month report
October 2014
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
October 2014 closed with 1,418 published CVEs. 58 criticals, oracle led volume, mostly via database server. Biggest breakout: joomla at ×8.0 their 12-month median. Top weakness class — CWE-310 (717 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
1,418
— MoM— YoY
Severity mix
58 / 133
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
2.0%
28 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4158.5
n=28
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2742
n=6
Detection gap
KEV pressure, no Nuclei coverage
October 2014 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 5microsoft25 CVE
Weakness × Vendor
What's spreading where in October 2014
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
310CWE-31079XSS20Improper Input Validation264CWE-264200Information Exposure399CWE-39989SQL Injection94Code Injection119Memory Buffer Bounds287Improper Authenticationoracle11magzter45ibm31253512redhat31267621cisco2522211212apple81553133oracle corp.maven2444213microsoft195312microsoft corp194312mariadbsuse
Most discussed CVEs — October 2014
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #2magzter45 CVE
- #13pocketmags20 CVE
- #25nobexrc11 CVE
- #31core-apps7 CVE
- #32onesolutionapps7 CVE
- #33ireadercity6 CVE
- #36pidgin5 CVE
- #37splunk5 CVE
- #41automon4 CVE
- #42bulbsecurity4 CVE
Top vendors
Ranked by distinct CVE count this period.
- 118 CVE13 critCVSS 5.4PoC 1database server (29) · java platform (25) · jre (25)
- 45 CVECVSS 5.4NEWautocar india (1) · bbc knowledge magazine (1) · bespoke (1)
- 45 CVE1 critCVSS 5.9PoC 2enterprise linux desktop supplementary (13) · enterprise linux workstation supplementary (13) · enterprise linux server supplementary (13)
- 43 CVE3 critCVSS 5.3PoC 1websphere portal (6) · qradar security information and event manager (6) · tririga application platform (5)
- 35 CVE1 critCVSS 6.5asa (8) · adaptive security appliance software (7) · unified communications manager (5)
- 34 CVE1 critCVSS 5.4PoC 2mac os x (26) · iphone os (5) · os x server (2)
- 26 CVECVSS 5.2×3.7PoC 2org.jenkins-ci.main:jenkins-core (18) · org.jvnet.hudson.plugins:monitoring (2) · org.apache.cxf:cxf-rt-frontend-jaxrs (1)
- 25 CVE14 critCVSS 8.3KEV 5PoC 5internet explorer (14) · windows server 2008 service pack 2 (5) · windows server 2008 (5)
- 22 CVECVSS 4.7×3.4mariadb (22)
- 21 CVE2 critCVSS 4.5×7.0linux enterprise desktop (20) · linux enterprise server (18) · linux enterprise software development kit (18)
- 20 CVECVSS 4.0×5.7Nuclei 1PoC 1custom search module (2) · zen (1) · bluemasters (1)
- 20 CVECVSS 4.0×8.0network data loss prevention (19) · endpoint encryption for files and folders (1) · file and removable media protection (1)
- 20 CVECVSS 5.4NEWadt aesthetic dentistry today (1) · american waterfowler (1) · classic arms \& militaria (1)
- 19 CVECVSS 4.8PoC 1nova (3) · python-gnupg (3) · requests (2)
- 18 CVECVSS 5.2PoC 2ubuntu linux (15) · ubuntu (3)
- 18 CVECVSS 5.2jenkins (18)
- 17 CVE1 critCVSS 6.2PoC 1system management homepage (4) · sprinter (4) · systems insight manager (3)
- 17 CVECVSS 3.8×4.3nova (6) · horizon (4) · cinder (3)
- 16 CVE1 critCVSS 7.0chrome (16) · chrome os (1) · v8 (1)
- 16 CVECVSS 6.1PoC 3firefox (13) · thunderbird (7) · bugzilla (3)
- 16 CVE2 critCVSS 5.8PoC 4opensuse (16) · evergreen (2)
- 15 CVECVSS 4.9Nuclei 1PoC 4debian linux (13) · apt (1) · advanced package tool (1)
- 14 CVECVSS 5.6sunos (14)
- 13 CVECVSS 6.5×3.3PoC 1junos space (7) · junos (5) · srx220 (1)
