month report
February 2015
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
February 2015 closed with 496 published CVEs. 85 criticals, microsoft led volume, mostly via internet explorer. Top weakness class — CWE-79 (71 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
496
— MoM— YoY
Severity mix
85 / 93
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
4.6%
23 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4035.2
n=23
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2610
n=4
Weakness × Vendor
What's spreading where in February 2015
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — February 2015
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #9freetype20 CVE
- #14owncloud10 CVE
- #22clamav4 CVE
- #27pnmsoft4 CVE
- #28privoxy4 CVE
- #30yuba4 CVE
- #31zohocorp4 CVE
- #33attachmate3 CVE
- #35mylittleforum3 CVE
- #37qpr3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 57 CVE38 critCVSS 6.8KEV 2PoC 9internet explorer (42) · windows 8.1 (11) · windows rt 8.1 (11)
- 49 CVE1 critCVSS 6.2KEV 1PoC 13opensuse (49) · evergreen (2)
- 44 CVE1 critCVSS 5.5PoC 1ios (7) · webex meetings server (4) · prime infrastructure (3)
- 43 CVE1 critCVSS 6.4PoC 14ubuntu linux (43) · ubuntu (1)
- 31 CVE2 critCVSS 6.5KEV 1Nuclei 1PoC 11enterprise linux workstation (18) · enterprise linux desktop (18) · enterprise linux server (18)
- 28 CVECVSS 6.4PoC 12fedora (28)
- 25 CVECVSS 6.1PoC 9debian linux (25)
- 25 CVECVSS 3.9tivoli storage manager (5) · maximo for nuclear power (4) · change and configuration management database (4)
- 20 CVECVSS 6.8NEWPoC 10freetype (20)
- 19 CVE19 critCVSS 10.0KEV 1PoC 1flash player (19)
- 19 CVECVSS 5.8firefox (18) · thunderbird (5) · firefox esr (5)
- 16 CVECVSS 6.5PoC 8solaris (16)
- 11 CVECVSS 5.2PoC 8fortiauthenticator (5) · forticlient (3) · fortios (3)
- 10 CVECVSS 4.9NEWowncloud server (9) · owncloud (8)
- 9 CVE1 critCVSS 5.6KEV 1Nuclei 1PoC 2org.apache.ws.security:wss4j (1) · org.mindrot:jbcrypt (1) · org.python:jython-standalone (1)
- 7 CVE1 critCVSS 7.1PoC 2chrome (4) · email (1) · android (1)
- 7 CVE2 critCVSS 7.0ruggedcom firmware (3) · simatic step 7 (2) · wincc (1)
- 6 CVECVSS 4.8PoC 1data loss prevention endpoint (4) · email gateway (1) · mcafee agent (1)
- 5 CVE3 critCVSS 9.2KEV 1PoC 3dap-1320 (3) · dir-645 firmware (2) · dcs-931l firmware (2)
- 5 CVE2 critCVSS 6.8kerberos 5 (5)
- 4 CVECVSS 5.2PoC 1activemq (1) · qpid (1) · tomcat (1)
- 4 CVECVSS 6.9NEWclamav (4)
- 4 CVE1 critCVSS 5.2PoC 1documentum d2 (2) · captiva capture (1) · unisphere central (1)
- 4 CVECVSS 6.8PoC 2freebsd (4)
- 4 CVECVSS 4.2PoC 3glibc (2) · cpio (1) · grep (1)
- 4 CVECVSS 6.1PoC 3piwigo (4)
- 4 CVECVSS 4.8NEWsequence kinetics (4)
- 4 CVECVSS 5.6NEWprivoxy (4)
- 4 CVECVSS 3.3PoC 4passenger (2) · facter (1) · fat_free_crm (1)
- 4 CVECVSS 6.0NEWPoC 4u5cms (4)
- 4 CVECVSS 6.3NEWPoC 3manageengine desktop central (1) · manageengine opmanager (1) · manageengine supportcenter plus (1)
