month report
March 2015
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
March 2015 closed with 457 published CVEs. 59 criticals, microsoft led volume, mostly via windows server 2012. Top weakness class — CWE-79 (63 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
457
— MoM— YoY
Severity mix
59 / 115
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
4.6%
21 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
4017.8
n=21
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
—
n=0
Weakness × Vendor
What's spreading where in March 2015
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — March 2015
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #11websense20 CVE
- #14openssl13 CVE
- #21mybb7 CVE
- #22openssl software foundation7 CVE
- #28aveva4 CVE
- #32tcpdump4 CVE
- #33webgateinc4 CVE
- #34wpml4 CVE
- #35ajsquare3 CVE
- #38gaia-gis3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 43 CVE20 critCVSS 6.7PoC 2windows server 2012 (21) · windows 7 (20) · windows server 2008 (20)
- 41 CVE2 critCVSS 7.0ios (15) · ios xe (13) · cisco ios (11)
- 36 CVE1 critCVSS 6.1PoC 8ubuntu linux (32) · ubuntu (7)
- 33 CVE2 critCVSS 5.7PoC 5debian linux (32) · cifs-utils (1)
- 33 CVE2 critCVSS 4.6rational quality manager (6) · rational doors next generation (4) · rational requirements composer (4)
- 31 CVE1 critCVSS 6.6PoC 3enterprise linux workstation supplementary (11) · enterprise linux desktop supplementary (11) · enterprise linux server supplementary eus (11)
- 30 CVE2 critCVSS 6.6PoC 1iphone os (22) · tvos (18) · safari (17)
- 24 CVECVSS 6.7chrome (24) · v8 (1)
- 24 CVECVSS 5.6PoC 3opensuse (24)
- 21 CVE1 critCVSS 5.4PoC 3fedora (21) · 389 directory server (2)
- 20 CVE2 critCVSS 5.2NEWPoC 6v-series appliances (11) · triton ap email (9) · triton ap web (6)
- 17 CVE12 critCVSS 8.3ole point of sale driver (10) · integrated lights-out 2 firmware (2) · integrated lights-out 4 firmware (2)
- 14 CVE1 critCVSS 5.2PoC 3linux kernel (14)
- 13 CVECVSS 5.0NEWopenssl (13)
- 13 CVECVSS 6.5PoC 2php (13)
- 12 CVE10 critCVSS 9.4PoC 1flash player (12)
- 12 CVECVSS 6.4PoC 1php (12)
- 11 CVECVSS 5.3PoC 3solaris (7) · linux (6) · secure backup (1)
- 8 CVECVSS 6.3PoC 1spcanywhere (5) · spc5000 firmware (1) · simatic cfc (1)
- 7 CVECVSS 5.5PoC 7rsa registration manager (3) · rsa certificate manager (3) · secure remote services (2)
- 7 CVE1 critCVSS 5.9NEWmybb (7)
- 7 CVECVSS 4.8NEWopenssl (7)
- 7 CVECVSS 6.1PoC 2django (3) · dulwich (2) · mercurial (1)
- 6 CVECVSS 4.5wonderware intouch 2014 (4) · pelco ds-nv (1) · device type manager (1)
- 6 CVECVSS 5.0wireshark (6)
- 5 CVECVSS 5.8PoC 3xerces-c\+\+ (1) · mod-gnutls (1) · batik (1)
- 5 CVECVSS 3.6xen (5)
- 4 CVECVSS 3.1NEWaveva edge (4)
- 4 CVECVSS 6.1PoC 3org.apache.taglibs:taglibs-standard-impl (1) · org.apache.taglibs:taglibs-standard (1) · org.apache.xmlgraphics:batik (1)
- 4 CVECVSS 5.2data loss prevention endpoint (4)