- 11 CVECVSS 5.4NEWabram radio groove\! (1) · amnesia groove (1) · asylum\! (1)
- 9 CVECVSS 5.8×3.0PoC 1web-tp3/wec_map (2) · jbartels/wec-map (2) · in2code/powermail (2)
- 9 CVECVSS 4.9PoC 7businessobjects (4) · hana (2) · businessobjects explorer (2)
- 8 CVECVSS 5.1PoC 6fedora (8)
- 8 CVECVSS 5.6×8.0PoC 1joomla\! (8)
- 7 CVE3 critCVSS 8.7flash player (3) · coldfusion (3) · air desktop runtime (2)
- 7 CVECVSS 5.4NEWaihce 2014 (1) · bowl expo 2014 (1) · digital content newfronts 2014 (1)
- 7 CVECVSS 5.4NEWaaaa discount bail (1) · ajd bail bonds (1) · aloha bail bonds (1)
- 6 CVECVSS 5.4NEW100 books (1) · a very short history of japan (1) · demon (1)
- 6 CVECVSS 5.8PoC 1linux kernel (5) · kernel (1)
- 5 CVE1 critCVSS 4.6PoC 1gentoo linux (5)
- 5 CVECVSS 5.6NEWpidgin (5)
- 5 CVECVSS 4.0NEW×5.0PoC 1splunk (5)
- 5 CVECVSS 5.6xen (5)
- 4 CVECVSS 5.0×4.0PoC 3moab (3) · torque resource manager (1)
- 4 CVECVSS 5.5PoC 1cxf (2) · http server (1) · shiro (1)
- 4 CVECVSS 5.4NEWalisha marie (1) · ledline.gr official (1) · marcus butler unofficial (1)
- 4 CVECVSS 5.8NEWPoC 2smartphone pentest framework (4)
- 4 CVE1 critCVSS 5.5NEWpyxis supplystation (4)
- 4 CVECVSS 5.0NEWdokuwiki (4)
- 4 CVECVSS 5.4NEWcoca-cola fm brasil (1) · coca-cola fm guatemala (1) · coca-cola fm honduras (1)
- 4 CVE1 critCVSS 5.7NEWPoC 4espocrm (4)
- 4 CVECVSS 5.4NEWsteyr forum (1) · biplane forum (1) · georgia packing (1)
- 4 CVE1 critCVSS 7.4PoC 1glibc (2) · eglibc (1) · gpgme (1)
- 4 CVECVSS 5.5PoC 1openssl (4)
- 4 CVECVSS 5.5NEWPoC 1openssl (4)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 118 | 13 | · | · | PoC 1 | database server (29) · java platform (25) · jre (25) | — | |
| 2 | magzter | 45 | · | · | · | NEW | autocar india (1) · bbc knowledge magazine (1) · bespoke (1) | — | |
| 3 | redhat | 45 | 1 | · | · | PoC 2 | enterprise linux desktop supplementary (13) · enterprise linux workstation supplementary (13) · enterprise linux server supplementary (13) | — | |
| 4 | ibm | 43 | 3 | · | · | PoC 1 | websphere portal (6) · qradar security information and event manager (6) · tririga application platform (5) | — | |
| 5 | cisco | 35 | 1 | · | · | asa (8) · adaptive security appliance software (7) · unified communications manager (5) | — | ||
| 6 | apple | 34 | 1 | · | · | PoC 2 | mac os x (26) · iphone os (5) · os x server (2) | — | |
| 7 | maven | 26 | · | · | · | ×3.7PoC 2 | org.jenkins-ci.main:jenkins-core (18) · org.jvnet.hudson.plugins:monitoring (2) · org.apache.cxf:cxf-rt-frontend-jaxrs (1) | — | |
| 8 | microsoft | 25 | 14 | 5 | · | KEV 5PoC 5 | internet explorer (14) · windows server 2008 service pack 2 (5) · windows server 2008 (5) | — | |
| 9 | mariadb | 22 | · | · | · | ×3.4 | mariadb (22) | — | |
| 10 | suse | 21 | 2 | · | · | ×7.0 | linux enterprise desktop (20) · linux enterprise server (18) · linux enterprise software development kit (18) | — | |
| 11 | drupal | 20 | · | · | 1 | ×5.7Nuclei 1PoC 1 | custom search module (2) · zen (1) · bluemasters (1) | — | |
| 12 | mcafee | 20 | · | · | · | ×8.0 | network data loss prevention (19) · endpoint encryption for files and folders (1) · file and removable media protection (1) | — | |
| 13 | pocketmags | 20 | · | · | · | NEW | adt aesthetic dentistry today (1) · american waterfowler (1) · classic arms \& militaria (1) | — | |
| 14 | pypi | 19 | · | · | · | PoC 1 | nova (3) · python-gnupg (3) · requests (2) | — | |
| 15 | canonical | 18 | · | · | · | PoC 2 | ubuntu linux (15) · ubuntu (3) | — | |
| 16 | jenkins | 18 | · | · | · | jenkins (18) | — | ||
