month report
April 2014
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
April 2014 closed with 676 published CVEs. 64 criticals, oracle led volume, mostly via jre. Top weakness class — CWE-20 (77 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
676
— MoM— YoY
Severity mix
64 / 142
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
3.6%
24 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4348.3
n=24
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2912
n=3
Detection gap
KEV pressure, no Nuclei coverage
April 2014 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1microsoft18 CVE
Weakness × Vendor
What's spreading where in April 2014
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
20Improper Input Validation264CWE-26479XSS119Memory Buffer Bounds200Information Exposure22Path Traversal352CSRF287Improper Authentication399CWE-39989SQL Injectionoracle111oracle corp.12canonical31111cisco1732311234debian121111redhat35111apple4311421fedoraproject3121ibm4151opensuse22211sap822111google315
Most discussed CVEs — April 2014
No CVE mentions in the news this month yet.
Top vendors
Ranked by distinct CVE count this period.
- 108 CVE10 critCVSS 5.9PoC 7jre (34) · jdk (34) · java runtime environment (19)
- 46 CVE15 critCVSS 7.1KEV 1Nuclei 1PoC 3ubuntu linux (46) · update-manager (2) · libpam-modules (1)
- 45 CVECVSS 5.7ios (19) · adaptive security appliance software (6) · asr 1004 (4)
- 38 CVE8 critCVSS 7.3KEV 1Nuclei 1PoC 4debian linux (36) · dpkg (1) · ppthtml (1)
- 35 CVE2 critCVSS 6.0KEV 1Nuclei 1PoC 5enterprise linux server (18) · enterprise linux desktop (18) · enterprise linux workstation (17)
- 27 CVE2 critCVSS 6.1PoC 1safari (14) · mac os x (12) · tvos (3)
- 25 CVE6 critCVSS 7.0KEV 1Nuclei 1PoC 5fedora (25)
- 25 CVE6 critCVSS 5.7forms viewer (12) · messagesight (4) · messagesight jms client (4)
- 24 CVE7 critCVSS 7.1KEV 1Nuclei 1PoC 3opensuse (23) · evergreen (1)
- 24 CVECVSS 5.7NEWPoC 1enterprise portal (2) · netweaver java application server (1) · netweaver software lifecycle manager (1)
- 22 CVECVSS 7.2chrome (20) · google chrome (17) · android (2)
- 18 CVE13 critCVSS 8.2KEV 1PoC 2internet explorer (12) · word (2) · microsoft publisher (1)
- 16 CVE5 critCVSS 7.0NEWcommonspot content server (16)
- 16 CVE2 critCVSS 5.5PoC 2roundup (3) · django (3) · pillow (3)
- 15 CVE6 critCVSS 8.3PoC 3firefox (14) · seamonkey (12) · thunderbird (7)
- 14 CVE2 critCVSS 6.4PoC 1suse linux enterprise server (9) · studio onsite (4) · studio extension for system z (4)
- 13 CVE4 critCVSS 6.3NEWjunos (6) · junos space (6) · screenos (1)
- 12 CVE2 critCVSS 6.6KEV 1Nuclei 1PoC 3gentoo linux (12)
- 11 CVECVSS 5.2PoC 3linux kernel (11)
- 11 CVECVSS 6.3PoC 2org.apache.struts:struts2-core (2) · org.fitnesse:fitnesse (1) · org.igniterealtime.openfire:parent (1)
- 10 CVECVSS 7.3webaccess (10) · advantech webaccess (10)
- 10 CVECVSS 5.1xen (10)
- 9 CVE2 critCVSS 5.2universal configuration management database (2) · array diagnostics utility (1) · database and middleware automation (1)
- 9 CVECVSS 4.0mariadb (9)
- 8 CVECVSS 6.5PoC 1struts (3) · xalan-java (1) · archiva (1)
- 7 CVE1 critCVSS 6.2keystone (2) · icehouse (2) · image registry and delivery service \(glance\) (1)
- 7 CVECVSS 6.1PoC 1debian gnu/linux (6) · linux (1)
- 6 CVE1 critCVSS 5.9KEV 1Nuclei 2PoC 2sinema server (3) · simatic s7 cpu 1215c (2) · simatic s7 cpu 1200 firmware (2)
