month report
July 2014
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
July 2014 closed with 656 published CVEs. 79 criticals, oracle led volume, mostly via fusion middleware. Top weakness class — CWE-79 (171 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
656
— MoM— YoY
Severity mix
79 / 71
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
14.8%
97 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4265.1
n=97
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2838
n=2
Detection gap
KEV pressure, no Nuclei coverage
July 2014 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1ibm40 CVE
Weakness × Vendor
What's spreading where in July 2014
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
79XSS119Memory Buffer Bounds264CWE-264200Information Exposure20Improper Input Validation89SQL Injection22Path Traversal352CSRF94Code Injection287Improper Authenticationoracle11141apple151323ibm11593121oracle corp.1cisco524371311microsoft21311microsoft corp21311debian21151redhat11422canonical2hp21сообщество свободного программного обеспечения3112
Most discussed CVEs — July 2014
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #18netgate10 CVE
- #28juniper6 CVE
- #29sap6 CVE
- #36netfortris4 CVE
- #37pfsense4 CVE
- #39shopizer4 CVE
- #41aas93 CVE
- #44christos zoulas3 CVE
- #45email\3 CVE
- #46file project3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 99 CVE9 critCVSS 5.5Nuclei 1PoC 3fusion middleware (21) · jdk (20) · java platform (20)
- 45 CVE10 critCVSS 6.5PoC 3iphone os (24) · mac os x (19) · tvos (16)
- 40 CVECVSS 4.4KEV 1PoC 13algo credit limits (9) · algorithmics (8) · websphere portal unified task list portlet (4)
- 33 CVE3 critCVSS 6.2webex meetings server (6) · unified communications manager (5) · unified communications domain manager (4)
- 29 CVE23 critCVSS 8.3PoC 2internet explorer (23) · windows 8 (4) · windows 8.1 (4)
- 26 CVE3 critCVSS 5.6PoC 4debian linux (26)
- 25 CVE2 critCVSS 5.5PoC 3jboss enterprise application platform (8) · enterprise linux server (5) · cloudforms 3.0 management engine (5)
- 17 CVE1 critCVSS 5.1PoC 2ubuntu linux (16) · ubuntu (2) · acpi-support (1)
- 16 CVE5 critCVSS 7.6PoC 1intelligent management center (5) · imc branch intelligent management system software module (5) · universal configuration management database (3)
- 15 CVECVSS 4.9PoC 1linux enterprise server (15) · linux enterprise desktop (9) · linux enterprise software development kit (5)
- 15 CVE1 critCVSS 4.9PoC 2debian gnu/linux (14) · linux (1)
- 14 CVE9 critCVSS 8.3firefox (14) · thunderbird (13) · firefox esr (7)
- 13 CVECVSS 4.8PoC 1moodle (13)
- 12 CVE1 critCVSS 5.2PoC 2opensuse (12)
- 12 CVECVSS 4.9PoC 2moodle/moodle (10) · phpmyadmin/phpmyadmin (1) · yiisoft/yii (1)
- 11 CVECVSS 4.4PoC 3http server (6) · cxf (2) · subversion (2)
- 10 CVECVSS 5.2PoC 2linux kernel (10)
- 10 CVECVSS 5.2NEWPoC 1pfsense (10)
- 10 CVECVSS 5.2PoC 1php (10)
- 8 CVE1 critCVSS 5.5PoC 2fedora (8)
- 8 CVE3 critCVSS 7.0PoC 2chrome (4) · sketchup (3) · google chrome (2)
- 7 CVECVSS 5.5KEV 1Nuclei 1PoC 3org.elasticsearch:elasticsearch (1) · io.netty:netty-handler (1) · org.apache.cxf:cxf-core (1)
- 7 CVE1 critCVSS 5.4opensuse (7)
