month report
May 2014
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
May 2014 closed with 555 published CVEs. 42 criticals, cisco led volume, mostly via telepresence tc software. Top weakness class — CWE-264 (86 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
555
— MoM— YoY
Severity mix
42 / 100
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
4.1%
23 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4306.2
n=23
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2879
n=3
Detection gap
KEV pressure, no Nuclei coverage
May 2014 · vendors with active exploitation listed by CISA but no public detection template.
Weakness × Vendor
What's spreading where in May 2014
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
264CWE-26479XSS20Improper Input Validation119Memory Buffer Bounds352CSRF200Information Exposure287Improper Authentication310CWE-31089SQL Injection94Code Injectioncisco64299212112ibm916439211apple11181pypi3241412canonical5311redhat51231google2111adobe661microsoft213213adobe systems inc.651debian111microsoft corp212213
Most discussed CVEs — May 2014
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #19theforeman9 CVE
- #25gitlab6 CVE
- #29cogentdatahub5 CVE
- #33caldera4 CVE
- #36livezilla4 CVE
- #37mageia project4 CVE
- #38mahara4 CVE
- #40opentext4 CVE
- #42ayatana project3 CVE
- #43cogent3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 61 CVE8 critCVSS 7.1telepresence tc software (13) · telepresence te software (13) · telepresence system software (7)
- 57 CVECVSS 4.8PoC 1maximo asset management (11) · sametime (10) · smartcloud control desk (10)
- 21 CVECVSS 6.5safari (19) · itunes (1) · mac os x (1)
- 20 CVECVSS 4.7PoC 4products.cmfplone (2) · pywbem (2) · soappy (2)
- 20 CVECVSS 4.5KEV 2PoC 2red hat enterprise linux (4) · rhevm-reports (3) · enterprise linux eus (3)
- 19 CVE1 critCVSS 5.1KEV 1PoC 3ubuntu linux (19) · ltsp display manager (1) · software-properties (1)
- 16 CVECVSS 6.6PoC 2chrome (13) · google chrome (12) · android (1)
- 15 CVE9 critCVSS 8.7acrobat (9) · acrobat reader (9) · adobe reader (7)
- 15 CVE6 critCVSS 7.4KEV 1windows server 2012 r2 (4) · windows server 2012 (4) · windows server 2008 (4)
- 14 CVECVSS 5.4KEV 1PoC 3debian linux (8) · dpkg (2) · dpkg-dev (2)
- 12 CVECVSS 4.9tomcat (5) · cloudstack (2) · cxf (2)
- 12 CVECVSS 5.5KEV 1PoC 4debian gnu/linux (6) · linux (6)
- 11 CVECVSS 4.6PoC 1org.apache.tomcat:tomcat (4) · org.apache.tomcat:tomcat-coyote (2) · org.apache.tomcat:tomcat-catalina (2)
- 10 CVECVSS 5.4moodle/moodle (6) · typo3/cms (3) · typo3/cms-core (1)
- 9 CVE1 critCVSS 5.7gentoo linux (9)
- 9 CVECVSS 5.7mediawiki (9)
- 9 CVECVSS 4.5PoC 1opensuse (9)
- 9 CVE2 critCVSS 6.0KEV 1PoC 3linux (5) · openjdk (2) · solaris (1)
- 9 CVECVSS 5.4NEWPoC 1foreman (8) · kafo (1)
- 8 CVE1 critCVSS 6.5KEV 1PoC 7omniauth-facebook (1) · actionpack (1) · arabic-prawn (1)
- 7 CVE2 critCVSS 8.1cloudplatform (3) · netscaler access gateway (3) · netscaler access gateway firmware (3)
- 7 CVECVSS 4.9KEV 1PoC 3linux kernel (7)
- 6 CVECVSS 4.8tomcat (5) · struts (1)
- 6 CVECVSS 5.0fedora (6)
- 6 CVECVSS 6.4NEWPoC 1gitlab (6) · gitlab-shell (3)
- 6 CVECVSS 3.4PoC 1emacs (4) · grub (1) · rush (1)
