month report
November 2014
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
November 2014 closed with 505 published CVEs. 56 criticals, debian led volume, mostly via debian linux. Biggest breakout: oracle at ×10.0 their 12-month median. Top weakness class — CWE-79 (60 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
505
— MoM— YoY
Severity mix
56 / 123
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
5.3%
27 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4118.9
n=27
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2715
n=4
Weakness × Vendor
What's spreading where in November 2014
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — November 2014
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #27compal broadband networks5 CVE
- #33go4 CVE
- #34zend4 CVE
- #35arris3 CVE
- #37check point software technologies ltd.3 CVE
- #39gogits3 CVE
- #41mageia project3 CVE
- #48zte3 CVE
- #49accuenergy2 CVE
- #53directwebremoting2 CVE
Top vendors
Ranked by distinct CVE count this period.
- 36 CVECVSS 5.6×3.0Nuclei 4PoC 3debian linux (32) · advanced package tool (4)
- 34 CVECVSS 5.7PoC 4ubuntu linux (33) · ubuntu (1)
- 33 CVE16 critCVSS 7.7KEV 3PoC 3internet explorer (17) · windows 7 (8) · windows server 2008 (8)
- 32 CVE1 critCVSS 5.1PoC 7red hat enterprise linux (9) · enterprise linux desktop (8) · enterprise linux workstation (8)
- 28 CVECVSS 5.5PoC 10opensuse (20) · evergreen (9)
- 27 CVECVSS 6.8PoC 1qemu (27)
- 24 CVECVSS 5.5PoC 5linux kernel (24)
- 23 CVECVSS 4.4security identity manager (6) · qradar risk manager (4) · qradar vulnerability manager (4)
- 22 CVE1 critCVSS 5.7×7.3PoC 3moodle/moodle (15) · zendframework/zendservice-windowsazure (3) · zendframework/zendservice-slideshare (3)
- 20 CVE15 critCVSS 9.3×5.0KEV 1PoC 1air sdk (19) · air (19) · air sdk \& compiler (19)
- 19 CVE3 critCVSS 6.7PoC 2netweaver (4) · business intelligence development workbench (2) · hana (2)
- 17 CVE1 critCVSS 6.6PoC 3ios (3) · rv220w firmware (3) · rv220w (3)
- 16 CVE1 critCVSS 5.6×4.0PoC 1mac os x (10) · iphone os (10) · tvos (5)
- 15 CVECVSS 4.8×3.0moodle (15)
- 13 CVECVSS 6.2×4.3PoC 5suse linux enterprise server (8) · linux enterprise software development kit (4) · linux enterprise real time extension (4)
- 12 CVECVSS 6.9PoC 1chrome (12)
- 11 CVE5 critCVSS 7.3clearpass (9) · airwave (1) · clearpass policy manager (1)
- 11 CVECVSS 7.4ffmpeg (11)
- 10 CVECVSS 5.7×10.0PoC 3linux (5) · solaris (3) · hyperion (1)
- 9 CVE1 critCVSS 5.8asterisk (9) · certified asterisk (5)
- 9 CVECVSS 5.2Nuclei 9wordpress (9)
- 7 CVECVSS 4.6PoC 3org.webjars.npm:jquery-ui (2) · org.directwebremoting:dwr (2) · org.jboss.resteasy:resteasy-jaxrs (1)
- 6 CVECVSS 4.8×3.0PoC 3cordova (3) · drill (1) · hive (1)
- 6 CVECVSS 6.1mantisbt (6)
- 6 CVECVSS 4.3PoC 2phpmyadmin (6)
- 6 CVECVSS 5.5×6.0PoC 5jquery-ui-rails (2) · actionpack (2) · puppet (1)
- 5 CVE1 critCVSS 6.2NEWPoC 5firmware (5) · cg6640e wireless gateway (5) · ch664oe wireless gateway (5)
- 5 CVECVSS 5.7PoC 2gentoo linux (5)
- 5 CVECVSS 4.7PoC 1plone (3) · pip (1) · keystone (1)
