month report
December 2014
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
December 2014 closed with 618 published CVEs. 61 criticals, ibm led volume, mostly via websphere service registry and repository. Biggest breakout: mageia at ×7.0 their 12-month median. Top weakness class — CWE-79 (90 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
618
— MoM— YoY
Severity mix
61 / 129
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
7.0%
43 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4095.2
n=43
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2681
n=1
Weakness × Vendor
What's spreading where in December 2014
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
79XSS119Memory Buffer Bounds200Information Exposure20Improper Input Validation352CSRF264CWE-26489SQL Injection399CWE-39994Code Injection22Path Traversalibm1783471122microsoft264101110apple331197debian9213adobe2429canonical621411cisco473311red hat inc.10redhat1412211zenoss142321fedoraproject17111opensuse12111
Most discussed CVEs — December 2014
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
Top vendors
Ranked by distinct CVE count this period.
- 61 CVE2 critCVSS 4.6PoC 1websphere service registry and repository (12) · security access manager for mobile (11) · security access manager for web (11)
- 44 CVE31 critCVSS 7.9PoC 1windows (19) · internet explorer (15) · office compatibility pack (4)
- 40 CVECVSS 5.5KEV 1PoC 5red hat enterprise linux (21) · enterprise linux desktop (9) · enterprise linux server (8)
- 34 CVE15 critCVSS 7.3mac os x (22) · tvos (10) · iphone os (10)
- 28 CVECVSS 5.9PoC 6debian linux (27) · hivex (1)
- 26 CVE20 critCVSS 8.9×3.7KEV 1acrobat reader (19) · acrobat (19) · flash player (6)
- 25 CVECVSS 5.6PoC 4ubuntu linux (23) · ubuntu (3)
- 24 CVECVSS 5.7PoC 1meraki mx firmware (4) · meraki mr firmware (4) · meraki ms firmware (4)
- 18 CVE1 critCVSS 5.7NEWzenoss core (18)
- 16 CVECVSS 6.0PoC 3fedora (16)
- 16 CVECVSS 4.8PoC 1opensuse (14) · evergreen (3)
- 13 CVECVSS 6.3NEWx server (13) · x11 (11) · xfree86 (5)
- 12 CVECVSS 5.6PoC 1firefox (11) · seamonkey (10) · thunderbird (6)
- 11 CVECVSS 5.9PoC 3solaris (6) · linux (2) · enterprise manager ops center (1)
- 10 CVECVSS 6.1×3.3PoC 2binutils (7) · glibc (2) · cpio (1)
- 10 CVECVSS 7.0PoC 4android (5) · chrome (5)
- 10 CVE1 critCVSS 6.7×5.0PoC 5manageengine it360 (8) · manageengine opmanager (6) · manageengine social it plus (5)
- 8 CVECVSS 6.9ettercap (8)
- 8 CVECVSS 5.2×4.0PoC 1mantisbt (8)
- 7 CVECVSS 5.2PoC 1http server (2) · subversion (2) · cloudstack (1)
- 7 CVE2 critCVSS 5.8PoC 1documentum content server (2) · rsa adaptive authentication on-premise (1) · appsync (1)
- 7 CVE1 critCVSS 5.3×7.0PoC 4espace desktop (4) · honor cube wireless router ws860s (1) · honor cube wireless router ws860s firewall (1)
- 7 CVECVSS 5.0PoC 1linux kernel (7)
- 7 CVECVSS 5.1NEW×7.0mageia (7)
- 7 CVECVSS 7.1×3.5PoC 1vlc media player (7)
- 5 CVECVSS 6.0NEWhiphop virtual machine (5)
- 5 CVECVSS 4.7×5.0PoC 5access manager (5)
- 5 CVECVSS 4.4PoC 1phpmyadmin/phpmyadmin (2) · symfony/security (1) · symfony/symfony (1)