- 7 CVECVSS 5.0php (7)
- 6 CVECVSS 5.0PoC 2http server (6)
- 6 CVE1 critCVSS 5.3garoon (6)
- 6 CVECVSS 6.5PoC 2documentum content server (2) · documentum eroom (1) · documentum foundation services (1)
- 6 CVE1 critCVSS 7.0NEWjunos (6) · srx100 (3) · srx110 (3)
- 6 CVECVSS 4.9NEWPoC 5hana extended application services (2) · netweaver business warehouse (1) · fi manager self-service (1)
- 5 CVE1 critCVSS 7.6PoC 1advantech webaccess (5) · webaccess (5)
- 5 CVE1 critCVSS 5.3xenserver (2) · netscaler access gateway firmware (2) · netscaler application delivery controller (2)
- 5 CVECVSS 4.6mariadb (5)
- 5 CVECVSS 5.5simatic pcs7 (5) · simatic wincc (5) · wincc (5)
- 4 CVECVSS 4.1drupal (4)
- 4 CVECVSS 3.1PoC 1gentoo linux (4)
- 4 CVECVSS 6.1NEWNuclei 1PoC 4trixbox (4)
- 4 CVECVSS 5.0NEWsnort package (2) · suricata package (2)
- 4 CVECVSS 3.6phpmyadmin (4)
- 4 CVECVSS 6.1NEWPoC 1shopizer (4)
- 4 CVECVSS 5.2sunos (4)
- 3 CVECVSS 5.4NEWPoC 3zerocms (3)
- 3 CVECVSS 6.4PoC 1adobe air (3) · adobe air sdk (3) · flash player (3)
- 3 CVE3 critCVSS 9.5sketchbook pro (2) · vred (1)
- 3 CVECVSS 6.0NEWPoC 1file (3)
- 3 CVECVSS 5.0NEWPoC 1\ (3)
- 3 CVECVSS 5.0NEWfile (3)
- 3 CVECVSS 5.9NEWPoC 3foecms (3)
- 3 CVECVSS 2.7dbus (3)
- 3 CVECVSS 7.3NEWPoC 2gitlist (3)
- 3 CVECVSS 5.4PoC 3limesurvey (3)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 99 | 9 | · | 1 | Nuclei 1PoC 3 | fusion middleware (21) · jdk (20) · java platform (20) | — | |
| 2 | apple | 45 | 10 | · | · | PoC 3 | iphone os (24) · mac os x (19) · tvos (16) | — | |
| 3 | ibm | 40 | · | 1 | · | KEV 1PoC 13 | algo credit limits (9) · algorithmics (8) · websphere portal unified task list portlet (4) | — | |
| 4 | cisco | 33 | 3 | · | · | webex meetings server (6) · unified communications manager (5) · unified communications domain manager (4) | — | ||
| 5 | microsoft | 29 | 23 | · | · | PoC 2 | internet explorer (23) · windows 8 (4) · windows 8.1 (4) | — | |
| 6 | debian | 26 | 3 | · | · | PoC 4 | debian linux (26) | — | |
| 7 | redhat | 25 | 2 | · | · | PoC 3 | jboss enterprise application platform (8) · enterprise linux server (5) · cloudforms 3.0 management engine (5) | — | |
| 8 | canonical | 17 | 1 | · | · | PoC 2 | ubuntu linux (16) · ubuntu (2) · acpi-support (1) | — | |
| 9 | hp | 16 | 5 | · | · | PoC 1 | intelligent management center (5) · imc branch intelligent management system software module (5) · universal configuration management database (3) | — | |
| 10 | suse | 15 | · | · | · | PoC 1 | linux enterprise server (15) · linux enterprise desktop (9) · linux enterprise software development kit (5) | — | |
| 11 | сообщество свободного программного обеспечения | 15 | 1 | · | · | PoC 2 | debian gnu/linux (14) · linux (1) | — | |
| 12 | mozilla | 14 | 9 | · | · | firefox (14) · thunderbird (13) · firefox esr (7) | — | ||
| 13 | moodle | 13 | · | · | · | PoC 1 | moodle (13) | — | |
| 14 | opensuse | 12 | 1 | · | · | PoC 2 | opensuse (12) | — | |
| 15 | packagist | 12 | · | · | · | PoC 2 | moodle/moodle (10) · phpmyadmin/phpmyadmin (1) · yiisoft/yii (1) | — | |
| 16 | apache | 11 | · | · | · | PoC 3 | http server (6) · cxf (2) · subversion (2) | — | |
