month report
September 2014
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
September 2014 closed with 1,156 published CVEs. 78 criticals, apple led volume, mostly via iphone os. Biggest breakout: adobe at ×5.3 their 12-month median. Top weakness class — CWE-310 (719 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
1,156
— MoM— YoY
Severity mix
78 / 62
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.0%
11 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4183.3
n=11
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2693
n=4
Weakness × Vendor
What's spreading where in September 2014
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
310CWE-310119Memory Buffer Bounds79XSS20Improper Input Validation264CWE-264200Information Exposure399CWE-39994Code Injection89SQL Injection352CSRFapple315113471microsoft13611211ibm117168214microsoft corp361111cisco132841pypi144434plone44434adobe13221adobe systems inc.13121linux9115opensuse32playscape13
Most discussed CVEs — September 2014
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #6plone22 CVE
- #10playscape13 CVE
- #12wireshark team12 CVE
- #17runtastic7 CVE
- #19gcspublishing6 CVE
- #21ilearnwith6 CVE
- #23withhive6 CVE
- #29animoca4 CVE
- #32gameloft4 CVE
- #34nonghyup4 CVE
Top vendors
Ranked by distinct CVE count this period.
- 65 CVE10 critCVSS 6.1KEV 3Nuclei 1PoC 2iphone os (45) · mac os x (41) · tvos (30)
- 44 CVE37 critCVSS 8.3PoC 1internet explorer (36) · lync server (3) · microsoft lync server (3)
- 43 CVE4 critCVSS 7.9KEV 2Nuclei 1PoC 2initiate master data service (7) · rational clearcase (6) · qradar security information and event manager (5)
- 23 CVECVSS 6.2PoC 1ios xr (7) · ios xe (7) · ios (6)
- 23 CVE1 critCVSS 5.5PoC 1plone (22) · zope2 (3) · portage (1)
- 22 CVECVSS 5.3NEWplone (22)
- 21 CVE17 critCVSS 9.4×5.3PoC 1flash player (12) · adobe air (12) · adobe air sdk (12)
- 18 CVECVSS 6.3PoC 7linux kernel (18)
- 14 CVE5 critCVSS 6.1KEV 2Nuclei 1PoC 6opensuse (13) · evergreen (5)
- 13 CVECVSS 5.4NEWbouncy bill (1) · bouncy bill easter tales (1) · bouncy bill holloween (1)
- 12 CVECVSS 5.0wireshark (12)
- 12 CVECVSS 5.0NEWwireshark network protocol analyzer (12)
- 11 CVE2 critCVSS 7.0KEV 2Nuclei 1PoC 4ubuntu linux (9) · ubuntu (1) · acpi-support (1)
- 11 CVE2 critCVSS 7.2KEV 2Nuclei 1PoC 3enterprise linux server aus (4) · enterprise linux desktop (3) · enterprise linux workstation (3)
- 9 CVE5 critCVSS 8.1PoC 1firefox (9) · thunderbird (8) · firefox esr (4)
- 8 CVECVSS 6.8advantech webaccess (8)
- 7 CVECVSS 5.4NEWruntastic heart rate (1) · runtastic me (1) · runtastic mountain bike (1)
- 6 CVE2 critCVSS 7.6KEV 2Nuclei 1PoC 2debian linux (5) · advanced package tool (1)
- 6 CVECVSS 5.4NEWbeekeeping forum (1) · bersa forum (1) · goat forum (1)
- 6 CVE5 critCVSS 9.7KEV 3Nuclei 1PoC 6bash (6)