- 5 CVECVSS 5.3NEWPoC 5smoothwall (5)
- 4 CVE1 critCVSS 7.2NEW×4.0docker (4)
- 4 CVECVSS 4.4nginx (2) · big-ip edge gateway (1) · big-ip local traffic manager (1)
- 4 CVECVSS 6.9ffmpeg (4)
- 4 CVE1 critCVSS 7.2NEW×4.0github.com/docker/docker (4)
- 4 CVECVSS 5.1NEW×4.0PoC 2modx revolution (4)
- 4 CVECVSS 6.9NEW×4.0PoC 1ntp (4)
- 4 CVECVSS 4.1phpmyadmin (4)
- 4 CVE1 critCVSS 8.5proclima (4)
- 4 CVECVSS 5.1NEWi-httpd (4)
- 4 CVE1 critCVSS 5.4PoC 1vcenter server appliance (2) · airwatch (1) · vcloud automation center (1)
- 4 CVECVSS 4.7xen (4)
- 3 CVECVSS 6.1×3.0PoC 1alfresco (2) · community edition (1)
- 3 CVE1 critCVSS 6.8NEWtouchstone tg862g\/ct firmware (3)
- 3 CVECVSS 5.9release automation (3)
- 3 CVECVSS 5.0freebsd (3)
- 3 CVECVSS 5.9arrows tab lte f-01d (2) · regza phone t-01d (2) · arrows x lte f-05d (1)
- 3 CVECVSS 7.3NEWPoC 3jasper (3)
- 3 CVECVSS 6.4NEWPoC 3k7av sentry device driver (2) · k7firewall packet driver (1)
- 3 CVE1 critCVSS 7.8NEWPoC 1password manager pro (2) · desktop central (1) · it360 (1)
- 3 CVECVSS 5.6PoC 1io.undertow:undertow-core (1) · org.apache.hadoop:hadoop-client (1) · org.apache.struts:struts2-core (1)
- 3 CVECVSS 2.1PoC 1nagios (3)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | ibm | 61 | 2 | · | · | PoC 1 | websphere service registry and repository (12) · security access manager for mobile (11) · security access manager for web (11) | — | |
| 2 | microsoft | 44 | 31 | · | · | PoC 1 | windows (19) · internet explorer (15) · office compatibility pack (4) | — | |
| 3 | redhat | 40 | · | 1 | · | KEV 1PoC 5 | red hat enterprise linux (21) · enterprise linux desktop (9) · enterprise linux server (8) | — | |
| 4 | apple | 34 | 15 | · | · | mac os x (22) · tvos (10) · iphone os (10) | — | ||
| 5 | debian | 28 | · | · | · | PoC 6 | debian linux (27) · hivex (1) | — | |
| 6 | adobe | 26 | 20 | 1 | · | ×3.7KEV 1 | acrobat reader (19) · acrobat (19) · flash player (6) | — | |
| 7 | canonical | 25 | · | · | · | PoC 4 | ubuntu linux (23) · ubuntu (3) | — | |
| 8 | cisco | 24 | · | · | · | PoC 1 | meraki mx firmware (4) · meraki mr firmware (4) · meraki ms firmware (4) | — | |
| 9 | zenoss | 18 | 1 | · | · | NEW | zenoss core (18) | — | |
| 10 | fedoraproject | 16 | · | · | · | PoC 3 | fedora (16) | — | |
| 11 | opensuse | 16 | · | · | · | PoC 1 | opensuse (14) · evergreen (3) | — | |
| 12 | x.org | 13 | · | · | · | NEW | x server (13) · x11 (11) · xfree86 (5) | — | |
| 13 | mozilla | 12 | · | · | · | PoC 1 | firefox (11) · seamonkey (10) · thunderbird (6) | — | |
| 14 | oracle | 11 | · | · | · | PoC 3 | solaris (6) · linux (2) · enterprise manager ops center (1) | — | |
| 15 | gnu | 10 | · | · | · | ×3.3PoC 2 | binutils (7) · glibc (2) · cpio (1) | — | |
| 16 | 10 | · | · | · | PoC 4 | android (5) · chrome (5) | — | ||
| 17 | zohocorp | 10 | 1 | · | · | ×5.0PoC 5 | manageengine it360 (8) · manageengine opmanager (6) · manageengine social it plus (5) | — | |
| 18 | ettercap-project | 8 | · | · | · | ettercap (8) | — | ||
| 19 | mantisbt | 8 | · | · | · | ×4.0PoC 1 | mantisbt (8) | — | |
| 20 | apache | 7 | · | · | · | PoC 1 | http server (2) · subversion (2) · cloudstack (1) | — | |