- 3 CVECVSS 6.5PoC 1rt-ac56s firmware (2) · rt-ac68u (2) · rt-ac68u firmware (2)
- 3 CVE3 critCVSS 10.0NEWreflection ftp client (3)
- 3 CVECVSS 5.2fortios (3)
- 3 CVECVSS 5.0NEWPoC 3my little forum (3)
- 3 CVECVSS 4.0glance (2) · kallithea (1) · rhodecode (1)
- 3 CVECVSS 5.0NEWportal (3)
- 3 CVECVSS 4.8PoC 3businessobjects edge (2) · hana (1)
- 3 CVE3 critCVSS 9.7NEWhvg video gateway firmware (3)
- 2 CVECVSS 5.4NEWPoC 2adminsystems cms (2)
- 2 CVECVSS 5.0NEWal-mail32 (2)
- 2 CVECVSS 5.8NEWPoC 2tower (2)
- 2 CVECVSS 5.9cups (1) · mac os x (1)
- 2 CVECVSS 5.9NEWPoC 2j-classifiedsmanager (2)
- 2 CVECVSS 5.9NEWcontent rating extbase (2)
- 2 CVECVSS 5.9NEWcontent rating (2)
- 2 CVECVSS 5.9NEWdlguard (2)
- 2 CVECVSS 4.6NEWPoC 1e2fsprogs (2)
- 2 CVECVSS 5.9NEWektron content management system (2)
- 2 CVECVSS 5.8NEWPoC 2samepage (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 57 | 38 | 2 | · | KEV 2PoC 9 | internet explorer (42) · windows 8.1 (11) · windows rt 8.1 (11) | — | |
| 2 | opensuse | 49 | 1 | 1 | · | KEV 1PoC 13 | opensuse (49) · evergreen (2) | — | |
| 3 | cisco | 44 | 1 | · | · | PoC 1 | ios (7) · webex meetings server (4) · prime infrastructure (3) | — | |
| 4 | canonical | 43 | 1 | · | · | PoC 14 | ubuntu linux (43) · ubuntu (1) | — | |
| 5 | redhat | 31 | 2 | 1 | 1 | KEV 1Nuclei 1PoC 11 | enterprise linux workstation (18) · enterprise linux desktop (18) · enterprise linux server (18) | — | |
| 6 | fedoraproject | 28 | · | · | · | PoC 12 | fedora (28) | — | |
| 7 | debian | 25 | · | · | · | PoC 9 | debian linux (25) | — | |
| 8 | ibm | 25 | · | · | · | tivoli storage manager (5) · maximo for nuclear power (4) · change and configuration management database (4) | — | ||
| 9 | freetype | 20 | · | · | · | NEWPoC 10 | freetype (20) | — | |
| 10 | adobe | 19 | 19 | 1 | · | KEV 1PoC 1 | flash player (19) | — | |
| 11 | mozilla | 19 | · | · | · | firefox (18) · thunderbird (5) · firefox esr (5) | — | ||
| 12 | oracle | 16 | · | · | · | PoC 8 | solaris (16) | — | |
| 13 | fortinet | 11 | · | · | · | PoC 8 | fortiauthenticator (5) · forticlient (3) · fortios (3) | — | |
| 14 | owncloud | 10 | · | · | · | NEW | owncloud server (9) · owncloud (8) | — | |
| 15 | maven | 9 | 1 | 1 | 1 | KEV 1Nuclei 1PoC 2 | org.apache.ws.security:wss4j (1) · org.mindrot:jbcrypt (1) · org.python:jython-standalone (1) | — | |
| 16 | 7 | 1 | · | · | PoC 2 | chrome (4) · email (1) · android (1) | — | ||
| 17 | siemens | 7 | 2 | · | · | ruggedcom firmware (3) · simatic step 7 (2) · wincc (1) | — | ||
| 18 | mcafee | 6 | · | · | · | PoC 1 | data loss prevention endpoint (4) · email gateway (1) · mcafee agent (1) | — | |
| 19 | dlink | 5 | 3 | 1 | · | KEV 1PoC 3 | dap-1320 (3) · dir-645 firmware (2) · dcs-931l firmware (2) | — | |
| 20 | mit | 5 | 2 | · | · | kerberos 5 (5) | — | ||
| 21 | apache | 4 | · | · | · | PoC 1 | activemq (1) · qpid (1) · tomcat (1) | — | |
| 22 | clamav | 4 | · | · | · | NEW | clamav (4) | — | |