- 6 CVECVSS 5.2moodle (6)
- 6 CVECVSS 4.1xen (6)
- 5 CVECVSS 7.2NEWcogent datahub (5)
- 5 CVECVSS 3.4operations manager i (1) · sn6000 stackable 8gb 12-port single power fibre channel switch (1) · 8\/20q fibre channel switch 8 port (1)
- 5 CVECVSS 4.7websphere application server (4) · ibm platform symphony (1) · ibm call center for commerce (1)
- 5 CVECVSS 4.7KEV 1PoC 1linux enterprise desktop (3) · linux enterprise server (3) · linux enterprise real time extension (2)
- 4 CVE1 critCVSS 7.5NEWPoC 1caldera (4)
- 4 CVE1 critCVSS 7.4PoC 2dap 1150 (2) · dap 1150 firmware (2) · dap-1350 (1)
- 4 CVE1 critCVSS 7.1PoC 1rsa security analytics (1) · documentum d2 (1) · rsa access manager (1)
- 4 CVECVSS 5.7NEWPoC 3livezilla (4)
- 4 CVECVSS 3.3NEWmageia (4)
- 4 CVECVSS 4.5NEWmahara (4)
- 4 CVECVSS 3.6compute (1) · heat (1) · horizon (1)
- 4 CVECVSS 6.3NEWexceed ondemand (4)
- 4 CVECVSS 5.6typo3 (4)
- 3 CVECVSS 4.4NEWPoC 1unity (3)
- 3 CVECVSS 7.0NEWdatahub (3)
- 3 CVECVSS 4.1PoC 3core ftp (3)
- 3 CVE1 critCVSS 6.1NEWKEV 1PoC 3big-ip access policy manager (2) · big-ip webaccelerator (2) · big-ip wan optimization manager (2)
- 3 CVECVSS 4.5NEWNuclei 3PoC 3imember360 (3)
- 3 CVECVSS 3.8NEWmantisbt (3)
- 3 CVECVSS 6.5libxfont (3)
- 3 CVECVSS 5.2NEWastra linux common edition (2) · astra linux special edition (1)
- 2 CVECVSS 4.3NEWPoC 1barracudadrive (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | cisco | 61 | 8 | · | · | telepresence tc software (13) · telepresence te software (13) · telepresence system software (7) | — | ||
| 2 | ibm | 57 | · | · | · | PoC 1 | maximo asset management (11) · sametime (10) · smartcloud control desk (10) | — | |
| 3 | apple | 21 | · | · | · | safari (19) · itunes (1) · mac os x (1) | — | ||
| 4 | pypi | 20 | · | · | · | PoC 4 | products.cmfplone (2) · pywbem (2) · soappy (2) | — | |
| 5 | redhat | 20 | · | 2 | · | KEV 2PoC 2 | red hat enterprise linux (4) · rhevm-reports (3) · enterprise linux eus (3) | — | |
| 6 | canonical | 19 | 1 | 1 | · | KEV 1PoC 3 | ubuntu linux (19) · ltsp display manager (1) · software-properties (1) | — | |
| 7 | 16 | · | · | · | PoC 2 | chrome (13) · google chrome (12) · android (1) | — | ||
| 8 | adobe | 15 | 9 | · | · | acrobat (9) · acrobat reader (9) · adobe reader (7) | — | ||
| 9 | microsoft | 15 | 6 | 1 | · | KEV 1 | windows server 2012 r2 (4) · windows server 2012 (4) · windows server 2008 (4) | — | |
| 10 | debian | 14 | · | 1 | · | KEV 1PoC 3 | debian linux (8) · dpkg (2) · dpkg-dev (2) | — | |
| 11 | apache | 12 | · | · | · | tomcat (5) · cloudstack (2) · cxf (2) | — | ||
| 12 | сообщество свободного программного обеспечения | 12 | · | 1 | · | KEV 1PoC 4 | debian gnu/linux (6) · linux (6) | — | |
| 13 | maven | 11 | · | · | · | PoC 1 | org.apache.tomcat:tomcat (4) · org.apache.tomcat:tomcat-coyote (2) · org.apache.tomcat:tomcat-catalina (2) | — | |
| 14 | packagist | 10 | · | · | · | moodle/moodle (6) · typo3/cms (3) · typo3/cms-core (1) | — | ||
| 15 | gentoo foundation inc. | 9 | 1 | · | · | gentoo linux (9) | — | ||
| 16 | mediawiki | 9 | · | · | · | mediawiki (9) | — | ||
| 17 | opensuse | 9 | · | · | · | PoC 1 | opensuse (9) | — | |
| 18 | oracle | 9 | 2 | 1 | · | KEV 1PoC 3 | linux (5) · openjdk (2) · solaris (1) | — | |