| 17 | linux | 10 | · | · | · | PoC 2 | linux kernel (10) | — | |
| 18 | netgate | 10 | · | · | · | NEWPoC 1 | pfsense (10) | — | |
| 19 | php | 10 | · | · | · | PoC 1 | php (10) | — | |
| 20 | fedoraproject | 8 | 1 | · | · | PoC 2 | fedora (8) | — | |
| 21 | 8 | 3 | · | · | PoC 2 | chrome (4) · sketchup (3) · google chrome (2) | — | ||
| 22 | maven | 7 | · | 1 | 1 | KEV 1Nuclei 1PoC 3 | org.elasticsearch:elasticsearch (1) · io.netty:netty-handler (1) · org.apache.cxf:cxf-core (1) | — | |
| 23 | novell inc. | 7 | 1 | · | · | opensuse (7) | — | ||
| 24 | php group | 7 | · | · | · | php (7) | — | ||
| 25 | apache software foundation | 6 | · | · | · | PoC 2 | http server (6) | — | |
| 26 | cybozu | 6 | 1 | · | · | garoon (6) | — | ||
| 27 | emc | 6 | · | · | · | PoC 2 | documentum content server (2) · documentum eroom (1) · documentum foundation services (1) | — | |
| 28 | juniper | 6 | 1 | · | · | NEW | junos (6) · srx100 (3) · srx110 (3) | — | |
| 29 | sap | 6 | · | · | · | NEWPoC 5 | hana extended application services (2) · netweaver business warehouse (1) · fi manager self-service (1) | — | |
| 30 | advantech | 5 | 1 | · | · | PoC 1 | advantech webaccess (5) · webaccess (5) | — | |
| 31 | citrix | 5 | 1 | · | · | xenserver (2) · netscaler access gateway firmware (2) · netscaler application delivery controller (2) | — | ||
| 32 | mariadb | 5 | · | · | · | mariadb (5) | — | ||
| 33 | siemens | 5 | · | · | · | simatic pcs7 (5) · simatic wincc (5) · wincc (5) | — | ||
| 34 | drupal | 4 | · | · | · | drupal (4) | — | ||
| 35 | gentoo foundation inc. | 4 | · | · | · | PoC 1 | gentoo linux (4) | — | |
| 36 | netfortris | 4 | · | · | 1 | NEWNuclei 1PoC 4 | trixbox (4) | — | |
| 37 | pfsense | 4 | · | · | · | NEW | snort package (2) · suricata package (2) | — | |
| 38 | phpmyadmin | 4 | · | · | · | phpmyadmin (4) | — | ||
| 39 | shopizer | 4 | · | · | · | NEWPoC 1 | shopizer (4) | — | |
| 40 | sun | 4 | · | · | · | sunos (4) | — | ||
| 41 | aas9 | 3 | · | · | · | NEWPoC 3 | zerocms (3) | — | |
| 42 | adobe | 3 | · | · | · | PoC 1 | adobe air (3) · adobe air sdk (3) · flash player (3) | — | |
| 43 | autodesk | 3 | 3 | · | · | sketchbook pro (2) · vred (1) | — | ||
| 44 | christos zoulas | 3 | · | · | · | NEWPoC 1 | file (3) | — | |
| 45 | email\ | 3 | · | · | · | NEWPoC 1 | \ (3) | — | |
| 46 | file project | 3 | · | · | · | NEW | file (3) | — | |
| 47 | foecms | 3 | · | · | · | NEWPoC 3 | foecms (3) | — | |
| 48 | freedesktop | 3 | · | · | · | dbus (3) | — | ||
| 49 | gitlist | 3 | · | · | · | NEWPoC 2 | gitlist (3) | — | |
| 50 | limesurvey | 3 | · | · | · | PoC 3 | limesurvey (3) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems110 CVE68 crit27 vendorsCVSS 8.3debian linux (26) · opensuse (19) · ubuntu linux (16)
- Databases106 CVE26 crit2 KEV6 vendorsCVSS 7.8fusion middleware (21) · java platform (20) · jdk (20)
- Enterprise Software90 CVE15 crit1 KEV22 vendorsCVSS 7.5algo credit limits (9) · algorithmics (8) · imc branch intelligent management system software module (5)
- Web & CMS Plugins87 CVE1 crit48 vendorsCVSS 5.8moodle (13) · http server (12) · drupal (4)
- 15 crit17 vendorsCVSS 8.6pfsense (10) · junos (6) · webex meetings server (6)
