 1 | mac os x (17) · quicktime (9) · mac os x server (6) | — | |
| 7 | canonical | 28 | 5 | · | · | PoC 4 | ubuntu linux (28) | — | |
| 8 | suse | 20 | 6 | 2 | · | KEV 2PoC 3 | linux enterprise desktop (11) · linux enterprise server (10) · linux enterprise software development kit (7) | — | |
| 9 | mozilla | 18 | 5 | · | · | PoC 3 | firefox (16) · seamonkey (15) · thunderbird (10) | — | |
| 10 | debian | 14 | 3 | · | · | PoC 2 | debian linux (13) · advanced package tool (1) | — | |
| 11 | pidgin | 14 | 2 | · | · | pidgin (14) | — | ||
| 12 | oracle | 13 | 3 | · | · | solaris (10) · vm server (2) · enterprise manager ops center (2) | — | ||
| 13 | 12 | 1 | 1 | · | KEV 1PoC 1 | chrome (12) | — | ||
| 14 | fedoraproject | 11 | 3 | · | · | PoC 2 | fedora (11) | — | |
| 15 | gentoo foundation inc. | 10 | · | · | · | gentoo linux (10) | — | ||
| 16 | марк спенсер, шон иган и др. | 10 | 1 | · | · | NEW | pidgin (10) | — | |
| 17 | сообщество свободного программного обеспечения | 9 | · | · | · | PoC 1 | debian gnu/linux (7) · linux (2) · iptables (1) | — | |
| 18 | apache | 8 | · | · | · | tomcat (5) · activemq (1) · subversion (1) | — | ||
| 19 | linux | 8 | · | · | · | PoC 2 | linux kernel (8) | — | |
| 20 | maven | 8 | · | · | · | org.apache.tomcat:tomcat (4) · org.jenkins-ci.main:jenkins-core (2) · org.apache.activemq:activemq-core (1) | — | ||
| 21 | novell inc. | 7 | · | · | · | suse linux enterprise (7) | — | ||
| 22 | adobe | 6 | 4 | 2 | · | KEV 2PoC 1 | flash player (4) · adobe air (3) · adobe air sdk (3) | — | |
| 23 | ecryptfs | 6 | · | · | · | NEW | ecryptfs utils (6) · ecryptfs-utils (6) | — | |
| 24 | php | 6 | · | · | · | php (6) | — | ||
| 25 | sap | 6 | · | · | · | netweaver (5) · customer relationship management (1) · netweaver exchange infrastructure \(bc-xi\) (1) | — | ||
| 26 | belkin | 5 | 2 | · | · | NEW | wemo home automation firmware (5) | — | |
| 27 | hp | 5 | 1 | · | · | application information optimizer (2) · service manager (1) · lefthand (1) | — | ||
| 28 | openstack | 5 | · | · | · | grizzly (2) · havana (2) · compute (1) | — | ||
| 29 | pypi | 5 | · | · | · | nova (2) · glance (1) · python-bugzilla (1) | — | ||
| 30 | rubygems | 5 | · | · | · | PoC 5 | actionpack (2) · rails (1) · activerecord (1) | — | |
| 31 | siemens | 5 | · | · | · | simatic wincc open architecture (4) · simatic wincc oa (4) · ruggedcom rugged operating system (1) | — | ||
| 32 | symantec | 5 | · | · | · | PoC 2 | endpoint protection manager (2) · protection center (2) · web gateway (2) | — | |
| 33 | catfish project | 4 | · | · | · | NEW | catfish (4) | — | |
| 34 | csounds | 4 | 3 | · | · | NEW | csound (4) | — | |
| 35 | dell | 4 | · | · | · | PoC 1 | bsafe ssl-j (3) · kace k1000 systems management appliance (1) · kace k1000 systems management appliance software (1) | — | |
| 36 | emc | 4 | 1 | · | · | rsa bsafe ssl-j (3) · documentum foundation services (1) | — | ||
| 37 | gnu | 4 | · | · | · | glibc (3) · cpio (1) | — | ||
| 38 | i-doit | 4 | · | · | · | NEWPoC 1 | i-doit (4) | — | |
| 39 | opensuse project | 4 | · | · | · | NEWPoC 1 | opensuse (4) | — | |
| 40 | ubuntu | 4 | · | · | · | NEW | metal as a service (2) · linux (1) · obby (1) | — | |
| 41 | codeaurora | 3 | · | · | · | NEW | android-msm (3) | — | |
| 42 | cybozu | 3 | · | · | · | garoon (3) | — | ||
| 43 | fortinet | 3 | · | · | · | fortiweb (2) · fortios (1) | — | ||
| 44 | light speed gaming | 3 | · | · | · | NEW | mumble (3) · mumblekit (2) | — | |
| 45 | litech | 3 | · | · | · | NEW | router advertisement daemon (3) | — | |
| 46 | otrs | 3 | · | · | · | NEWPoC 1 | otrs (3) | — | |
| 47 | qualcomm | 3 | 1 | · | · | NEW | quic mobile station modem kernel (3) | — | |
| 48 | rubyonrails | 3 | · | · | · | PoC 3 | rails (3) · ruby on rails (2) | — | |
| 49 | schneider electric | 3 | · | · | · | NEW | tlxcdltofs33 (1) · citect scada (1) · floating license manager (1) | — | |