| 23 | emc | 4 | 1 | · | · | PoC 1 | documentum d2 (2) · captiva capture (1) · unisphere central (1) | — | |
| 24 | freebsd | 4 | · | · | · | PoC 2 | freebsd (4) | — | |
| 25 | gnu | 4 | · | · | · | PoC 3 | glibc (2) · cpio (1) · grep (1) | — | |
| 26 | piwigo | 4 | · | · | · | PoC 3 | piwigo (4) | — | |
| 27 | pnmsoft | 4 | · | · | · | NEW | sequence kinetics (4) | — | |
| 28 | privoxy | 4 | · | · | · | NEW | privoxy (4) | — | |
| 29 | rubygems | 4 | · | · | · | PoC 4 | passenger (2) · facter (1) · fat_free_crm (1) | — | |
| 30 | yuba | 4 | · | · | · | NEWPoC 4 | u5cms (4) | — | |
| 31 | zohocorp | 4 | · | · | · | NEWPoC 3 | manageengine desktop central (1) · manageengine opmanager (1) · manageengine supportcenter plus (1) | — | |
| 32 | asus | 3 | · | · | · | PoC 1 | rt-ac56s firmware (2) · rt-ac68u (2) · rt-ac68u firmware (2) | — | |
| 33 | attachmate | 3 | 3 | · | · | NEW | reflection ftp client (3) | — | |
| 34 | fortinet inc. | 3 | · | · | · | fortios (3) | — | ||
| 35 | mylittleforum | 3 | · | · | · | NEWPoC 3 | my little forum (3) | — | |
| 36 | pypi | 3 | · | · | · | glance (2) · kallithea (1) · rhodecode (1) | — | ||
| 37 | qpr | 3 | · | · | · | NEW | portal (3) | — | |
| 38 | sap | 3 | · | · | · | PoC 3 | businessobjects edge (2) · hana (1) | — | |
| 39 | servision | 3 | 3 | · | · | NEW | hvg video gateway firmware (3) | — | |
| 40 | adminsystems cms project | 2 | · | · | · | NEWPoC 2 | adminsystems cms (2) | — | |
| 41 | almail | 2 | · | · | · | NEW | al-mail32 (2) | — | |
| 42 | ansible | 2 | · | · | · | NEWPoC 2 | tower (2) | — | |
| 43 | apple | 2 | · | · | · | cups (1) · mac os x (1) | — | ||
| 44 | cmsjunkie | 2 | · | · | · | NEWPoC 2 | j-classifiedsmanager (2) | — | |
| 45 | content rating extbase project | 2 | · | · | · | NEW | content rating extbase (2) | — | |
| 46 | content rating project | 2 | · | · | · | NEW | content rating (2) | — | |
| 47 | dlguard | 2 | · | · | · | NEW | dlguard (2) | — | |
| 48 | e2fsprogs project | 2 | · | · | · | NEWPoC 1 | e2fsprogs (2) | — | |
| 49 | ektron | 2 | · | · | · | NEW | ektron content management system (2) | — | |
| 50 | etouch | 2 | · | · | · | NEWPoC 2 | samepage (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems148 CVE69 crit20 KEV21 vendorsCVSS 6.8opensuse (50) · ubuntu linux (43) · fedora (28)
- Enterprise Software69 CVE6 crit27 vendorsCVSS 7.5tivoli storage manager (5) · change and configuration management database (4) · maximo asset management (4)
- Web & CMS Plugins68 CVE1 crit45 vendorsCVSS 5.8piwigo (4) · u5cms (4) · portal (3)
- 9 crit2 KEV15 vendorsCVSS 8.8ios (7) · webex meetings server (4) · adaptive security appliance software (3)
- OSS Libraries55 CVE2 crit1 KEV17 vendorsCVSS 10.0freetype (20) · glibc (2) · redirector sdk (2)
- Consumer Software45 CVE41 crit2 KEV8 vendorsCVSS 9.8flash player (38) · geo mashup (1)
- Security Products35 CVE3 crit12 vendorsCVSS 6.6clamav (4) · data loss prevention endpoint (4) · encryption management server (2)
