month report
April 2015
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
April 2015 closed with 558 published CVEs. 61 criticals, oracle led volume, mostly via mysql. Biggest breakout: novell at ×5.0 their 12-month median. Top weakness class — CWE-79 (61 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
558
— MoM— YoY
Severity mix
61 / 96
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.4%
8 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
3983.3
n=8
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2508
n=7
Weakness × Vendor
What's spreading where in April 2015
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — April 2015
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #21inductiveautomation6 CVE
- #24magento5 CVE
- #28hospira4 CVE
- #29lenovo4 CVE
- #34arj software3 CVE
- #35ericsson3 CVE
- #37insite3 CVE
- #41node invite project3 CVE
- #44sqlite3 CVE
- #45blue coat2 CVE
Top vendors
Ranked by distinct CVE count this period.
- 87 CVE7 critCVSS 5.1PoC 2mysql (22) · solaris (15) · jre (13)
- 76 CVE1 critCVSS 5.5KEV 1PoC 7iphone os (43) · mac os x (41) · tvos (23)
- 52 CVE2 critCVSS 6.0×4.2PoC 4ubuntu linux (51) · ubuntu (3)
- 51 CVE3 critCVSS 5.8×3.0PoC 5debian linux (50) · dbd-firebird (1) · dpkg (1)
- 48 CVE21 critCVSS 7.6×3.7KEV 1PoC 7opensuse (48) · evergreen (1)
- 39 CVE19 critCVSS 6.9KEV 1PoC 4enterprise linux workstation supplementary (18) · enterprise linux server supplementary eus (18) · enterprise linux server supplementary (18)
- 38 CVE2 critCVSS 6.4KEV 1unity connection (5) · ios xe (5) · unified communications domain manager (4)
- 36 CVE18 critCVSS 6.4PoC 1suse linux enterprise desktop (20) · suse linux workstation extension (17) · linux enterprise server (13)
- 27 CVE14 critCVSS 7.7KEV 3Nuclei 1PoC 3internet explorer (10) · windows server 2008 (6) · windows server 2012 r2 (6)
- 24 CVE20 critCVSS 9.5×4.8KEV 1PoC 2flash player (23) · coldfusion (1)
- 23 CVE5 critCVSS 6.3PoC 1websphere application server (4) · domino (4) · tivoli storage manager fastback (3)
- 20 CVECVSS 6.0×3.1PoC 2chrome (19) · google chrome (15) · v8 (2)
- 19 CVECVSS 6.3PoC 2firefox (19) · thunderbird (5) · firefox esr (3)
- 12 CVE1 critCVSS 6.1fedora (12)
- 12 CVECVSS 5.3×3.0PoC 1mediawiki (10) · scribunto (1) · checkuser (1)
- 10 CVE3 critCVSS 6.6system management homepage (3) · easy tools (2) · capture and route software (1)
- 10 CVE2 critCVSS 4.8×5.0KEV 1PoC 1suse linux enterprise desktop (8) · suse linux enterprise server (4) · suse linux enterprise software development kit (3)
- 10 CVECVSS 5.5PoC 8netweaver enterprise portal (2) · mobile platform (2) · afaria (2)
- 8 CVECVSS 4.2mariadb (8)
- 7 CVECVSS 5.8PoC 1subversion (3) · flex (1) · openoffice (1)
- 6 CVECVSS 4.5NEWignition (6)
- 5 CVE2 critCVSS 8.3PoC 2glibc (2) · mailman (1) · libtasn1 (1)
- 5 CVECVSS 5.7junos (4) · junos space (1)
- 5 CVECVSS 6.2NEWPoC 2magento (5)
- 5 CVECVSS 4.4xen (5)
- 4 CVECVSS 5.1PoC 4netscaler (4)
- 4 CVE1 critCVSS 6.6curl (4) · libcurl (4)
- 4 CVE2 critCVSS 8.4NEWmednet (3) · lifecare pcainfusion firmware (1) · lifecare pca3 (1)
- 4 CVECVSS 4.7NEWthinkserver system manager baseboard management controller firmware (2) · thinkserver td350 (1) · thinkserver td350 firmware (1)