| 21 | emc | 7 | 2 | · | · | PoC 1 | documentum content server (2) · rsa adaptive authentication on-premise (1) · appsync (1) | — | |
| 22 | huawei | 7 | 1 | · | · | ×7.0PoC 4 | espace desktop (4) · honor cube wireless router ws860s (1) · honor cube wireless router ws860s firewall (1) | — | |
| 23 | linux | 7 | · | · | · | PoC 1 | linux kernel (7) | — | |
| 24 | mageia | 7 | · | · | · | NEW×7.0 | mageia (7) | — | |
| 25 | videolan | 7 | · | · | · | ×3.5PoC 1 | vlc media player (7) | — | |
| 26 | 5 | · | · | · | NEW | hiphop virtual machine (5) | — | ||
| 27 | microfocus | 5 | · | · | · | ×5.0PoC 5 | access manager (5) | — | |
| 28 | packagist | 5 | · | · | · | PoC 1 | phpmyadmin/phpmyadmin (2) · symfony/security (1) · symfony/symfony (1) | — | |
| 29 | smoothwall | 5 | · | · | · | NEWPoC 5 | smoothwall (5) | — | |
| 30 | docker | 4 | 1 | · | · | NEW×4.0 | docker (4) | — | |
| 31 | f5 | 4 | · | · | · | nginx (2) · big-ip edge gateway (1) · big-ip local traffic manager (1) | — | ||
| 32 | ffmpeg | 4 | · | · | · | ffmpeg (4) | — | ||
| 33 | go | 4 | 1 | · | · | NEW×4.0 | github.com/docker/docker (4) | — | |
| 34 | modx | 4 | · | · | · | NEW×4.0PoC 2 | modx revolution (4) | — | |
| 35 | ntp | 4 | · | · | · | NEW×4.0PoC 1 | ntp (4) | — | |
| 36 | phpmyadmin | 4 | · | · | · | phpmyadmin (4) | — | ||
| 37 | schneider electric | 4 | 1 | · | · | proclima (4) | — | ||
| 38 | ultrapop | 4 | · | · | · | NEW | i-httpd (4) | — | |
| 39 | vmware | 4 | 1 | · | · | PoC 1 | vcenter server appliance (2) · airwatch (1) · vcloud automation center (1) | — | |
| 40 | xen | 4 | · | · | · | xen (4) | — | ||
| 41 | alfresco | 3 | · | · | · | ×3.0PoC 1 | alfresco (2) · community edition (1) | — | |
| 42 | arris | 3 | 1 | · | · | NEW | touchstone tg862g\/ct firmware (3) | — | |
| 43 | broadcom | 3 | · | · | · | release automation (3) | — | ||
| 44 | freebsd | 3 | · | · | · | freebsd (3) | — | ||
| 45 | fujitsu | 3 | · | · | · | arrows tab lte f-01d (2) · regza phone t-01d (2) · arrows x lte f-05d (1) | — | ||
| 46 | jasper project | 3 | · | · | · | NEWPoC 3 | jasper (3) | — | |
| 47 | k7computing | 3 | · | · | · | NEWPoC 3 | k7av sentry device driver (2) · k7firewall packet driver (1) | — | |
| 48 | manageengine | 3 | 1 | · | · | NEWPoC 1 | password manager pro (2) · desktop central (1) · it360 (1) | — | |
| 49 | maven | 3 | · | · | · | PoC 1 | io.undertow:undertow-core (1) · org.apache.hadoop:hadoop-client (1) · org.apache.struts:struts2-core (1) | — | |
| 50 | nagios | 3 | · | · | · | PoC 1 | nagios (3) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems154 CVE41 crit3 KEV31 vendorsCVSS 7.9debian linux (27) · ubuntu linux (23) · red hat enterprise linux (21)
- Enterprise Software133 CVE7 crit26 vendorsCVSS 8.8zenoss core (18) · websphere service registry and repository (12) · security access manager for mobile (11)
- Web & CMS Plugins78 CVE1 crit57 vendorsCVSS 7.0modx revolution (4) · revive adserver (3) · http server (2)
- Consumer Software59 CVE35 crit5 KEV15 vendorsCVSS 8.8acrobat (19) · acrobat reader (19) · flash player (7)