- 5 CVECVSS 5.0wireshark (5)
- 4 CVECVSS 6.3PoC 1cloud service management (4)
- 4 CVECVSS 5.3PoC 1drupal (3) · organic groups menu (1)
- 4 CVECVSS 6.4NEWNuclei 1PoC 3gogs.io/gogs (3) · github.com/gogits/gogs (1) · github.com/docker/docker (1)
- 4 CVECVSS 6.1NEWzend framework (4) · zendopenid (4) · zendrest (3)
- 3 CVE1 critCVSS 8.5NEWvap2500 firmware (3)
- 3 CVECVSS 7.1security gateway (3)
- 3 CVECVSS 7.1NEWcheck point security gateway (3)
- 3 CVECVSS 5.9PoC 1fedora (3)
- 3 CVECVSS 6.4NEWNuclei 1PoC 3gogs (3)
- 3 CVECVSS 4.9×3.0libcurl (3) · curl (2)
- 3 CVECVSS 4.4NEWNuclei 2mageia (3)
- 3 CVECVSS 6.2PoC 2suse linux enterprise desktop (3) · suse linux enterprise server (3)
- 3 CVECVSS 4.8PoC 1plone (3)
- 3 CVECVSS 5.0PoC 1ruby (3)
- 3 CVECVSS 4.7PoC 2rails (3) · ruby on rails (2)
- 3 CVECVSS 6.0endpoint protection manager (3)
- 3 CVECVSS 4.8xen (3)
- 3 CVECVSS 5.1NEWPoC 3zxdsl (1) · zxdsl 831 (1) · zxdsl 831cii (1)
- 2 CVECVSS 7.5NEWaccuenergy acuvim ii axn-net ethernet module (2) · acuvim ii (2) · axm-net (2)
- 2 CVE1 critCVSS 8.4PoC 1webaccess (1) · eki-6340 (1) · eki-6340 firmware (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | debian | 36 | · | · | 4 | ×3.0Nuclei 4PoC 3 | debian linux (32) · advanced package tool (4) | — | |
| 2 | canonical | 34 | · | · | · | PoC 4 | ubuntu linux (33) · ubuntu (1) | — | |
| 3 | microsoft | 33 | 16 | 3 | · | KEV 3PoC 3 | internet explorer (17) · windows 7 (8) · windows server 2008 (8) | — | |
| 4 | redhat | 32 | 1 | · | · | PoC 7 | red hat enterprise linux (9) · enterprise linux desktop (8) · enterprise linux workstation (8) | — | |
| 5 | opensuse | 28 | · | · | · | PoC 10 | opensuse (20) · evergreen (9) | — | |
| 6 | qemu | 27 | · | · | · | PoC 1 | qemu (27) | — | |
| 7 | linux | 24 | · | · | · | PoC 5 | linux kernel (24) | — | |
| 8 | ibm | 23 | · | · | · | security identity manager (6) · qradar risk manager (4) · qradar vulnerability manager (4) | — | ||
| 9 | packagist | 22 | 1 | · | · | ×7.3PoC 3 | moodle/moodle (15) · zendframework/zendservice-windowsazure (3) · zendframework/zendservice-slideshare (3) | — | |
| 10 | adobe | 20 | 15 | 1 | · | ×5.0KEV 1PoC 1 | air sdk (19) · air (19) · air sdk \& compiler (19) | — | |
| 11 | sap | 19 | 3 | · | · | PoC 2 | netweaver (4) · business intelligence development workbench (2) · hana (2) | — | |
| 12 | cisco | 17 | 1 | · | · | PoC 3 | ios (3) · rv220w firmware (3) · rv220w (3) | — | |
| 13 | apple | 16 | 1 | · | · | ×4.0PoC 1 | mac os x (10) · iphone os (10) · tvos (5) | — | |
| 14 | moodle | 15 | · | · | · | ×3.0 | moodle (15) | — | |
| 15 | suse | 13 | · | · | · | ×4.3PoC 5 | suse linux enterprise server (8) · linux enterprise software development kit (4) · linux enterprise real time extension (4) | — | |
| 16 | 12 | · | · | · | PoC 1 | chrome (12) | — | ||
| 17 | arubanetworks | 11 | 5 | · | · | clearpass (9) · airwave (1) · clearpass policy manager (1) | — | ||
| 18 | ffmpeg | 11 | · | · | · | ffmpeg (11) | — | ||
| 19 | oracle | 10 | · | · | · | ×10.0PoC 3 | linux (5) · solaris (3) · hyperion (1) | — | |