- 4 CVECVSS 5.2PoC 1linux enterprise server (2) · linux enterprise software development kit (1) · linux enterprise workstation extension (1)
- 4 CVECVSS 6.3NEWPoC 4tcpdump (4)
- 4 CVECVSS 7.0NEWPoC 1edvr manager (2) · webeyeaudio (1) · winrds (1)
- 4 CVECVSS 6.4NEWNuclei 4PoC 4wpml (4)
- 3 CVECVSS 4.5NEWPoC 3zeuscart (3)
- 3 CVECVSS 6.2request tracker (3)
- 3 CVECVSS 4.5PoC 1django (3)
- 3 CVECVSS 6.0NEWfreexl (3)
- 3 CVECVSS 5.0NEWmageia (3)
- 3 CVECVSS 6.7opensuse leap (3)
- 3 CVE2 critCVSS 8.5NEWbacnet opc server (3)
- 3 CVECVSS 6.4NEWPoC 3webshop hun (3)
- 3 CVECVSS 8.5NEWlibxfont (3)
- 3 CVECVSS 6.9debian gnu/linux (3) · libzip (1)
- 2 CVECVSS 5.5PoC 2rt-g32 firmware (2)
- 2 CVECVSS 5.0NEWNuclei 2captcha (1) · google captcha (1)
- 2 CVECVSS 6.3PoC 2command center (2)
- 2 CVECVSS 7.5NEWPoC 1dulwich (2)
- 2 CVECVSS 6.3NEWPoC 2goahead (1) · appweb (1)
- 2 CVECVSS 6.3NEWfile (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 43 | 20 | · | · | PoC 2 | windows server 2012 (21) · windows 7 (20) · windows server 2008 (20) | — | |
| 2 | cisco | 41 | 2 | · | · | ios (15) · ios xe (13) · cisco ios (11) | — | ||
| 3 | canonical | 36 | 1 | · | · | PoC 8 | ubuntu linux (32) · ubuntu (7) | — | |
| 4 | debian | 33 | 2 | · | · | PoC 5 | debian linux (32) · cifs-utils (1) | — | |
| 5 | ibm | 33 | 2 | · | · | rational quality manager (6) · rational doors next generation (4) · rational requirements composer (4) | — | ||
| 6 | redhat | 31 | 1 | · | · | PoC 3 | enterprise linux workstation supplementary (11) · enterprise linux desktop supplementary (11) · enterprise linux server supplementary eus (11) | — | |
| 7 | apple | 30 | 2 | · | · | PoC 1 | iphone os (22) · tvos (18) · safari (17) | — | |
| 8 | 24 | · | · | · | chrome (24) · v8 (1) | — | |||
| 9 | opensuse | 24 | · | · | · | PoC 3 | opensuse (24) | — | |
| 10 | fedoraproject | 21 | 1 | · | · | PoC 3 | fedora (21) · 389 directory server (2) | — | |
| 11 | websense | 20 | 2 | · | · | NEWPoC 6 | v-series appliances (11) · triton ap email (9) · triton ap web (6) | — | |
| 12 | hp | 17 | 12 | · | · | ole point of sale driver (10) · integrated lights-out 2 firmware (2) · integrated lights-out 4 firmware (2) | — | ||
| 13 | linux | 14 | 1 | · | · | PoC 3 | linux kernel (14) | — | |
| 14 | openssl | 13 | · | · | · | NEW | openssl (13) | — | |
| 15 | php | 13 | · | · | · | PoC 2 | php (13) | — | |
| 16 | adobe | 12 | 10 | · | · | PoC 1 | flash player (12) | — | |
| 17 | php group | 12 | · | · | · | PoC 1 | php (12) | — | |
| 18 | oracle | 11 | · | · | · | PoC 3 | solaris (7) · linux (6) · secure backup (1) | — | |
| 19 | siemens | 8 | · | · | · | PoC 1 | spcanywhere (5) · spc5000 firmware (1) · simatic cfc (1) | — | |
| 20 | emc | 7 | · | · | · | PoC 7 | rsa registration manager (3) · rsa certificate manager (3) · secure remote services (2) | — | |
| 21 | mybb | 7 | 1 | · | · | NEW | mybb (7) | — | |