- 5 CVE3 critCVSS 7.1PoC 1flash player (4) · adobe air (3) · adobe air sdk (3)
- 5 CVECVSS 5.4cloud tiering appliance (2) · cloud tiering appliance software (2) · rsa adaptive authentication on-premise (2)
- 5 CVE1 critCVSS 4.9NEWfortiweb (3) · fortiadc-300e (1) · fortiadc-1000e (1)
- 5 CVECVSS 4.7NEWgroupware (4) · imp (2) · kronolith h4 (2)
- 5 CVECVSS 6.1messaging appliance (3) · substantiation es (3) · rendezvous (3)
- 5 CVECVSS 7.6NEWn300 netusb nbg-419n (4) · n300 netusb nbg-419n firmware (4) · p-660h-61 (1)
- 4 CVECVSS 7.1NEWcacti (4)
- 4 CVECVSS 5.0asterisk (4) · certified asterisk (2)
- 4 CVECVSS 5.5PoC 1suse linux enterprise (4)
- 4 CVE1 critCVSS 5.9NEWPoC 2pillow (3) · python (1)
- 4 CVECVSS 5.7PoC 4bio-basespace-sdk (1) · show_in_browser (1) · sfpagent (1)
- 4 CVE2 critCVSS 7.8openjpeg (4)
- 4 CVE1 critCVSS 6.3vsphere client (2) · spring framework (1) · player (1)
- 3 CVECVSS 7.5PoC 1struts (2) · xalan-java (1)
- 3 CVECVSS 6.3NEWPoC 2rt-ac68u (3) · rt-ac68u firmware (3) · rt-n14u firmware (1)
- 3 CVECVSS 5.4NEWPoC 1clipbucket (3)
- 3 CVECVSS 5.6NEWPoC 3cm3 acora content management system (3)
- 3 CVE1 critCVSS 6.7NEWdjango (3)
- 3 CVECVSS 4.6NEWanti-virus (2) · email and server security (1) · psb workstation security (1)
- 3 CVECVSS 3.8gnome-shell (2) · gnome display manager (1)
- 3 CVECVSS 5.0NEWgrails (3) · grails-resources (3)
- 3 CVECVSS 5.4NEWcurl (3) · libcurl (3)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 108 | 10 | · | · | PoC 7 | jre (34) · jdk (34) · java runtime environment (19) | — | |
| 2 | canonical | 46 | 15 | 1 | 1 | KEV 1Nuclei 1PoC 3 | ubuntu linux (46) · update-manager (2) · libpam-modules (1) | — | |
| 3 | cisco | 45 | · | · | · | ios (19) · adaptive security appliance software (6) · asr 1004 (4) | — | ||
| 4 | debian | 38 | 8 | 1 | 1 | KEV 1Nuclei 1PoC 4 | debian linux (36) · dpkg (1) · ppthtml (1) | — | |
| 5 | redhat | 35 | 2 | 1 | 1 | KEV 1Nuclei 1PoC 5 | enterprise linux server (18) · enterprise linux desktop (18) · enterprise linux workstation (17) | — | |
| 6 | apple | 27 | 2 | · | · | PoC 1 | safari (14) · mac os x (12) · tvos (3) | — | |
| 7 | fedoraproject | 25 | 6 | 1 | 1 | KEV 1Nuclei 1PoC 5 | fedora (25) | — | |
| 8 | ibm | 25 | 6 | · | · | forms viewer (12) · messagesight (4) · messagesight jms client (4) | — | ||
| 9 | opensuse | 24 | 7 | 1 | 1 | KEV 1Nuclei 1PoC 3 | opensuse (23) · evergreen (1) | — | |
| 10 | sap | 24 | · | · | · | NEWPoC 1 | enterprise portal (2) · netweaver java application server (1) · netweaver software lifecycle manager (1) | — | |
| 11 | 22 | · | · | · | chrome (20) · google chrome (17) · android (2) | — | |||
| 12 | microsoft | 18 | 13 | 1 | · | KEV 1PoC 2 | internet explorer (12) · word (2) · microsoft publisher (1) | — | |
| 13 | paperthin | 16 | 5 | · | · | NEW | commonspot content server (16) | — | |
| 14 | pypi | 16 | 2 | · | · | PoC 2 | roundup (3) · django (3) · pillow (3) | — | |
| 15 | mozilla | 15 | 6 | · | · | PoC 3 | firefox (14) · seamonkey (12) · thunderbird (7) | — | |
| 16 | suse | 14 | 2 | · | · | PoC 1 | suse linux enterprise server (9) · studio onsite (4) · studio extension for system z (4) | — | |
| 17 | juniper | 13 | 4 | · | · | NEW | junos (6) · junos space (6) · screenos (1) | — | |
| 18 | gentoo foundation inc. | 12 | 2 | 1 | 1 | KEV 1Nuclei 1PoC 3 | gentoo linux (12) | — | |
| 19 | linux | 11 | · | · | · | PoC 3 | linux kernel (11) | — | |