- 4 CVECVSS 4.8nova (1) · django-markupfield (1) · keystonemiddleware (1)
- 4 CVECVSS 6.4searchblox (4)
- 4 CVECVSS 5.9simatic step 7 (2) · wincc (2) · simatic hmi (1)
- 4 CVE2 critCVSS 8.0debian gnu/linux (3) · openstack (1)
- 3 CVECVSS 6.4NEWarj archiver (3)
- 3 CVECVSS 5.0NEWNuclei 1PoC 3drutt mobile service delivery platform (3)
- 3 CVE3 critCVSS 10.0×3.0ibm domino (3)
- 3 CVECVSS 5.0NEWnode basket (3)
- 3 CVECVSS 5.7linux kernel (3)
- 3 CVECVSS 6.8PoC 1mysql:mysql-connector-java (1) · org.apache.cassandra:apache-cassandra (1) · org.drools:drools-core (1)
- 3 CVECVSS 4.5advanced threat defense (3)
- 3 CVECVSS 5.4NEWnode invite (3)
- 3 CVECVSS 4.8swift (1) · keystonemiddleware (1) · nova (1)
- 3 CVECVSS 7.5php (3)
- 3 CVECVSS 7.5NEWsqlite (3)
- 2 CVECVSS 4.7NEWmalware analysis appliance (2)
- 2 CVE1 critCVSS 6.3PoC 2spectrum (2)
- 2 CVECVSS 5.2NEWcloudwords for multilingual (2)
- 2 CVECVSS 4.7NEWtransmitmail (2)
- 2 CVECVSS 6.1PoC 1networker (1) · powerpath virtual appliance (1)
- 2 CVECVSS 5.9NEWPoC 2fiyo cms (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 87 | 7 | · | · | PoC 2 | mysql (22) · solaris (15) · jre (13) | — | |
| 2 | apple | 76 | 1 | 1 | · | KEV 1PoC 7 | iphone os (43) · mac os x (41) · tvos (23) | — | |
| 3 | canonical | 52 | 2 | · | · | ×4.2PoC 4 | ubuntu linux (51) · ubuntu (3) | — | |
| 4 | debian | 51 | 3 | · | · | ×3.0PoC 5 | debian linux (50) · dbd-firebird (1) · dpkg (1) | — | |
| 5 | opensuse | 48 | 21 | 1 | · | ×3.7KEV 1PoC 7 | opensuse (48) · evergreen (1) | — | |
| 6 | redhat | 39 | 19 | 1 | · | KEV 1PoC 4 | enterprise linux workstation supplementary (18) · enterprise linux server supplementary eus (18) · enterprise linux server supplementary (18) | — | |
| 7 | cisco | 38 | 2 | 1 | · | KEV 1 | unity connection (5) · ios xe (5) · unified communications domain manager (4) | — | |
| 8 | suse | 36 | 18 | · | · | PoC 1 | suse linux enterprise desktop (20) · suse linux workstation extension (17) · linux enterprise server (13) | — | |
| 9 | microsoft | 27 | 14 | 3 | 1 | KEV 3Nuclei 1PoC 3 | internet explorer (10) · windows server 2008 (6) · windows server 2012 r2 (6) | — | |
| 10 | adobe | 24 | 20 | 1 | · | ×4.8KEV 1PoC 2 | flash player (23) · coldfusion (1) | — | |
| 11 | ibm | 23 | 5 | · | · | PoC 1 | websphere application server (4) · domino (4) · tivoli storage manager fastback (3) | — | |
| 12 | 20 | · | · | · | ×3.1PoC 2 | chrome (19) · google chrome (15) · v8 (2) | — | ||
| 13 | mozilla | 19 | · | · | · | PoC 2 | firefox (19) · thunderbird (5) · firefox esr (3) | — | |
| 14 | fedoraproject | 12 | 1 | · | · | fedora (12) | — | ||
| 15 | mediawiki | 12 | · | · | · | ×3.0PoC 1 | mediawiki (10) · scribunto (1) · checkuser (1) | — | |
| 16 | hp | 10 | 3 | · | · | system management homepage (3) · easy tools (2) · capture and route software (1) | — | ||
| 17 | novell | 10 | 2 | 1 | · | ×5.0KEV 1PoC 1 | suse linux enterprise desktop (8) · suse linux enterprise server (4) · suse linux enterprise software development kit (3) | — | |
| 18 | sap | 10 | · | · | · | PoC 8 | netweaver enterprise portal (2) · mobile platform (2) · afaria (2) | — | |
| 19 | mariadb | 8 | · | · | · | mariadb (8) | — | ||