| 20 | digium | 9 | 1 | · | · | asterisk (9) · certified asterisk (5) | — | ||
| 21 | wordpress | 9 | · | · | 9 | Nuclei 9 | wordpress (9) | — | |
| 22 | maven | 7 | · | · | · | PoC 3 | org.webjars.npm:jquery-ui (2) · org.directwebremoting:dwr (2) · org.jboss.resteasy:resteasy-jaxrs (1) | — | |
| 23 | apache | 6 | · | · | · | ×3.0PoC 3 | cordova (3) · drill (1) · hive (1) | — | |
| 24 | mantisbt | 6 | · | · | · | mantisbt (6) | — | ||
| 25 | phpmyadmin | 6 | · | · | · | PoC 2 | phpmyadmin (6) | — | |
| 26 | rubygems | 6 | · | · | · | ×6.0PoC 5 | jquery-ui-rails (2) · actionpack (2) · puppet (1) | — | |
| 27 | compal broadband networks | 5 | 1 | · | · | NEWPoC 5 | firmware (5) · cg6640e wireless gateway (5) · ch664oe wireless gateway (5) | — | |
| 28 | gentoo foundation inc. | 5 | · | · | · | PoC 2 | gentoo linux (5) | — | |
| 29 | pypi | 5 | · | · | · | PoC 1 | plone (3) · pip (1) · keystone (1) | — | |
| 30 | wireshark | 5 | · | · | · | wireshark (5) | — | ||
| 31 | ca | 4 | · | · | · | PoC 1 | cloud service management (4) | — | |
| 32 | drupal | 4 | · | · | · | PoC 1 | drupal (3) · organic groups menu (1) | — | |
| 33 | go | 4 | · | · | 1 | NEWNuclei 1PoC 3 | gogs.io/gogs (3) · github.com/gogits/gogs (1) · github.com/docker/docker (1) | — | |
| 34 | zend | 4 | · | · | · | NEW | zend framework (4) · zendopenid (4) · zendrest (3) | — | |
| 35 | arris | 3 | 1 | · | · | NEW | vap2500 firmware (3) | — | |
| 36 | checkpoint | 3 | · | · | · | security gateway (3) | — | ||
| 37 | check point software technologies ltd. | 3 | · | · | · | NEW | check point security gateway (3) | — | |
| 38 | fedoraproject | 3 | · | · | · | PoC 1 | fedora (3) | — | |
| 39 | gogits | 3 | · | · | 1 | NEWNuclei 1PoC 3 | gogs (3) | — | |
| 40 | haxx | 3 | · | · | · | ×3.0 | libcurl (3) · curl (2) | — | |
| 41 | mageia project | 3 | · | · | 2 | NEWNuclei 2 | mageia (3) | — | |
| 42 | novell | 3 | · | · | · | PoC 2 | suse linux enterprise desktop (3) · suse linux enterprise server (3) | — | |
| 43 | plone | 3 | · | · | · | PoC 1 | plone (3) | — | |
| 44 | ruby-lang | 3 | · | · | · | PoC 1 | ruby (3) | — | |
| 45 | rubyonrails | 3 | · | · | · | PoC 2 | rails (3) · ruby on rails (2) | — | |
| 46 | symantec | 3 | · | · | · | endpoint protection manager (3) | — | ||
| 47 | xen | 3 | · | · | · | xen (3) | — | ||
| 48 | zte | 3 | · | · | · | NEWPoC 3 | zxdsl (1) · zxdsl 831 (1) · zxdsl 831cii (1) | — | |
| 49 | accuenergy | 2 | · | · | · | NEW | accuenergy acuvim ii axn-net ethernet module (2) · acuvim ii (2) · axm-net (2) | — | |
| 50 | advantech | 2 | 1 | · | · | PoC 1 | webaccess (1) · eki-6340 (1) · eki-6340 firmware (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems130 CVE44 crit40 KEV19 vendorsCVSS 7.7ubuntu linux (33) · debian linux (32) · linux kernel (24)
- OSS Libraries87 CVE1 crit26 vendorsCVSS 6.4ffmpeg (11) · libcurl (3) · ruby (3)
- Enterprise Software80 CVE14 crit27 vendorsCVSS 7.7mantisbt (6) · security identity manager (6) · cloud service management (4)
- Web & CMS Plugins71 CVE1 crit35 vendorsCVSS 6.0moodle (15) · wordpress (9) · cordova (3)