| 20 | maven | 11 | · | · | · | PoC 2 | org.apache.struts:struts2-core (2) · org.fitnesse:fitnesse (1) · org.igniterealtime.openfire:parent (1) | — | |
| 21 | advantech | 10 | · | · | · | webaccess (10) · advantech webaccess (10) | — | ||
| 22 | xen | 10 | · | · | · | xen (10) | — | ||
| 23 | hp | 9 | 2 | · | · | universal configuration management database (2) · array diagnostics utility (1) · database and middleware automation (1) | — | ||
| 24 | mariadb | 9 | · | · | · | mariadb (9) | — | ||
| 25 | apache | 8 | · | · | · | PoC 1 | struts (3) · xalan-java (1) · archiva (1) | — | |
| 26 | openstack | 7 | 1 | · | · | keystone (2) · icehouse (2) · image registry and delivery service \(glance\) (1) | — | ||
| 27 | сообщество свободного программного обеспечения | 7 | · | · | · | PoC 1 | debian gnu/linux (6) · linux (1) | — | |
| 28 | siemens | 6 | 1 | 1 | 2 | KEV 1Nuclei 2PoC 2 | sinema server (3) · simatic s7 cpu 1215c (2) · simatic s7 cpu 1200 firmware (2) | — | |
| 29 | adobe | 5 | 3 | · | · | PoC 1 | flash player (4) · adobe air (3) · adobe air sdk (3) | — | |
| 30 | emc | 5 | · | · | · | cloud tiering appliance (2) · cloud tiering appliance software (2) · rsa adaptive authentication on-premise (2) | — | ||
| 31 | fortinet | 5 | 1 | · | · | NEW | fortiweb (3) · fortiadc-300e (1) · fortiadc-1000e (1) | — | |
| 32 | horde | 5 | · | · | · | NEW | groupware (4) · imp (2) · kronolith h4 (2) | — | |
| 33 | tibco | 5 | · | · | · | messaging appliance (3) · substantiation es (3) · rendezvous (3) | — | ||
| 34 | zyxel | 5 | · | · | · | NEW | n300 netusb nbg-419n (4) · n300 netusb nbg-419n firmware (4) · p-660h-61 (1) | — | |
| 35 | cacti | 4 | · | · | · | NEW | cacti (4) | — | |
| 36 | digium | 4 | · | · | · | asterisk (4) · certified asterisk (2) | — | ||
| 37 | novell inc. | 4 | · | · | · | PoC 1 | suse linux enterprise (4) | — | |
| 38 | python | 4 | 1 | · | · | NEWPoC 2 | pillow (3) · python (1) | — | |
| 39 | rubygems | 4 | · | · | · | PoC 4 | bio-basespace-sdk (1) · show_in_browser (1) · sfpagent (1) | — | |
| 40 | uclouvain | 4 | 2 | · | · | openjpeg (4) | — | ||
| 41 | vmware | 4 | 1 | · | · | vsphere client (2) · spring framework (1) · player (1) | — | ||
| 42 | apache software foundation | 3 | · | · | · | PoC 1 | struts (2) · xalan-java (1) | — | |
| 43 | asus | 3 | · | · | · | NEWPoC 2 | rt-ac68u (3) · rt-ac68u firmware (3) · rt-n14u firmware (1) | — | |
| 44 | clip-bucket | 3 | · | · | · | NEWPoC 1 | clipbucket (3) | — | |
| 45 | ddsn | 3 | · | · | · | NEWPoC 3 | cm3 acora content management system (3) | — | |
| 46 | djangoproject | 3 | 1 | · | · | NEW | django (3) | — | |
| 47 | f-secure | 3 | · | · | · | NEW | anti-virus (2) · email and server security (1) · psb workstation security (1) | — | |
| 48 | gnome | 3 | · | · | · | gnome-shell (2) · gnome display manager (1) | — | ||
| 49 | gopivotal | 3 | · | · | · | NEW | grails (3) · grails-resources (3) | — | |
| 50 | haxx | 3 | · | · | · | NEW | curl (3) · libcurl (3) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems154 CVE84 crit16 KEV27 vendorsCVSS 9.3ubuntu linux (46) · debian linux (36) · fedora (25)
- Databases111 CVE32 crit5 vendorsCVSS 5.9jdk (34) · jre (34) · mysql (28)
- Enterprise Software95 CVE10 crit6 KEV21 vendorsCVSS 7.5forms viewer (12) · cacti (4) · messagesight (4)
- Web & CMS Plugins83 CVE5 crit45 vendorsCVSS 6.3commonspot content server (16) · struts (5) · clipbucket (3)
