month report
August 2014
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
August 2014 closed with 407 published CVEs. 55 criticals, ibm led volume, mostly via websphere application server. Biggest breakout: adobe at ×6.0 their 12-month median. Top weakness class — CWE-264 (56 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
407
— MoM— YoY
Severity mix
55 / 80
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
7.4%
30 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4224.0
n=30
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2843
n=3
Detection gap
KEV pressure, no Nuclei coverage
August 2014 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1microsoft38 CVE
- KEV 1adobe9 CVE
- KEV 1codeaurora6 CVE
Weakness × Vendor
What's spreading where in August 2014
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — August 2014
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
- 6.0×adobe9 CVE
- 5.5×emc11 CVE
- 5.0×invensys5 CVE
- 5.0×schneider electric5 CVE
- 3.0×apache software foundation3 CVE
- 3.0×binarymoon3 CVE
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #15openssl9 CVE
- #16openssl software foundation9 CVE
- #18codeaurora6 CVE
- #21cobham5 CVE
- #24pyplate5 CVE
- #25schneider electric5 CVE
- #27wireshark team5 CVE
- #30sphider4 CVE
- #31splunk4 CVE
- #32teampass4 CVE
Top vendors
Ranked by distinct CVE count this period.
- 49 CVECVSS 5.0PoC 3websphere application server (7) · infosphere master data management server for product information management (5) · infosphere master data management (5)
- 38 CVE25 critCVSS 7.5KEV 1PoC 1internet explorer (26) · windows 7 (5) · windows 7 service pack 1 (5)
- 21 CVE1 critCVSS 5.3cloud portal (4) · transport gateway installation software (3) · unified communications manager (2)
- 20 CVECVSS 4.9PoC 2opensuse (20)
- 17 CVECVSS 6.3Nuclei 4debian linux (14) · kde4libs (1) · python-imaging (1)
- 17 CVECVSS 5.5PoC 2enterprise linux desktop (4) · enterprise linux server (4) · enterprise linux workstation (4)
- 15 CVECVSS 5.6PoC 2ubuntu linux (13) · ubuntu (1) · reportbug (1)
- 13 CVE3 critCVSS 7.4chrome (13) · google chrome (10)
- 13 CVECVSS 5.0django (4) · keystone (3) · horizon (1)
- 11 CVE1 critCVSS 6.0×5.5PoC 1rsa archer egrc (4) · documentum content server (3) · web publishers (2)
- 10 CVE2 critCVSS 5.9PoC 1service manager (4) · operations agent (1) · nonstop netbatch (1)
- 9 CVE8 critCVSS 9.3×6.0KEV 1adobe air sdk (8) · flash player (8) · adobe air (8)
- 9 CVE2 critCVSS 5.7PoC 2subversion (3) · openoffice (2) · httpclient (1)
- 9 CVECVSS 6.2safari (7) · xcode (2)
- 9 CVECVSS 5.2NEWopenssl (9)
- 9 CVECVSS 5.2NEWopenssl (9)
- 7 CVECVSS 4.7keystone (3) · image registry and delivery service \(glance\) (1) · horizon (1)
- 6 CVECVSS 6.3NEWKEV 1android-msm (6)
- 6 CVECVSS 5.5Nuclei 6wordpress (6)
- 6 CVECVSS 6.8PoC 1debian gnu/linux (6)
- 5 CVE2 critCVSS 8.1NEWsailor 6222 vhf (2) · ailor 6110 mini-c gmdss (2) · aviator 700d (2)
- 5 CVECVSS 5.4×5.0wonderware information server (5)
- 5 CVECVSS 6.8PoC 2linux kernel (5)
- 5 CVECVSS 4.8NEWPoC 1pyplate (5)
- 5 CVECVSS 5.4NEW×5.0wonderware information server portal (5)
- 5 CVECVSS 5.0PoC 2wireshark (5)
- 5 CVECVSS 5.0NEWPoC 2wireshark network protocol analyzer (5)