- 23 crit17 vendorsCVSS 9.0cg6640e wireless gateway (5) · ch664oe wireless gateway (5) · firmware (5)
- Cloud & SaaS40 CVE10 vendorsCVSS 7.5qemu (27)
- Mobile Apps31 CVE3 crit4 vendorsCVSS 6.9iphone os (10) · mac os x (10) · tvos (5)
- Security Products27 CVE15 vendorsCVSS 6.5check point security gateway (3) · endpoint protection manager (3) · alupdate (1)
- Consumer Software23 CVE60 crit9 KEV4 vendorsCVSS 9.3flash player (20) · air (19) · air sdk (19)
- Databases16 CVE2 vendorsCVSS 5.7linux (5) · solaris (3) · database server (1)
- Communications15 CVE2 crit5 vendorsCVSS 6.5asterisk (9) · certified asterisk (5) · mumble (2)
- ICS / OT / IoT9 CVE2 crit7 vendorsCVSS 7.5connected components workbench (1) · dnp3 opc server (1) · e3 (1)
- Hardware Firmware6 CVE5 vendorsCVSS 7.1power iq (1) · tm-ac1900 (1) · zxdsl 831 (1)
- DevTools & CI6 CVE1 crit3 vendorsCVSS 7.9gogs (3)
- Unclassified17 CVE13 vendorsCVSS 5.2bulletproof security (2) · channel platform (2) · contus video gallery (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 130 | 44 | 40 | 19 | 74 | 7.7 | ubuntu linux (33) · debian linux (32) · linux kernel (24) |
| OSS Libraries▸ 9 | 87 | 1 | · | 26 | 66 | 6.4 | ffmpeg (11) · libcurl (3) · ruby (3) |
| Enterprise Software▸ 6 | 80 | 14 | · | 27 | 77 | 7.7 | mantisbt (6) · security identity manager (6) · cloud service management (4) |
| Web & CMS Plugins▸ 5 | 71 | 1 | · | 35 | 38 | 6.0 | moodle (15) · wordpress (9) · cordova (3) |
| Networking Infrastructure▸ 6 | 54 | 23 | · | 17 | 79 | 9.0 | cg6640e wireless gateway (5) · ch664oe wireless gateway (5) · firmware (5) |
| Cloud & SaaS▸ 5 | 40 | · | · | 10 | 13 | 7.5 | qemu (27) |
| Mobile Apps▸ 3 | 31 | 3 | · | 4 | 15 | 6.9 | iphone os (10) · mac os x (10) · tvos (5) |
| Security Products▸ 5 | 27 | · | · | 15 | 33 | 6.5 | check point security gateway (3) · endpoint protection manager (3) · alupdate (1) |
| Consumer Software▸ 2 | 23 | 60 | 9 | 4 | 12 | 9.3 | flash player (20) · air (19) · air sdk (19) |
| Databases▸ 2 | 16 | · | · | 2 | 5 | 5.7 | linux (5) · solaris (3) · database server (1) |
| Communications▸ 3 | 15 | 2 | · | 5 | 6 | 6.5 | asterisk (9) · certified asterisk (5) · mumble (2) |
| ICS / OT / IoT▸ 2 | 9 | 2 | · | 7 | 13 | 7.5 | connected components workbench (1) · dnp3 opc server (1) · e3 (1) |
| Hardware Firmware▸ 3 | 6 | · | · | 5 | 6 | 7.1 | power iq (1) · tm-ac1900 (1) · zxdsl 831 (1) |
| DevTools & CI▸ 3 | 6 | 1 | · | 3 | 3 | 7.9 | gogs (3) |
| Unclassified | 17 | · | · | 13 | 13 | 5.2 | bulletproof security (2) · channel platform (2) · contus video gallery (2) |
Weakness × Sector
Which weaknesses hit which solution categories in November 2014
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS264CWE-264200Information Exposure119Memory Buffer Bounds20Improper Input Validation399CWE-39989SQL Injection94Code Injection352CSRF22Path TraversalOperating Systems812814199134OSS Libraries82514612714Web & CMS Plugins2397218395Networking Infrastructure5986651261Consumer Software145621418Enterprise Software949223742Cloud & SaaS131641131Security Products434131321Databases523312Communications15113211