- 6 CVECVSS 5.4NEWalphabet \& spelling kids games (1) · animals\! kids preschool games (1) · counting \& addition kids games (1)
- 6 CVE3 critCVSS 7.9×3.0KEV 2Nuclei 1PoC 3solaris (4) · linux (2)
- 6 CVECVSS 5.4NEW9 innings\ (1) · actionpuzzlefamily for kakao (1) · homerun battle 2 (1)
- 6 CVE2 critCVSS 7.4PoC 2debian gnu/linux (4) · gnu bash (2) · libvncserver (1)
- 5 CVECVSS 4.8poi (2) · commons-httpclient (1) · tomcat (1)
- 5 CVECVSS 6.7chrome (3) · google chrome (2) · android browser (1)
- 5 CVECVSS 4.9PoC 1org.apache.poi:poi (2) · org.apache.httpcomponents:httpclient (1) · org.apache.tomcat:tomcat (1)
- 5 CVE3 critCVSS 7.8KEV 2Nuclei 1PoC 3linux enterprise server (3) · studio onsite (2) · linux enterprise desktop (2)
- 4 CVECVSS 5.4NEWbunny run (1) · fashion style (1) · star girl (1)
- 4 CVECVSS 7.2PoC 2n300 (2) · n300 firmware (2) · n900 firmware (1)
- 4 CVECVSS 2.7dbus (4)
- 4 CVECVSS 5.4NEWbrothers in arms 2 free\+ (1) · gameloft library (1) · ice age village (1)
- 4 CVECVSS 5.3junos pulse secure access service (3) · junos pulse access control service (1) · junos pulse client (1)
- 4 CVECVSS 5.4NEWsmart (1) · smart calculator (1) · smart card (1)
- 4 CVE3 critCVSS 9.0KEV 2Nuclei 1PoC 3open enterprise server (2) · zenworks configuration management (2) · suse linux enterprise server (1)
- 4 CVECVSS 5.4NEWantivirus free (1) · easy finder \& anti-theft (1) · nq mobile security \& antivirus (1)
- 4 CVECVSS 5.6NEWclearscada (3) · scada expert clearscada (3) · vampset (1)
- 4 CVECVSS 5.5scada expert clearscada (3) · vampset (1)
- 4 CVE3 critCVSS 9.6NEWKEV 3Nuclei 1PoC 4альт линукс спт (4)
- 3 CVECVSS 5.9NEWclearscada (3)
- 3 CVECVSS 5.4NEWaapld (1) · anaheim library 2go\! (1) · deschutes public mobilelibrary (1)
- 3 CVECVSS 2.9NEWd-bus (3)
- 3 CVECVSS 5.4NEWmaleficent free fall (1) · where\'s my perry\? free (1) · where\'s my water\? free (1)
- 3 CVECVSS 6.9NEWintegraxor (3) · integraxor scada server (3)
- 3 CVECVSS 2.9gentoo linux (3)
- 3 CVECVSS 4.3NEWPoC 1c-cda (3)
- 3 CVECVSS 5.8NEWPoC 1ea6500 (3) · ea6500 firmware (3)
- 3 CVE2 critCVSS 8.2NEWKEV 2Nuclei 1PoC 2mageia (3)
- 3 CVECVSS 5.4NEWanger of stick 3 (1) · mini pets (1) · rail rush (1)
- 3 CVECVSS 6.7crystal reports (2) · netweaver (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | apple | 65 | 10 | 3 | 1 | KEV 3Nuclei 1PoC 2 | iphone os (45) · mac os x (41) · tvos (30) | — | |
| 2 | microsoft | 44 | 37 | · | · | PoC 1 | internet explorer (36) · lync server (3) · microsoft lync server (3) | — | |
| 3 | ibm | 43 | 4 | 2 | 1 | KEV 2Nuclei 1PoC 2 | initiate master data service (7) · rational clearcase (6) · qradar security information and event manager (5) | — | |
| 4 | cisco | 23 | · | · | · | PoC 1 | ios xr (7) · ios xe (7) · ios (6) | — | |
| 5 | pypi | 23 | 1 | · | · | PoC 1 | plone (22) · zope2 (3) · portage (1) | — | |
| 6 | plone | 22 | · | · | · | NEW | plone (22) | — | |