| 17 | hp | 17 | 1 | · | · | PoC 1 | system management homepage (4) · sprinter (4) · systems insight manager (3) | — | |
| 18 | openstack | 17 | · | · | · | ×4.3 | nova (6) · horizon (4) · cinder (3) | — | |
| 19 | 16 | 1 | · | · | chrome (16) · chrome os (1) · v8 (1) | — | |||
| 20 | mozilla | 16 | · | · | · | PoC 3 | firefox (13) · thunderbird (7) · bugzilla (3) | — | |
| 21 | opensuse | 16 | 2 | · | · | PoC 4 | opensuse (16) · evergreen (2) | — | |
| 22 | debian | 15 | · | · | 1 | Nuclei 1PoC 4 | debian linux (13) · apt (1) · advanced package tool (1) | — | |
| 23 | sun | 14 | · | · | · | sunos (14) | — | ||
| 24 | juniper | 13 | · | · | · | ×3.3PoC 1 | junos space (7) · junos (5) · srx220 (1) | — | |
| 25 | nobexrc | 11 | · | · | · | NEW | abram radio groove\! (1) · amnesia groove (1) · asylum\! (1) | — | |
| 26 | packagist | 9 | · | · | · | ×3.0PoC 1 | web-tp3/wec_map (2) · jbartels/wec-map (2) · in2code/powermail (2) | — | |
| 27 | sap | 9 | · | · | · | PoC 7 | businessobjects (4) · hana (2) · businessobjects explorer (2) | — | |
| 28 | fedoraproject | 8 | · | · | · | PoC 6 | fedora (8) | — | |
| 29 | joomla | 8 | · | · | · | ×8.0PoC 1 | joomla\! (8) | — | |
| 30 | adobe | 7 | 3 | · | · | flash player (3) · coldfusion (3) · air desktop runtime (2) | — | ||
| 31 | core-apps | 7 | · | · | · | NEW | aihce 2014 (1) · bowl expo 2014 (1) · digital content newfronts 2014 (1) | — | |
| 32 | onesolutionapps | 7 | · | · | · | NEW | aaaa discount bail (1) · ajd bail bonds (1) · aloha bail bonds (1) | — | |
| 33 | ireadercity | 6 | · | · | · | NEW | 100 books (1) · a very short history of japan (1) · demon (1) | — | |
| 34 | linux | 6 | · | · | · | PoC 1 | linux kernel (5) · kernel (1) | — | |
| 35 | gentoo foundation inc. | 5 | 1 | · | · | PoC 1 | gentoo linux (5) | — | |
| 36 | pidgin | 5 | · | · | · | NEW | pidgin (5) | — | |
| 37 | splunk | 5 | · | · | · | NEW×5.0PoC 1 | splunk (5) | — | |
| 38 | xen | 5 | · | · | · | xen (5) | — | ||
| 39 | adaptivecomputing | 4 | · | · | · | ×4.0PoC 3 | moab (3) · torque resource manager (1) | — | |
| 40 | apache | 4 | · | · | · | PoC 1 | cxf (2) · http server (1) · shiro (1) | — | |
| 41 | automon | 4 | · | · | · | NEW | alisha marie (1) · ledline.gr official (1) · marcus butler unofficial (1) | — | |
| 42 | bulbsecurity | 4 | · | · | · | NEWPoC 2 | smartphone pentest framework (4) | — | |
| 43 | carefusion | 4 | 1 | · | · | NEW | pyxis supplystation (4) | — | |
| 44 | dokuwiki | 4 | · | · | · | NEW | dokuwiki (4) | — | |
| 45 | enyetech | 4 | · | · | · | NEW | coca-cola fm brasil (1) · coca-cola fm guatemala (1) · coca-cola fm honduras (1) | — | |
| 46 | espocrm | 4 | 1 | · | · | NEWPoC 4 | espocrm (4) | — | |
| 47 | gcspublishing | 4 | · | · | · | NEW | steyr forum (1) · biplane forum (1) · georgia packing (1) | — | |
| 48 | gnu | 4 | 1 | · | · | PoC 1 | glibc (2) · eglibc (1) · gpgme (1) | — | |
| 49 | openssl | 4 | · | · | · | PoC 1 | openssl (4) | — | |
| 50 | openssl software foundation | 4 | · | · | · | NEWPoC 1 | openssl (4) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins162 CVE1 crit109 vendorsCVSS 10.0joomla\! (8) · cxf (3) · custom search module (2)
- Operating Systems152 CVE58 crit73 KEV28 vendorsCVSS 8.3linux enterprise desktop (20) · linux enterprise server (18) · linux enterprise software development kit (18)
- Consumer Software134 CVE14 crit34 vendorsCVSS 7.5abram radio groove\! (1) · adt aesthetic dentistry today (1) · allomani weblinks (1)