| 19 | theforeman | 9 | · | · | · | NEWPoC 1 | foreman (8) · kafo (1) | — | |
| 20 | rubygems | 8 | 1 | 1 | · | KEV 1PoC 7 | omniauth-facebook (1) · actionpack (1) · arabic-prawn (1) | — | |
| 21 | citrix | 7 | 2 | · | · | cloudplatform (3) · netscaler access gateway (3) · netscaler access gateway firmware (3) | — | ||
| 22 | linux | 7 | · | 1 | · | KEV 1PoC 3 | linux kernel (7) | — | |
| 23 | apache software foundation | 6 | · | · | · | tomcat (5) · struts (1) | — | ||
| 24 | fedoraproject | 6 | · | · | · | fedora (6) | — | ||
| 25 | gitlab | 6 | · | · | · | NEWPoC 1 | gitlab (6) · gitlab-shell (3) | — | |
| 26 | gnu | 6 | · | · | · | PoC 1 | emacs (4) · grub (1) · rush (1) | — | |
| 27 | moodle | 6 | · | · | · | moodle (6) | — | ||
| 28 | xen | 6 | · | · | · | xen (6) | — | ||
| 29 | cogentdatahub | 5 | · | · | · | NEW | cogent datahub (5) | — | |
| 30 | hp | 5 | · | · | · | operations manager i (1) · sn6000 stackable 8gb 12-port single power fibre channel switch (1) · 8\/20q fibre channel switch 8 port (1) | — | ||
| 31 | ibm corp. | 5 | · | · | · | websphere application server (4) · ibm platform symphony (1) · ibm call center for commerce (1) | — | ||
| 32 | suse | 5 | · | 1 | · | KEV 1PoC 1 | linux enterprise desktop (3) · linux enterprise server (3) · linux enterprise real time extension (2) | — | |
| 33 | caldera | 4 | 1 | · | · | NEWPoC 1 | caldera (4) | — | |
| 34 | dlink | 4 | 1 | · | · | PoC 2 | dap 1150 (2) · dap 1150 firmware (2) · dap-1350 (1) | — | |
| 35 | emc | 4 | 1 | · | · | PoC 1 | rsa security analytics (1) · documentum d2 (1) · rsa access manager (1) | — | |
| 36 | livezilla | 4 | · | · | · | NEWPoC 3 | livezilla (4) | — | |
| 37 | mageia project | 4 | · | · | · | NEW | mageia (4) | — | |
| 38 | mahara | 4 | · | · | · | NEW | mahara (4) | — | |
| 39 | openstack | 4 | · | · | · | compute (1) · heat (1) · horizon (1) | — | ||
| 40 | opentext | 4 | · | · | · | NEW | exceed ondemand (4) | — | |
| 41 | typo3 | 4 | · | · | · | typo3 (4) | — | ||
| 42 | ayatana project | 3 | · | · | · | NEWPoC 1 | unity (3) | — | |
| 43 | cogent | 3 | · | · | · | NEW | datahub (3) | — | |
| 44 | coreftp | 3 | · | · | · | PoC 3 | core ftp (3) | — | |
| 45 | f5 | 3 | 1 | 1 | · | NEWKEV 1PoC 3 | big-ip access policy manager (2) · big-ip webaccelerator (2) · big-ip wan optimization manager (2) | — | |
| 46 | imember360 | 3 | · | · | 3 | NEWNuclei 3PoC 3 | imember360 (3) | — | |
| 47 | mantisbt | 3 | · | · | · | NEW | mantisbt (3) | — | |
| 48 | x.org | 3 | · | · | · | libxfont (3) | — | ||
| 49 | ооо «русбитех-астра» | 3 | · | · | · | NEW | astra linux common edition (2) · astra linux special edition (1) | — | |
| 50 | barracudadrive | 2 | · | · | · | NEWPoC 1 | barracudadrive (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Enterprise Software115 CVE1 crit29 vendorsCVSS 7.0maximo asset management (11) · sametime (10) · smartcloud control desk (10)
- Operating Systems95 CVE37 crit26 KEV26 vendorsCVSS 7.4ubuntu linux (19) · gentoo linux (9) · opensuse (9)
- OSS Libraries85 CVE1 crit2 KEV28 vendorsCVSS 6.5emacs (4) · libxfont (3) · jinja2 (2)
- 27 crit11 vendorsCVSS 10.0telepresence tc software (13) · telepresence te software (13) · nexus 7000 (7)