| 7 | adobe | 21 | 17 | · | · | ×5.3PoC 1 | flash player (12) · adobe air (12) · adobe air sdk (12) | — | |
| 8 | linux | 18 | · | · | · | PoC 7 | linux kernel (18) | — | |
| 9 | opensuse | 14 | 5 | 2 | 1 | KEV 2Nuclei 1PoC 6 | opensuse (13) · evergreen (5) | — | |
| 10 | playscape | 13 | · | · | · | NEW | bouncy bill (1) · bouncy bill easter tales (1) · bouncy bill holloween (1) | — | |
| 11 | wireshark | 12 | · | · | · | wireshark (12) | — | ||
| 12 | wireshark team | 12 | · | · | · | NEW | wireshark network protocol analyzer (12) | — | |
| 13 | canonical | 11 | 2 | 2 | 1 | KEV 2Nuclei 1PoC 4 | ubuntu linux (9) · ubuntu (1) · acpi-support (1) | — | |
| 14 | redhat | 11 | 2 | 2 | 1 | KEV 2Nuclei 1PoC 3 | enterprise linux server aus (4) · enterprise linux desktop (3) · enterprise linux workstation (3) | — | |
| 15 | mozilla | 9 | 5 | · | · | PoC 1 | firefox (9) · thunderbird (8) · firefox esr (4) | — | |
| 16 | advantech | 8 | · | · | · | advantech webaccess (8) | — | ||
| 17 | runtastic | 7 | · | · | · | NEW | runtastic heart rate (1) · runtastic me (1) · runtastic mountain bike (1) | — | |
| 18 | debian | 6 | 2 | 2 | 1 | KEV 2Nuclei 1PoC 2 | debian linux (5) · advanced package tool (1) | — | |
| 19 | gcspublishing | 6 | · | · | · | NEW | beekeeping forum (1) · bersa forum (1) · goat forum (1) | — | |
| 20 | gnu | 6 | 5 | 3 | 1 | KEV 3Nuclei 1PoC 6 | bash (6) | — | |
| 21 | ilearnwith | 6 | · | · | · | NEW | alphabet \& spelling kids games (1) · animals\! kids preschool games (1) · counting \& addition kids games (1) | — | |
| 22 | oracle | 6 | 3 | 2 | 1 | ×3.0KEV 2Nuclei 1PoC 3 | solaris (4) · linux (2) | — | |
| 23 | withhive | 6 | · | · | · | NEW | 9 innings\ (1) · actionpuzzlefamily for kakao (1) · homerun battle 2 (1) | — | |
| 24 | сообщество свободного программного обеспечения | 6 | 2 | · | · | PoC 2 | debian gnu/linux (4) · gnu bash (2) · libvncserver (1) | — | |
| 25 | apache | 5 | · | · | · | poi (2) · commons-httpclient (1) · tomcat (1) | — | ||
| 26 | 5 | · | · | · | chrome (3) · google chrome (2) · android browser (1) | — | |||
| 27 | maven | 5 | · | · | · | PoC 1 | org.apache.poi:poi (2) · org.apache.httpcomponents:httpclient (1) · org.apache.tomcat:tomcat (1) | — | |
| 28 | suse | 5 | 3 | 2 | 1 | KEV 2Nuclei 1PoC 3 | linux enterprise server (3) · studio onsite (2) · linux enterprise desktop (2) | — | |
| 29 | animoca | 4 | · | · | · | NEW | bunny run (1) · fashion style (1) · star girl (1) | — | |
| 30 | belkin | 4 | · | · | · | PoC 2 | n300 (2) · n300 firmware (2) · n900 firmware (1) | — | |
| 31 | freedesktop | 4 | · | · | · | dbus (4) | — | ||
| 32 | gameloft | 4 | · | · | · | NEW | brothers in arms 2 free\+ (1) · gameloft library (1) · ice age village (1) | — | |
| 33 | juniper | 4 | · | · | · | junos pulse secure access service (3) · junos pulse access control service (1) · junos pulse client (1) | — | ||