- Enterprise Software129 CVE15 crit36 vendorsCVSS 6.1qradar security information and event manager (6) · websphere portal (6) · tririga application platform (5)
- Databases122 CVE24 crit7 vendorsCVSS 5.3database server (29) · java platform (25) · jre (25)
- OSS Libraries95 CVE2 crit32 vendorsCVSS 7.5openssl (8) · php (6) · python-gnupg (3)
- Mobile Apps67 CVE3 crit14 vendorsCVSS 6.6mac os x (26) · iphone os (5) · os x server (2)
- 5 crit1 KEV14 vendorsCVSS 7.0asa (8) · adaptive security appliance software (7) · junos space (7)
- Security Products48 CVE22 crit15 vendorsCVSS 7.3network data loss prevention (19) · endpoint encryption for files and folders (1) · file and removable media protection (1)
- Cloud & SaaS44 CVE15 vendorsCVSS 5.8nova (6) · horizon (4) · cinder (3)
- DevTools & CI28 CVE1 crit8 vendorsCVSS 7.1jenkins (18) · monitoring plugin (2) · electriccommander (1)
- Communications24 CVE2 crit19 vendorsCVSS 7.7pidgin (5) · text chat rooms (2) · diychatroom (1)
- ICS / OT / IoT10 CVE45 crit8 vendorsCVSS 9.7pyxis supplystation (4)
- Hardware Firmware3 CVE6 crit2 vendorsCVSS 10.0gopro hero (2) · gopro hero firmware (2)
- Unclassified287 CVE1 crit257 vendorsCVSS 5.4banana dance (3) · dmmjobcontrol (2) · twitget (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 6 | 162 | 1 | · | 109 | 138 | 10.0 | joomla\! (8) · cxf (3) · custom search module (2) |
| Operating Systems▸ 4 | 152 | 58 | 73 | 28 | 97 | 8.3 | linux enterprise desktop (20) · linux enterprise server (18) · linux enterprise software development kit (18) |
| Consumer Software▸ 5 | 134 | 14 | · | 34 | 125 | 7.5 | abram radio groove\! (1) · adt aesthetic dentistry today (1) · allomani weblinks (1) |
| Enterprise Software▸ 7 | 129 | 15 | · | 36 | 95 | 6.1 | qradar security information and event manager (6) · websphere portal (6) · tririga application platform (5) |
| Databases▸ 3 | 122 | 24 | · | 7 | 26 | 5.3 | database server (29) · java platform (25) · jre (25) |
| OSS Libraries▸ 8 | 95 | 2 | · | 32 | 67 | 7.5 | openssl (8) · php (6) · python-gnupg (3) |
| Mobile Apps▸ 3 | 67 | 3 | · | 14 | 29 | 6.6 | mac os x (26) · iphone os (5) · os x server (2) |
| Networking Infrastructure▸ 4 | 65 | 5 | 1 | 14 | 54 | 7.0 | asa (8) · adaptive security appliance software (7) · junos space (7) |
| Security Products▸ 6 | 48 | 22 | · | 15 | 39 | 7.3 | network data loss prevention (19) · endpoint encryption for files and folders (1) · file and removable media protection (1) |
| Cloud & SaaS▸ 4 | 44 | · | · | 15 | 32 | 5.8 | nova (6) · horizon (4) · cinder (3) |
| DevTools & CI▸ 3 | 28 | 1 | · | 8 | 9 | 7.1 | jenkins (18) · monitoring plugin (2) · electriccommander (1) |
| Communications▸ 4 | 24 | 2 | · | 19 | 17 | 7.7 | pidgin (5) · text chat rooms (2) · diychatroom (1) |
| ICS / OT / IoT▸ 3 | 10 | 45 | · | 8 | 51 | 9.7 | pyxis supplystation (4) |
| Hardware Firmware▸ 1 | 3 | 6 | · | 2 | 4 | 10.0 | gopro hero (2) · gopro hero firmware (2) |
| Unclassified | 287 | 1 | · | 257 | 286 | 5.4 | banana dance (3) · dmmjobcontrol (2) · twitget (2) |
Weakness × Sector
Which weaknesses hit which solution categories in October 2014
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
310CWE-31079XSS20Improper Input Validation264CWE-264200Information Exposure399CWE-39989SQL Injection94Code Injection119Memory Buffer Bounds287Improper AuthenticationConsumer Software195310933329Web & CMS Plugins1475924311435Operating Systems1281318161316105Enterprise Software3225107101955OSS Libraries381110910112745Networking Infrastructure69632133414Databases1421Cloud & SaaS28644612Security Products81335101212Communications1711215