| 50 | schneider-electric | 3 | · | · | · | NEW | citectscada (1) · floating license manager (1) · ofs test client tlxcdlfofs33 (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems141 CVE118 crit18 KEV29 vendorsCVSS 8.2opensuse (33) · ubuntu linux (28) · debian linux (13)
- Enterprise Software73 CVE8 crit19 vendorsCVSS 7.5rational focal point (5) · sametime (5) · financial transaction manager (4)
- 15 crit14 vendorsCVSS 9.8unified communications manager (20) · wemo home automation firmware (5) · cisco intrusion prevention system (3)
- OSS Libraries46 CVE22 vendorsCVSS 6.8php (7) · glibc (3) · cpio (1)
- Mobile Apps40 CVE11 crit1 KEV3 vendorsCVSS 7.1mac os x (17) · quicktime (10) · mac os x server (6)
- Web & CMS Plugins32 CVE2 crit21 vendorsCVSS 5.9tomcat (5) · catfish (4) · activemq (1)
- Consumer Software32 CVE25 crit4 KEV9 vendorsCVSS 8.7firefox (24) · seamonkey (18) · thunderbird (10)
- Communications23 CVE3 crit9 vendorsCVSS 7.5pidgin (24) · mumble (3) · mumblekit (2)
- Security Products23 CVE1 crit13 vendorsCVSS 6.1endpoint protection manager (2) · protection center (2) · web gateway (2)
- Databases15 CVE4 crit4 vendorsCVSS 6.1solaris (10) · enterprise manager ops center (2) · vm server (2)
- Cloud & SaaS15 CVE2 crit9 vendorsCVSS 10.0grizzly (2) · havana (2) · compute (1)
- Hardware Firmware11 CVE28 crit5 vendorsCVSS 8.8quic mobile station modem kernel (3) · jue-250 (2) · jue-500 (2)
- ICS / OT / IoT9 CVE2 crit8 vendorsCVSS 9.3floating license manager (2) · powerlogic scada (2) · struxureware powerscada expert (2)
- DevTools & CI2 CVE1 vendorsCVSS 5.0jenkins (2)
- Unclassified22 CVE7 crit15 vendorsCVSS 6.6csound (4) · bgan (2) · cantata (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 4 | 141 | 118 | 18 | 29 | 103 | 8.2 | opensuse (33) · ubuntu linux (28) · debian linux (13) |
| Enterprise Software▸ 6 | 73 | 8 | · | 19 | 49 | 7.5 | rational focal point (5) · sametime (5) · financial transaction manager (4) |
| Networking Infrastructure▸ 3 | 57 | 15 | · | 14 | 29 | 9.8 | unified communications manager (20) · wemo home automation firmware (5) · cisco intrusion prevention system (3) |
| OSS Libraries▸ 6 | 46 | · | · | 22 | 34 | 6.8 | php (7) · glibc (3) · cpio (1) |
| Mobile Apps▸ 2 | 40 | 11 | 1 | 3 | 9 | 7.1 | mac os x (17) · quicktime (10) · mac os x server (6) |
| Web & CMS Plugins▸ 4 | 32 | 2 | · | 21 | 25 | 5.9 | tomcat (5) · catfish (4) · activemq (1) |
| Consumer Software▸ 4 | 32 | 25 | 4 | 9 | 16 | 8.7 | firefox (24) · seamonkey (18) · thunderbird (10) |
| Communications▸ 3 | 23 | 3 | · | 9 | 8 | 7.5 | pidgin (24) · mumble (3) · mumblekit (2) |
| Security Products▸ 4 | 23 | 1 | · | 13 | 20 | 6.1 | endpoint protection manager (2) · protection center (2) · web gateway (2) |
| Databases▸ 2 | 15 | 4 | · | 4 | 7 | 6.1 | solaris (10) · enterprise manager ops center (2) · vm server (2) |
| Cloud & SaaS▸ 4 | 15 | 2 | · | 9 | 19 | 10.0 | grizzly (2) · havana (2) · compute (1) |
| Hardware Firmware▸ 4 | 11 | 28 | · | 5 | 28 | 8.8 | quic mobile station modem kernel (3) · jue-250 (2) · jue-500 (2) |
| ICS / OT / IoT▸ 3 | 9 | 2 | · | 8 | 24 | 9.3 | floating license manager (2) · powerlogic scada (2) · struxureware powerscada expert (2) |
| DevTools & CI▸ 1 | 2 | · | · | 1 | 1 | 5.0 | jenkins (2) |
| Unclassified | 22 | 7 | · | 15 | 16 | 6.6 | csound (4) · bgan (2) · cantata (2) |
Weakness × Sector
Which weaknesses hit which solution categories in February 2014
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds79XSS264CWE-26420Improper Input Validation200Information Exposure310CWE-31089SQL Injection189CWE-189287Improper Authentication352CSRFOperating Systems2911221681064Consumer Software312624112Enterprise Software32014342414Networking Infrastructure2571334595OSS Libraries8561162181Communications45184Web & CMS Plugins216152Security Products44212211Cloud & SaaS1111131ICS / OT / IoT1311