- OSS Libraries57 CVE1 crit1 KEV26 vendorsCVSS 7.5php (17) · dbus (3) · file (3)
- Mobile Apps54 CVE21 crit4 vendorsCVSS 6.5iphone os (24) · mac os x (19) · tvos (16)
- Consumer Software32 CVE47 crit17 vendorsCVSS 9.3firefox (20) · thunderbird (17) · firefox esr (10)
- Security Products20 CVE2 crit12 vendorsCVSS 7.6documentum content server (2) · webid (2) · centerstage (1)
- ICS / OT / IoT15 CVE2 crit7 vendorsCVSS 8.3advantech webaccess (5) · webaccess (5) · falcon xlweb linux controller (2)
- Cloud & SaaS13 CVE1 crit6 vendorsCVSS 5.2netscaler access gateway (2) · netscaler access gateway firmware (2) · netscaler application delivery controller (2)
- Communications13 CVE1 crit8 vendorsCVSS 6.6trixbox (4) · sip-t38g (1) · twg87ouir (1)
- DevTools & CI6 CVE4 vendorsCVSS 4.3webmin (2) · testrail (1) · usermin (1)
- Hardware Firmware1 CVE2 crit1 vendorsCVSS 10.0dpxr20a-16 (1) · px (1)
- Unclassified26 CVE2 crit19 vendorsCVSS 5.2\ (3) · gitlist (3) · sgminer (3)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 110 | 68 | · | 27 | 69 | 8.3 | debian linux (26) · opensuse (19) · ubuntu linux (16) |
| Databases▸ 3 | 106 | 26 | 2 | 6 | 30 | 7.8 | fusion middleware (21) · java platform (20) · jdk (20) |
| Enterprise Software▸ 7 | 90 | 15 | 1 | 22 | 102 | 7.5 | algo credit limits (9) · algorithmics (8) · imc branch intelligent management system software module (5) |
| Web & CMS Plugins▸ 5 | 87 | 1 | · | 48 | 53 | 5.8 | moodle (13) · http server (12) · drupal (4) |
| Networking Infrastructure▸ 6 | 70 | 15 | · | 17 | 107 | 8.6 | pfsense (10) · junos (6) · webex meetings server (6) |
| OSS Libraries▸ 8 | 57 | 1 | 1 | 26 | 36 | 7.5 | php (17) · dbus (3) · file (3) |
| Mobile Apps▸ 2 | 54 | 21 | · | 4 | 14 | 6.5 | iphone os (24) · mac os x (19) · tvos (16) |
| Consumer Software▸ 4 | 32 | 47 | · | 17 | 20 | 9.3 | firefox (20) · thunderbird (17) · firefox esr (10) |
| Security Products▸ 4 | 20 | 2 | · | 12 | 21 | 7.6 | documentum content server (2) · webid (2) · centerstage (1) |
| ICS / OT / IoT▸ 4 | 15 | 2 | · | 7 | 35 | 8.3 | advantech webaccess (5) · webaccess (5) · falcon xlweb linux controller (2) |
| Cloud & SaaS▸ 4 | 13 | 1 | · | 6 | 14 | 5.2 | netscaler access gateway (2) · netscaler access gateway firmware (2) · netscaler application delivery controller (2) |
| Communications▸ 3 | 13 | 1 | · | 8 | 10 | 6.6 | trixbox (4) · sip-t38g (1) · twg87ouir (1) |
| DevTools & CI▸ 2 | 6 | · | · | 4 | 5 | 4.3 | webmin (2) · testrail (1) · usermin (1) |
| Hardware Firmware▸ 1 | 1 | 2 | · | 1 | 2 | 10.0 | dpxr20a-16 (1) · px (1) |
| Unclassified | 26 | 2 | · | 19 | 20 | 5.2 | \ (3) · gitlist (3) · sgminer (3) |
Weakness × Sector
Which weaknesses hit which solution categories in July 2014
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS119Memory Buffer Bounds264CWE-264200Information Exposure20Improper Input Validation89SQL Injection22Path Traversal352CSRF94Code Injection287Improper AuthenticationWeb & CMS Plugins81341123632Enterprise Software269953522Operating Systems22022811141Networking Infrastructure14387124523Consumer Software54272112OSS Libraries7572823121Databases51131Communications6121113Cloud & SaaS4141ICS / OT / IoT2234111