- 4 CVE2 critCVSS 8.5open source security information management (4)
- 4 CVECVSS 4.9django (4)
- 4 CVECVSS 6.5NEWPoC 4sphider (4)
- 4 CVE2 critCVSS 6.7NEWsplunk (4)
- 4 CVECVSS 6.7NEWPoC 3teampass (4)
- 4 CVECVSS 6.5NEWPoC 4zpanel (4)
- 3 CVECVSS 4.9×3.0PoC 1subversion (2) · httpasyncclient (1) · httpclient (1)
- 3 CVECVSS 4.3×3.0PoC 1timthumb (3)
- 3 CVECVSS 6.0NEWNuclei 3PoC 3disqus comment system (3)
- 3 CVECVSS 5.4NEWlittle kernel bootloader (3)
- 3 CVECVSS 5.9NEWmageia (3)
- 3 CVECVSS 6.2PoC 1axis:axis (1) · org.apache.axis:axis (1) · org.apache.httpcomponents:httpclient (1)
- 3 CVECVSS 5.1PoC 1mediawiki (3)
- 3 CVECVSS 8.0kerberos 5 (3)
- 3 CVECVSS 5.8php (3)
- 3 CVECVSS 6.1NEWPoC 3status2k (3)
- 3 CVECVSS 4.6centos (3)
- 3 CVECVSS 4.6xen (3)
- 3 CVE1 critCVSS 5.7NEWPoC 3sip-t38g (3)
- 2 CVECVSS 7.0NEWNuclei 2all-video-gallery (1) · all video gallery plugin (1)
- 2 CVECVSS 7.5NEWbiblio autocomplete (2)
- 2 CVECVSS 5.7PoC 1blackberry enterprise service (1) · blackberry os (1) · enterprise server (1)
- 2 CVECVSS 7.5cacti (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | ibm | 49 | · | · | · | PoC 3 | websphere application server (7) · infosphere master data management server for product information management (5) · infosphere master data management (5) | — | |
| 2 | microsoft | 38 | 25 | 1 | · | KEV 1PoC 1 | internet explorer (26) · windows 7 (5) · windows 7 service pack 1 (5) | — | |
| 3 | cisco | 21 | 1 | · | · | cloud portal (4) · transport gateway installation software (3) · unified communications manager (2) | — | ||
| 4 | opensuse | 20 | · | · | · | PoC 2 | opensuse (20) | — | |
| 5 | debian | 17 | · | · | 4 | Nuclei 4 | debian linux (14) · kde4libs (1) · python-imaging (1) | — | |
| 6 | redhat | 17 | · | · | · | PoC 2 | enterprise linux desktop (4) · enterprise linux server (4) · enterprise linux workstation (4) | — | |
| 7 | canonical | 15 | · | · | · | PoC 2 | ubuntu linux (13) · ubuntu (1) · reportbug (1) | — | |
| 8 | 13 | 3 | · | · | chrome (13) · google chrome (10) | — | |||
| 9 | pypi | 13 | · | · | · | django (4) · keystone (3) · horizon (1) | — | ||
| 10 | emc | 11 | 1 | · | · | ×5.5PoC 1 | rsa archer egrc (4) · documentum content server (3) · web publishers (2) | — | |
| 11 | hp | 10 | 2 | · | · | PoC 1 | service manager (4) · operations agent (1) · nonstop netbatch (1) | — | |
| 12 | adobe | 9 | 8 | 1 | · | ×6.0KEV 1 | adobe air sdk (8) · flash player (8) · adobe air (8) | — | |
| 13 | apache | 9 | 2 | · | · | PoC 2 | subversion (3) · openoffice (2) · httpclient (1) | — | |
| 14 | apple | 9 | · | · | · | safari (7) · xcode (2) | — | ||
| 15 | openssl | 9 | · | · | · | NEW | openssl (9) | — | |
| 16 | openssl software foundation | 9 | · | · | · | NEW | openssl (9) | — | |
| 17 | openstack | 7 | · | · | · | keystone (3) · image registry and delivery service \(glance\) (1) · horizon (1) | — | ||
| 18 | codeaurora | 6 | · | 1 | · | NEWKEV 1 | android-msm (6) | — | |
| 19 | wordpress | 6 | · | · | 6 | Nuclei 6 | wordpress (6) | — | |
| 20 | сообщество свободного программного обеспечения | 6 | · | · | · | PoC 1 | debian gnu/linux (6) | — | |
| 21 | cobham | 5 | 2 | · | · | NEW | sailor 6222 vhf (2) · ailor 6110 mini-c gmdss (2) · aviator 700d (2) | — | |