- Cloud & SaaS22 CVE11 vendorsCVSS 6.4owncloud server (9) · owncloud (8) · image registry and delivery service \(glance\) (2)
- Databases17 CVE1 crit1 KEV2 vendorsCVSS 9.8solaris (16)
- Mobile Apps15 CVE2 crit7 vendorsCVSS 7.0chrome (4) · android (2) · motorola scanner sdk (2)
- ICS / OT / IoT11 CVE8 crit8 vendorsCVSS 9.7radia client automation (2) · somachine (2) · somove (2)
- DevTools & CI6 CVE1 crit5 vendorsCVSS 10.0tower (2) · facter (1) · webmin (1)
- Hardware Firmware5 CVE1 crit3 vendorsCVSS 9.0rt-ac56s (2) · rt-ac56s firmware (2) · rt-ac68u (2)
- Communications5 CVE5 vendorsCVSS 7.1open-xchange appsuite (1) · webmail (1)
- Unclassified21 CVE18 vendorsCVSS 5.7al-mail32 (3) · dlguard (2) · famoc (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 4 | 148 | 69 | 20 | 21 | 70 | 6.8 | opensuse (50) · ubuntu linux (43) · fedora (28) |
| Enterprise Software▸ 6 | 69 | 6 | · | 27 | 73 | 7.5 | tivoli storage manager (5) · change and configuration management database (4) · maximo asset management (4) |
| Web & CMS Plugins▸ 6 | 68 | 1 | · | 45 | 51 | 5.8 | piwigo (4) · u5cms (4) · portal (3) |
| Networking Infrastructure▸ 5 | 64 | 9 | 2 | 15 | 48 | 8.8 | ios (7) · webex meetings server (4) · adaptive security appliance software (3) |
| OSS Libraries▸ 8 | 55 | 2 | 1 | 17 | 32 | 10.0 | freetype (20) · glibc (2) · redirector sdk (2) |
| Consumer Software▸ 3 | 45 | 41 | 2 | 8 | 11 | 9.8 | flash player (38) · geo mashup (1) |
| Security Products▸ 3 | 35 | 3 | · | 12 | 25 | 6.6 | clamav (4) · data loss prevention endpoint (4) · encryption management server (2) |
| Cloud & SaaS▸ 4 | 22 | · | · | 11 | 14 | 6.4 | owncloud server (9) · owncloud (8) · image registry and delivery service \(glance\) (2) |
| Databases▸ 2 | 17 | 1 | 1 | 2 | 2 | 9.8 | solaris (16) |
| Mobile Apps▸ 2 | 15 | 2 | · | 7 | 11 | 7.0 | chrome (4) · android (2) · motorola scanner sdk (2) |
| ICS / OT / IoT▸ 3 | 11 | 8 | · | 8 | 20 | 9.7 | radia client automation (2) · somachine (2) · somove (2) |
| DevTools & CI▸ 2 | 6 | 1 | · | 5 | 5 | 10.0 | tower (2) · facter (1) · webmin (1) |
| Hardware Firmware▸ 3 | 5 | 1 | · | 3 | 13 | 9.0 | rt-ac56s (2) · rt-ac56s firmware (2) · rt-ac68u (2) |
| Communications▸ 3 | 5 | · | · | 5 | 5 | 7.1 | open-xchange appsuite (1) · webmail (1) |
| Unclassified | 21 | · | · | 18 | 18 | 5.7 | al-mail32 (3) · dlguard (2) · famoc (2) |
Weakness × Sector
Which weaknesses hit which solution categories in February 2015
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS264CWE-264399CWE-399200Information Exposure119Memory Buffer Bounds89SQL Injection20Improper Input Validation352CSRF22Path Traversal310CWE-310Operating Systems2127523211Consumer Software2538493Web & CMS Plugins321119164Networking Infrastructure6464311641OSS Libraries75431211231Enterprise Software1176151433Security Products41133116Cloud & SaaS22361111ICS / OT / IoT141412Communications11112111