- Mobile Apps54 CVE17 crit5 vendorsCVSS 7.3mac os x (22) · iphone os (10) · safari (10)
- 51 crit16 vendorsCVSS 7.8meraki mr firmware (4) · meraki ms firmware (4) · meraki mx firmware (4)
- OSS Libraries47 CVE2 crit23 vendorsCVSS 7.9binutils (7) · php (6) · ffmpeg (4)
- Security Products42 CVE4 crit18 vendorsCVSS 8.5access manager (5) · documentum content server (2) · appsync (1)
- Cloud & SaaS22 CVE2 crit9 vendorsCVSS 6.0docker (4) · xen (4)
- Databases18 CVE9 vendorsCVSS 5.8solaris (7) · firebird (2) · linux (2)
- ICS / OT / IoT16 CVE8 crit11 vendorsCVSS 8.2proclima (5) · centum cs 3000 (1) · centum vp (1)
- Communications12 CVE6 vendorsCVSS 5.7hiphop virtual machine (5) · znc (1)
- Hardware Firmware10 CVE6 vendorsCVSS 7.2arrows tab lte f-01d (2) · regza phone t-01d (2) · arrows kiss f-03d (1)
- DevTools & CI3 CVE2 vendorsCVSS 6.0pwgen (2)
- Unclassified36 CVE3 crit26 vendorsCVSS 6.2i-httpd (4) · services (3) · dcs-2103 hd cube network camera firmware (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 154 | 41 | 3 | 31 | 78 | 7.9 | debian linux (27) · ubuntu linux (23) · red hat enterprise linux (21) |
| Enterprise Software▸ 5 | 133 | 7 | · | 26 | 74 | 8.8 | zenoss core (18) · websphere service registry and repository (12) · security access manager for mobile (11) |
| Web & CMS Plugins▸ 5 | 78 | 1 | · | 57 | 59 | 7.0 | modx revolution (4) · revive adserver (3) · http server (2) |
| Consumer Software▸ 5 | 59 | 35 | 5 | 15 | 27 | 8.8 | acrobat (19) · acrobat reader (19) · flash player (7) |
| Mobile Apps▸ 3 | 54 | 17 | · | 5 | 17 | 7.3 | mac os x (22) · iphone os (10) · safari (10) |
| Networking Infrastructure▸ 4 | 50 | 51 | · | 16 | 84 | 7.8 | meraki mr firmware (4) · meraki ms firmware (4) · meraki mx firmware (4) |
| OSS Libraries▸ 8 | 47 | 2 | · | 23 | 31 | 7.9 | binutils (7) · php (6) · ffmpeg (4) |
| Security Products▸ 6 | 42 | 4 | · | 18 | 44 | 8.5 | access manager (5) · documentum content server (2) · appsync (1) |
| Cloud & SaaS▸ 4 | 22 | 2 | · | 9 | 11 | 6.0 | docker (4) · xen (4) |
| Databases▸ 3 | 18 | · | · | 9 | 13 | 5.8 | solaris (7) · firebird (2) · linux (2) |
| ICS / OT / IoT▸ 3 | 16 | 8 | · | 11 | 24 | 8.2 | proclima (5) · centum cs 3000 (1) · centum vp (1) |
| Communications▸ 3 | 12 | · | · | 6 | 8 | 5.7 | hiphop virtual machine (5) · znc (1) |
| Hardware Firmware▸ 4 | 10 | · | · | 6 | 11 | 7.2 | arrows tab lte f-01d (2) · regza phone t-01d (2) · arrows kiss f-03d (1) |
| DevTools & CI▸ 2 | 3 | · | · | 2 | 2 | 6.0 | pwgen (2) |
| Unclassified | 36 | 3 | · | 26 | 26 | 6.2 | i-httpd (4) · services (3) · dcs-2103 hd cube network camera firmware (2) |
Weakness × Sector
Which weaknesses hit which solution categories in December 2014
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS119Memory Buffer Bounds200Information Exposure20Improper Input Validation352CSRF264CWE-26489SQL Injection399CWE-39994Code Injection22Path TraversalOperating Systems72678831792Enterprise Software22211351573210Consumer Software159192411121Web & CMS Plugins3315181622OSS Libraries7181543232Networking Infrastructure1247533514Security Products595353412Cloud & SaaS4112432Communications1223211Databases315121