| 34 | nonghyup | 4 | · | · | · | NEW | smart (1) · smart calculator (1) · smart card (1) | — | |
| 35 | novell | 4 | 3 | 2 | 1 | KEV 2Nuclei 1PoC 3 | open enterprise server (2) · zenworks configuration management (2) · suse linux enterprise server (1) | — | |
| 36 | nq | 4 | · | · | · | NEW | antivirus free (1) · easy finder \& anti-theft (1) · nq mobile security \& antivirus (1) | — | |
| 37 | schneider electric | 4 | · | · | · | NEW | clearscada (3) · scada expert clearscada (3) · vampset (1) | — | |
| 38 | schneider-electric | 4 | · | · | · | scada expert clearscada (3) · vampset (1) | — | ||
| 39 | ао «ивк» | 4 | 3 | 3 | 1 | NEWKEV 3Nuclei 1PoC 4 | альт линукс спт (4) | — | |
| 40 | aveva | 3 | · | · | · | NEW | clearscada (3) | — | |
| 41 | boopsie | 3 | · | · | · | NEW | aapld (1) · anaheim library 2go\! (1) · deschutes public mobilelibrary (1) | — | |
| 42 | d-bus project | 3 | · | · | · | NEW | d-bus (3) | — | |
| 43 | disney | 3 | · | · | · | NEW | maleficent free fall (1) · where\'s my perry\? free (1) · where\'s my water\? free (1) | — | |
| 44 | ecava | 3 | · | · | · | NEW | integraxor (3) · integraxor scada server (3) | — | |
| 45 | gentoo foundation inc. | 3 | · | · | · | gentoo linux (3) | — | ||
| 46 | hl7 | 3 | · | · | · | NEWPoC 1 | c-cda (3) | — | |
| 47 | linksys | 3 | · | · | · | NEWPoC 1 | ea6500 (3) · ea6500 firmware (3) | — | |
| 48 | mageia | 3 | 2 | 2 | 1 | NEWKEV 2Nuclei 1PoC 2 | mageia (3) | — | |
| 49 | miniclip | 3 | · | · | · | NEW | anger of stick 3 (1) · mini pets (1) · rail rush (1) | — | |
| 50 | sap | 3 | · | · | · | crystal reports (2) · netweaver (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Consumer Software124 CVE80 crit62 vendorsCVSS 9.0africa memory (1) · alien war survivors (1) · alphabet \& spelling kids games (1)
- Web & CMS Plugins107 CVE76 vendorsCVSS 5.7plone (22) · poi (2) · tomcat (2)
- Mobile Apps104 CVE18 crit5 KEV26 vendorsCVSS 6.1iphone os (45) · mac os x (41) · tvos (30)
- Operating Systems98 CVE134 crit51 KEV24 vendorsCVSS 8.3linux kernel (18) · opensuse (13) · ubuntu linux (9)
- Enterprise Software81 CVE87 crit44 KEV23 vendorsCVSS 7.7initiate master data service (7) · rational clearcase (6) · qradar security information and event manager (5)
- OSS Libraries57 CVE6 crit3 KEV21 vendorsCVSS 6.1plone (22) · zope2 (3) · portage (1)
- 2 crit2 KEV19 vendorsCVSS 6.1ios xe (7) · ios xr (7) · ios (6)
- Security Products36 CVE40 crit40 KEV21 vendorsCVSS 9.8wireshark (12) · wireshark network protocol analyzer (12)
- Cloud & SaaS26 CVE6 crit6 KEV18 vendorsCVSS 7.39 innings\ (1) · actionpuzzlefamily for kakao (1) · christian dating cafe (1)
- Communications24 CVE20 vendorsCVSS 5.4boyahoy - gay chat (1) · chat flirt \& dating heart jaumo (1) · chatbox - chat rooms (1)