| 22 | invensys | 5 | · | · | · | ×5.0 | wonderware information server (5) | — | |
| 23 | linux | 5 | · | · | · | PoC 2 | linux kernel (5) | — | |
| 24 | pyplate | 5 | · | · | · | NEWPoC 1 | pyplate (5) | — | |
| 25 | schneider electric | 5 | · | · | · | NEW×5.0 | wonderware information server portal (5) | — | |
| 26 | wireshark | 5 | · | · | · | PoC 2 | wireshark (5) | — | |
| 27 | wireshark team | 5 | · | · | · | NEWPoC 2 | wireshark network protocol analyzer (5) | — | |
| 28 | alienvault | 4 | 2 | · | · | open source security information management (4) | — | ||
| 29 | djangoproject | 4 | · | · | · | django (4) | — | ||
| 30 | sphider | 4 | · | · | · | NEWPoC 4 | sphider (4) | — | |
| 31 | splunk | 4 | 2 | · | · | NEW | splunk (4) | — | |
| 32 | teampass | 4 | · | · | · | NEWPoC 3 | teampass (4) | — | |
| 33 | zpanelcp | 4 | · | · | · | NEWPoC 4 | zpanel (4) | — | |
| 34 | apache software foundation | 3 | · | · | · | ×3.0PoC 1 | subversion (2) · httpasyncclient (1) · httpclient (1) | — | |
| 35 | binarymoon | 3 | · | · | · | ×3.0PoC 1 | timthumb (3) | — | |
| 36 | disqus | 3 | · | · | 3 | NEWNuclei 3PoC 3 | disqus comment system (3) | — | |
| 37 | little kernel project | 3 | · | · | · | NEW | little kernel bootloader (3) | — | |
| 38 | mageia | 3 | · | · | · | NEW | mageia (3) | — | |
| 39 | maven | 3 | · | · | · | PoC 1 | axis:axis (1) · org.apache.axis:axis (1) · org.apache.httpcomponents:httpclient (1) | — | |
| 40 | mediawiki | 3 | · | · | · | PoC 1 | mediawiki (3) | — | |
| 41 | mit | 3 | · | · | · | kerberos 5 (3) | — | ||
| 42 | php | 3 | · | · | · | php (3) | — | ||
| 43 | status2k | 3 | · | · | · | NEWPoC 3 | status2k (3) | — | |
| 44 | the centos project | 3 | · | · | · | centos (3) | — | ||
| 45 | xen | 3 | · | · | · | xen (3) | — | ||
| 46 | yealink | 3 | 1 | · | · | NEWPoC 3 | sip-t38g (3) | — | |
| 47 | all video gallery plugin project | 2 | · | · | 2 | NEWNuclei 2 | all-video-gallery (1) · all video gallery plugin (1) | — | |
| 48 | biblio autocomplete project | 2 | · | · | · | NEW | biblio autocomplete (2) | — | |
| 49 | blackberry | 2 | · | · | · | PoC 1 | blackberry enterprise service (1) · blackberry os (1) · enterprise server (1) | — | |
| 50 | cacti | 2 | · | · | · | cacti (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems105 CVE53 crit2 KEV26 vendorsCVSS 7.5opensuse (21) · debian linux (14) · ubuntu linux (13)
- Enterprise Software82 CVE2 crit19 vendorsCVSS 7.5websphere application server (7) · infosphere master data management (5) · infosphere master data management server for product information management (5)
- Web & CMS Plugins47 CVE2 crit24 vendorsCVSS 7.5wordpress (6) · subversion (5) · sphider (4)
- OSS Libraries46 CVE16 vendorsCVSS 7.5pyplate (5) · django (4) · keystone (3)
- Security Products37 CVE5 crit14 vendorsCVSS 7.6rsa archer egrc (4) · teampass (4) · documentum content server (3)
- 10 crit9 vendorsCVSS 7.5cloud portal (4) · transport gateway installation software (3) · ailor 6110 mini-c gmdss (2)
- Mobile Apps22 CVE6 crit3 vendorsCVSS 7.4chrome (13) · google chrome (10)
- Consumer Software20 CVE32 crit3 KEV10 vendorsCVSS 9.0flash player (11) · adobe air (8) · adobe air sdk (8)