- OSS Libraries81 CVE8 crit1 KEV36 vendorsCVSS 7.8openjpeg (4) · curl (3) · libcurl (3)
- 5 crit15 vendorsCVSS 7.6ios (19) · adaptive security appliance software (6) · junos (6)
- Mobile Apps51 CVE3 crit6 vendorsCVSS 7.1safari (14) · mac os x (12) · iphone os (3)
- Consumer Software34 CVE33 crit1 KEV14 vendorsCVSS 8.3firefox (20) · seamonkey (15) · thunderbird (8)
- Security Products34 CVE8 crit1 KEV18 vendorsCVSS 8.8anti-virus (2) · encryption desktop (2) · pgp desktop (2)
- Cloud & SaaS29 CVE2 crit1 KEV9 vendorsCVSS 6.2xen (10)
- Communications25 CVE2 KEV12 vendorsCVSS 6.8groupware (4) · open-xchange appsuite (3) · imapsync (2)
- ICS / OT / IoT20 CVE12 crit1 KEV11 vendorsCVSS 7.4advantech webaccess (10) · webaccess (10) · cecx-x-c1 modular master controller (2)
- Hardware Firmware10 CVE3 KEV6 vendorsCVSS 7.5rt-ac68u (3) · rt-ac68u firmware (3) · rt-ac66u firmware (1)
- DevTools & CI6 CVE7 vendorsCVSS 5.5clang (1) · fitnesse wiki (1) · nexus (1)
- AI / ML1 CVE1 vendorsCVSS 8.3cups-filters (1)
- Unclassified25 CVE2 crit20 vendorsCVSS 6.1gnew (3) · esis enterprise student information system (2) · finder (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 4 | 154 | 84 | 16 | 27 | 99 | 9.3 | ubuntu linux (46) · debian linux (36) · fedora (25) |
| Databases▸ 1 | 111 | 32 | · | 5 | 36 | 5.9 | jdk (34) · jre (34) · mysql (28) |
| Enterprise Software▸ 6 | 95 | 10 | 6 | 21 | 98 | 7.5 | forms viewer (12) · cacti (4) · messagesight (4) |
| Web & CMS Plugins▸ 5 | 83 | 5 | · | 45 | 50 | 6.3 | commonspot content server (16) · struts (5) · clipbucket (3) |
| OSS Libraries▸ 8 | 81 | 8 | 1 | 36 | 60 | 7.8 | openjpeg (4) · curl (3) · libcurl (3) |
| Networking Infrastructure▸ 5 | 77 | 5 | · | 15 | 72 | 7.6 | ios (19) · adaptive security appliance software (6) · junos (6) |
| Mobile Apps▸ 2 | 51 | 3 | · | 6 | 13 | 7.1 | safari (14) · mac os x (12) · iphone os (3) |
| Consumer Software▸ 4 | 34 | 33 | 1 | 14 | 23 | 8.3 | firefox (20) · seamonkey (15) · thunderbird (8) |
| Security Products▸ 6 | 34 | 8 | 1 | 18 | 49 | 8.8 | anti-virus (2) · encryption desktop (2) · pgp desktop (2) |
| Cloud & SaaS▸ 3 | 29 | 2 | 1 | 9 | 19 | 6.2 | xen (10) |
| Communications▸ 3 | 25 | · | 2 | 12 | 18 | 6.8 | groupware (4) · open-xchange appsuite (3) · imapsync (2) |
| ICS / OT / IoT▸ 2 | 20 | 12 | 1 | 11 | 20 | 7.4 | advantech webaccess (10) · webaccess (10) · cecx-x-c1 modular master controller (2) |
| Hardware Firmware▸ 4 | 10 | · | 3 | 6 | 18 | 7.5 | rt-ac68u (3) · rt-ac68u firmware (3) · rt-ac66u firmware (1) |
| DevTools & CI▸ 3 | 6 | · | · | 7 | 6 | 5.5 | clang (1) · fitnesse wiki (1) · nexus (1) |
| AI / ML▸ 1 | 1 | · | · | 1 | 1 | 8.3 | cups-filters (1) |
| Unclassified | 25 | 2 | · | 20 | 21 | 6.1 | gnew (3) · esis enterprise student information system (2) · finder (2) |
Weakness × Sector
Which weaknesses hit which solution categories in April 2014
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
20Improper Input Validation264CWE-26479XSS119Memory Buffer Bounds200Information Exposure22Path Traversal352CSRF287Improper Authentication399CWE-39989SQL InjectionOperating Systems201541143153OSS Libraries13188521222Consumer Software552301238Enterprise Software101214132136Web & CMS Plugins61722541049Networking Infrastructure2546516255Databases12211Security Products24731121Communications54613111Cloud & SaaS5622112