| 22 | openssl software foundation | 7 | · | · | · | NEW | openssl (7) | — | |
| 23 | pypi | 7 | · | · | · | PoC 2 | django (3) · dulwich (2) · mercurial (1) | — | |
| 24 | schneider-electric | 6 | · | · | · | wonderware intouch 2014 (4) · pelco ds-nv (1) · device type manager (1) | — | ||
| 25 | wireshark | 6 | · | · | · | wireshark (6) | — | ||
| 26 | apache | 5 | · | · | · | PoC 3 | xerces-c\+\+ (1) · mod-gnutls (1) · batik (1) | — | |
| 27 | xen | 5 | · | · | · | xen (5) | — | ||
| 28 | aveva | 4 | · | · | · | NEW | aveva edge (4) | — | |
| 29 | maven | 4 | · | · | · | PoC 3 | org.apache.taglibs:taglibs-standard-impl (1) · org.apache.taglibs:taglibs-standard (1) · org.apache.xmlgraphics:batik (1) | — | |
| 30 | mcafee | 4 | · | · | · | data loss prevention endpoint (4) | — | ||
| 31 | suse | 4 | · | · | · | PoC 1 | linux enterprise server (2) · linux enterprise software development kit (1) · linux enterprise workstation extension (1) | — | |
| 32 | tcpdump | 4 | · | · | · | NEWPoC 4 | tcpdump (4) | — | |
| 33 | webgateinc | 4 | · | · | · | NEWPoC 1 | edvr manager (2) · webeyeaudio (1) · winrds (1) | — | |
| 34 | wpml | 4 | · | · | 4 | NEWNuclei 4PoC 4 | wpml (4) | — | |
| 35 | ajsquare | 3 | · | · | · | NEWPoC 3 | zeuscart (3) | — | |
| 36 | bestpractical | 3 | · | · | · | request tracker (3) | — | ||
| 37 | djangoproject | 3 | · | · | · | PoC 1 | django (3) | — | |
| 38 | gaia-gis | 3 | · | · | · | NEW | freexl (3) | — | |
| 39 | mageia | 3 | · | · | · | NEW | mageia (3) | — | |
| 40 | novell inc. | 3 | · | · | · | opensuse leap (3) | — | ||
| 41 | scadaengine | 3 | 2 | · | · | NEW | bacnet opc server (3) | — | |
| 42 | webshophun | 3 | · | · | · | NEWPoC 3 | webshop hun (3) | — | |
| 43 | x.org | 3 | · | · | · | NEW | libxfont (3) | — | |
| 44 | сообщество свободного программного обеспечения | 3 | · | · | · | debian gnu/linux (3) · libzip (1) | — | ||
| 45 | asus | 2 | · | · | · | PoC 2 | rt-g32 firmware (2) | — | |
| 46 | bestwebsoft | 2 | · | · | 2 | NEWNuclei 2 | captcha (1) · google captcha (1) | — | |
| 47 | citrix | 2 | · | · | · | PoC 2 | command center (2) | — | |
| 48 | dulwich project | 2 | · | · | · | NEWPoC 1 | dulwich (2) | — | |
| 49 | embedthis | 2 | · | · | · | NEWPoC 2 | goahead (1) · appweb (1) | — | |
| 50 | file project | 2 | · | · | · | NEW | file (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems140 CVE105 crit21 vendorsCVSS 6.8debian linux (32) · ubuntu linux (32) · opensuse (24)
- Enterprise Software71 CVE21 crit14 vendorsCVSS 6.2ole point of sale driver (10) · rational quality manager (6) · business process manager (4)
- OSS Libraries59 CVE21 vendorsCVSS 7.5php (25) · openssl (20) · tcpdump (4)
- Mobile Apps54 CVE5 crit3 vendorsCVSS 6.7iphone os (22) · tvos (18) · safari (17)
- Web & CMS Plugins54 CVE1 crit32 vendorsCVSS 7.5wpml (4) · zeuscart (3) · all in one wordpress security and firewall (2)