- ICS / OT / IoT17 CVE5 vendorsCVSS 6.3advantech webaccess (8) · scada expert clearscada (6) · clearscada (3)
- Hardware Firmware9 CVE2 crit2 KEV7 vendorsCVSS 7.4qts (2) · nespresso (1) · openfiler (1)
- Databases8 CVE3 crit2 KEV4 vendorsCVSS 7.4solaris (5) · linux (2) · ibm storwize v5000 (1)
- DevTools & CI8 CVE6 vendorsCVSS 6.8c-cda (3) · bcron exec (1) · xampp (1)
- AI / ML1 CVE1 vendorsCVSS 5.4eversnap private photo album (1)
- Unclassified254 CVE238 vendorsCVSS 5.4clearscada (3) · kmart (2) · utah jazz (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Consumer Software▸ 5 | 124 | 80 | · | 62 | 110 | 9.0 | africa memory (1) · alien war survivors (1) · alphabet \& spelling kids games (1) |
| Web & CMS Plugins▸ 6 | 107 | · | · | 76 | 87 | 5.7 | plone (22) · poi (2) · tomcat (2) |
| Mobile Apps▸ 3 | 104 | 18 | 5 | 26 | 43 | 6.1 | iphone os (45) · mac os x (41) · tvos (30) |
| Operating Systems▸ 3 | 98 | 134 | 51 | 24 | 104 | 8.3 | linux kernel (18) · opensuse (13) · ubuntu linux (9) |
| Enterprise Software▸ 7 | 81 | 87 | 44 | 23 | 121 | 7.7 | initiate master data service (7) · rational clearcase (6) · qradar security information and event manager (5) |
| OSS Libraries▸ 6 | 57 | 6 | 3 | 21 | 27 | 6.1 | plone (22) · zope2 (3) · portage (1) |
| Networking Infrastructure▸ 5 | 51 | 2 | 2 | 19 | 56 | 6.1 | ios xe (7) · ios xr (7) · ios (6) |
| Security Products▸ 5 | 36 | 40 | 40 | 21 | 44 | 9.8 | wireshark (12) · wireshark network protocol analyzer (12) |
| Cloud & SaaS▸ 4 | 26 | 6 | 6 | 18 | 27 | 7.3 | 9 innings\ (1) · actionpuzzlefamily for kakao (1) · christian dating cafe (1) |
| Communications▸ 4 | 24 | · | · | 20 | 36 | 5.4 | boyahoy - gay chat (1) · chat flirt \& dating heart jaumo (1) · chatbox - chat rooms (1) |
| ICS / OT / IoT▸ 2 | 17 | · | · | 5 | 10 | 6.3 | advantech webaccess (8) · scada expert clearscada (6) · clearscada (3) |
| Hardware Firmware▸ 2 | 9 | 2 | 2 | 7 | 9 | 7.4 | qts (2) · nespresso (1) · openfiler (1) |
| Databases▸ 2 | 8 | 3 | 2 | 4 | 4 | 7.4 | solaris (5) · linux (2) · ibm storwize v5000 (1) |
| DevTools & CI▸ 3 | 8 | · | · | 6 | 7 | 6.8 | c-cda (3) · bcron exec (1) · xampp (1) |
| AI / ML | 1 | · | · | 1 | 1 | 5.4 | eversnap private photo album (1) |
| Unclassified | 254 | · | · | 238 | 250 | 5.4 | clearscada (3) · kmart (2) · utah jazz (2) |
Weakness × Sector
Which weaknesses hit which solution categories in September 2014
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
310CWE-310119Memory Buffer Bounds79XSS20Improper Input Validation264CWE-264200Information Exposure399CWE-39994Code Injection89SQL Injection352CSRFConsumer Software22154523121Web & CMS Plugins12621175373Operating Systems53141697911Enterprise Software252161971344OSS Libraries20155184662Networking Infrastructure31091321914Mobile Apps452Communications30352Security Products21614231Cloud & SaaS29112