- Web & CMS Plugins73 CVE38 vendorsCVSS 5.9tomcat (10) · mediawiki (9) · moodle (6)
- Mobile Apps37 CVE3 vendorsCVSS 6.6safari (19) · itunes (1) · mac os x (1)
- Consumer Software31 CVE26 crit14 vendorsCVSS 8.6acrobat (9) · acrobat reader (9) · adobe reader (7)
- Cloud & SaaS24 CVE10 crit9 vendorsCVSS 7.7cloudplatform (3) · netscaler access gateway (3) · netscaler access gateway firmware (3)
- Security Products23 CVE2 crit20 KEV15 vendorsCVSS 6.9ga login (2) · documentum d2 (1) · rsa access manager (1)
- Databases20 CVE2 crit1 KEV6 vendorsCVSS 7.2linux (5) · websphere application server (4) · openjdk (2)
- ICS / OT / IoT14 CVE1 crit10 vendorsCVSS 10.0deltav (2) · scada data gateway (2) · centum vp (1)
- DevTools & CI13 CVE8 vendorsCVSS 6.9gitlab (6) · gitlab-shell (3) · hub (1)
- Communications12 CVE7 vendorsCVSS 5.5livezilla (4) · unrealircd (2)
- Hardware Firmware4 CVE4 vendorsCVSS 7.5docushare (1)
- Unclassified27 CVE1 crit22 vendorsCVSS 5.4barracudadrive (2) · krisonav (2) · python-oauth2 (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Enterprise Software▸ 5 | 115 | 1 | · | 29 | 74 | 7.0 | maximo asset management (11) · sametime (10) · smartcloud control desk (10) |
| Operating Systems▸ 3 | 95 | 37 | 26 | 26 | 110 | 7.4 | ubuntu linux (19) · gentoo linux (9) · opensuse (9) |
| OSS Libraries▸ 8 | 85 | 1 | 2 | 28 | 64 | 6.5 | emacs (4) · libxfont (3) · jinja2 (2) |
| Networking Infrastructure▸ 6 | 74 | 27 | · | 11 | 98 | 10.0 | telepresence tc software (13) · telepresence te software (13) · nexus 7000 (7) |
| Web & CMS Plugins▸ 4 | 73 | · | · | 38 | 43 | 5.9 | tomcat (10) · mediawiki (9) · moodle (6) |
| Mobile Apps▸ 2 | 37 | · | · | 3 | 10 | 6.6 | safari (19) · itunes (1) · mac os x (1) |
| Consumer Software▸ 4 | 31 | 26 | · | 14 | 20 | 8.6 | acrobat (9) · acrobat reader (9) · adobe reader (7) |
| Cloud & SaaS▸ 4 | 24 | 10 | · | 9 | 22 | 7.7 | cloudplatform (3) · netscaler access gateway (3) · netscaler access gateway firmware (3) |
| Security Products▸ 6 | 23 | 2 | 20 | 15 | 46 | 6.9 | ga login (2) · documentum d2 (1) · rsa access manager (1) |
| Databases▸ 3 | 20 | 2 | 1 | 6 | 10 | 7.2 | linux (5) · websphere application server (4) · openjdk (2) |
| ICS / OT / IoT▸ 3 | 14 | 1 | · | 10 | 28 | 10.0 | deltav (2) · scada data gateway (2) · centum vp (1) |
| DevTools & CI▸ 3 | 13 | · | · | 8 | 10 | 6.9 | gitlab (6) · gitlab-shell (3) · hub (1) |
| Communications▸ 3 | 12 | · | · | 7 | 6 | 5.5 | livezilla (4) · unrealircd (2) |
| Hardware Firmware▸ 3 | 4 | · | · | 4 | 5 | 7.5 | docushare (1) |
| Unclassified | 27 | 1 | · | 22 | 22 | 5.4 | barracudadrive (2) · krisonav (2) · python-oauth2 (2) |
Weakness × Sector
Which weaknesses hit which solution categories in May 2014
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
264CWE-26479XSS20Improper Input Validation119Memory Buffer Bounds352CSRF200Information Exposure287Improper Authentication310CWE-31089SQL Injection94Code InjectionEnterprise Software2227615126443Operating Systems1849532624OSS Libraries183115342512Networking Infrastructure1073210413122Consumer Software942323114Web & CMS Plugins1316211243195Security Products451251Databases331312Cloud & SaaS3161243Communications111111141