- Cloud & SaaS20 CVE9 vendorsCVSS 6.8keystone (3) · horizon (1) · image registry and delivery service \(glance\) (1)
- ICS / OT / IoT12 CVE6 vendorsCVSS 8.3wonderware information server (5) · wonderware information server portal (5) · epaq-9410 substation gateway (2)
- Hardware Firmware11 CVE1 KEV5 vendorsCVSS 7.8android-msm (6) · technik microcontrol (2) · technik microcontrol firmware (2)
- Communications5 CVE1 crit3 vendorsCVSS 6.0sip-t38g (3) · innovaphone pbx (1)
- DevTools & CI4 CVE3 vendorsCVSS 6.8testlink (2) · mcollective (1)
- Databases4 CVE1 crit3 vendorsCVSS 5.8phpmyadmin (2) · rocket servergraph (1)
- AI / ML1 CVE1 vendorsCVSS 6.8ipython notebook (1)
- Unclassified12 CVE4 crit11 vendorsCVSS 7.2open port (2) · pilot below deck equipment (2) · advance-flow (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 4 | 105 | 53 | 2 | 26 | 123 | 7.5 | opensuse (21) · debian linux (14) · ubuntu linux (13) |
| Enterprise Software▸ 6 | 82 | 2 | · | 19 | 81 | 7.5 | websphere application server (7) · infosphere master data management (5) · infosphere master data management server for product information management (5) |
| Web & CMS Plugins▸ 6 | 47 | 2 | · | 24 | 30 | 7.5 | wordpress (6) · subversion (5) · sphider (4) |
| OSS Libraries▸ 6 | 46 | · | · | 16 | 26 | 7.5 | pyplate (5) · django (4) · keystone (3) |
| Security Products▸ 5 | 37 | 5 | · | 14 | 31 | 7.6 | rsa archer egrc (4) · teampass (4) · documentum content server (3) |
| Networking Infrastructure▸ 3 | 32 | 10 | · | 9 | 66 | 7.5 | cloud portal (4) · transport gateway installation software (3) · ailor 6110 mini-c gmdss (2) |
| Mobile Apps▸ 2 | 22 | 6 | · | 3 | 4 | 7.4 | chrome (13) · google chrome (10) |
| Consumer Software▸ 5 | 20 | 32 | 3 | 10 | 16 | 9.0 | flash player (11) · adobe air (8) · adobe air sdk (8) |
| Cloud & SaaS▸ 4 | 20 | · | · | 9 | 19 | 6.8 | keystone (3) · horizon (1) · image registry and delivery service \(glance\) (1) |
| ICS / OT / IoT▸ 3 | 12 | · | · | 6 | 7 | 8.3 | wonderware information server (5) · wonderware information server portal (5) · epaq-9410 substation gateway (2) |
| Hardware Firmware▸ 3 | 11 | · | 1 | 5 | 13 | 7.8 | android-msm (6) · technik microcontrol (2) · technik microcontrol firmware (2) |
| Communications▸ 2 | 5 | 1 | · | 3 | 3 | 6.0 | sip-t38g (3) · innovaphone pbx (1) |
| DevTools & CI▸ 2 | 4 | · | · | 3 | 3 | 6.8 | testlink (2) · mcollective (1) |
| Databases▸ 2 | 4 | 1 | · | 3 | 3 | 5.8 | phpmyadmin (2) · rocket servergraph (1) |
| AI / ML▸ 1 | 1 | · | · | 1 | 1 | 6.8 | ipython notebook (1) |
| Unclassified | 12 | 4 | · | 11 | 13 | 7.2 | open port (2) · pilot below deck equipment (2) · advance-flow (1) |
Weakness × Sector
Which weaknesses hit which solution categories in August 2014
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
264CWE-264119Memory Buffer Bounds79XSS89SQL Injection20Improper Input Validation200Information Exposure352CSRF22Path Traversal94Code Injection310CWE-310Enterprise Software141148187223Operating Systems132344131Consumer Software1133121221OSS Libraries1224145212Web & CMS Plugins21171021532Security Products47533332Networking Infrastructure65228212Cloud & SaaS4122211Hardware Firmware33111ICS / OT / IoT1114