- 7 crit6 vendorsCVSS 7.0ios (15) · ios xe (13) · cisco ios (11)
- Security Products45 CVE5 crit12 vendorsCVSS 7.5v-series appliances (11) · triton ap email (9) · triton ap web (6)
- Consumer Software21 CVE17 crit11 vendorsCVSS 8.3flash player (19) · foxit reader (2) · byzanz (1)
- ICS / OT / IoT20 CVE19 crit10 vendorsCVSS 8.2wonderware intouch 2014 (4) · device type manager (1) · e3 (1)
- Databases14 CVE1 crit6 vendorsCVSS 5.6solaris (8) · linux (6) · enterprise communications broker (1)
- Cloud & SaaS9 CVE4 vendorsCVSS 5.8xen (5)
- Hardware Firmware4 CVE3 vendorsCVSS 7.2rt-g32 firmware (2)
- DevTools & CI2 CVE2 vendorsCVSS 7.5mercurial (1)
- Communications2 CVE2 vendorsCVSS 4.3putty (1)
- AI / ML1 CVE1 vendorsCVSS 7.5cups-filters (1)
- Unclassified18 CVE13 vendorsCVSS 5.4aveva edge (4) · freexl (3) · automount (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 4 | 140 | 105 | · | 21 | 70 | 6.8 | debian linux (32) · ubuntu linux (32) · opensuse (24) |
| Enterprise Software▸ 3 | 71 | 21 | · | 14 | 66 | 6.2 | ole point of sale driver (10) · rational quality manager (6) · business process manager (4) |
| OSS Libraries▸ 5 | 59 | · | · | 21 | 27 | 7.5 | php (25) · openssl (20) · tcpdump (4) |
| Mobile Apps▸ 2 | 54 | 5 | · | 3 | 10 | 6.7 | iphone os (22) · tvos (18) · safari (17) |
| Web & CMS Plugins▸ 5 | 54 | 1 | · | 32 | 36 | 7.5 | wpml (4) · zeuscart (3) · all in one wordpress security and firewall (2) |
| Networking Infrastructure▸ 2 | 46 | 7 | · | 6 | 40 | 7.0 | ios (15) · ios xe (13) · cisco ios (11) |
| Security Products▸ 5 | 45 | 5 | · | 12 | 26 | 7.5 | v-series appliances (11) · triton ap email (9) · triton ap web (6) |
| Consumer Software▸ 4 | 21 | 17 | · | 11 | 13 | 8.3 | flash player (19) · foxit reader (2) · byzanz (1) |
| ICS / OT / IoT▸ 3 | 20 | 19 | · | 10 | 30 | 8.2 | wonderware intouch 2014 (4) · device type manager (1) · e3 (1) |
| Databases▸ 3 | 14 | 1 | · | 6 | 7 | 5.6 | solaris (8) · linux (6) · enterprise communications broker (1) |
| Cloud & SaaS▸ 3 | 9 | · | · | 4 | 4 | 5.8 | xen (5) |
| Hardware Firmware▸ 3 | 4 | · | · | 3 | 6 | 7.2 | rt-g32 firmware (2) |
| DevTools & CI▸ 1 | 2 | · | · | 2 | 2 | 7.5 | mercurial (1) |
| Communications▸ 2 | 2 | · | · | 2 | 2 | 4.3 | putty (1) |
| AI / ML▸ 1 | 1 | · | · | 1 | 1 | 7.5 | cups-filters (1) |
| Unclassified | 18 | · | · | 13 | 13 | 5.4 | aveva edge (4) · freexl (3) · automount (1) |
Weakness × Sector
Which weaknesses hit which solution categories in March 2015
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS399CWE-39920Improper Input Validation200Information Exposure264CWE-264119Memory Buffer Bounds89SQL Injection352CSRF17CWE-1719CWE-19Operating Systems7221314118169Consumer Software1311166143OSS Libraries42912841Networking Infrastructure252224113Web & CMS Plugins203111061Enterprise Software18318332Security Products1114522131ICS / OT / IoT3727Hardware Firmware1111Databases111111