| 20 | apache | 7 | · | · | · | PoC 1 | subversion (3) · flex (1) · openoffice (1) | — | |
| 21 | inductiveautomation | 6 | · | · | · | NEW | ignition (6) | — | |
| 22 | gnu | 5 | 2 | · | · | PoC 2 | glibc (2) · mailman (1) · libtasn1 (1) | — | |
| 23 | juniper | 5 | · | · | · | junos (4) · junos space (1) | — | ||
| 24 | magento | 5 | · | · | · | NEWPoC 2 | magento (5) | — | |
| 25 | xen | 5 | · | · | · | xen (5) | — | ||
| 26 | citrix | 4 | · | · | · | PoC 4 | netscaler (4) | — | |
| 27 | haxx | 4 | 1 | · | · | curl (4) · libcurl (4) | — | ||
| 28 | hospira | 4 | 2 | · | · | NEW | mednet (3) · lifecare pcainfusion firmware (1) · lifecare pca3 (1) | — | |
| 29 | lenovo | 4 | · | · | · | NEW | thinkserver system manager baseboard management controller firmware (2) · thinkserver td350 (1) · thinkserver td350 firmware (1) | — | |
| 30 | pypi | 4 | · | · | · | nova (1) · django-markupfield (1) · keystonemiddleware (1) | — | ||
| 31 | searchblox | 4 | · | · | · | searchblox (4) | — | ||
| 32 | siemens | 4 | · | · | · | simatic step 7 (2) · wincc (2) · simatic hmi (1) | — | ||
| 33 | сообщество свободного программного обеспечения | 4 | 2 | · | · | debian gnu/linux (3) · openstack (1) | — | ||
| 34 | arj software | 3 | · | · | · | NEW | arj archiver (3) | — | |
| 35 | ericsson | 3 | · | · | 1 | NEWNuclei 1PoC 3 | drutt mobile service delivery platform (3) | — | |
| 36 | ibm corp. | 3 | 3 | · | · | ×3.0 | ibm domino (3) | — | |
| 37 | insite | 3 | · | · | · | NEW | node basket (3) | — | |
| 38 | linux | 3 | · | · | · | linux kernel (3) | — | ||
| 39 | maven | 3 | · | · | · | PoC 1 | mysql:mysql-connector-java (1) · org.apache.cassandra:apache-cassandra (1) · org.drools:drools-core (1) | — | |
| 40 | mcafee | 3 | · | · | · | advanced threat defense (3) | — | ||
| 41 | node invite project | 3 | · | · | · | NEW | node invite (3) | — | |
| 42 | openstack | 3 | · | · | · | swift (1) · keystonemiddleware (1) · nova (1) | — | ||
| 43 | php | 3 | · | · | · | php (3) | — | ||
| 44 | sqlite | 3 | · | · | · | NEW | sqlite (3) | — | |
| 45 | blue coat | 2 | · | · | · | NEW | malware analysis appliance (2) | — | |
| 46 | broadcom | 2 | 1 | · | · | PoC 2 | spectrum (2) | — | |
| 47 | cloudwords | 2 | · | · | · | NEW | cloudwords for multilingual (2) | — | |
| 48 | dounokouno | 2 | · | · | · | NEW | transmitmail (2) | — | |
| 49 | emc | 2 | · | · | · | PoC 1 | networker (1) · powerpath virtual appliance (1) | — | |
| 50 | fiyo | 2 | · | · | · | NEWPoC 2 | fiyo cms (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems148 CVE201 crit44 KEV21 vendorsCVSS 7.7ubuntu linux (51) · debian linux (50) · opensuse (50)
- Mobile Apps97 CVE1 crit2 KEV5 vendorsCVSS 5.5iphone os (43) · mac os x (41) · tvos (23)
- Databases94 CVE24 crit6 vendorsCVSS 5.2mysql (44) · solaris (15) · java platform (13)
- Web & CMS Plugins59 CVE29 vendorsCVSS 7.5mediawiki (10) · subversion (4) · fiyo cms (2)
- 9 crit21 KEV13 vendorsCVSS 9.3ios xe (5) · unity connection (5) · junos (4)
- Enterprise Software54 CVE8 crit11 vendorsCVSS 6.3domino (4) · websphere application server (4) · system management homepage (3)
- Consumer Software51 CVE40 crit2 KEV10 vendorsCVSS 9.4flash player (42) · libreoffice (2) · coldfusion (1)
- OSS Libraries23 CVE4 crit10 vendorsCVSS 7.2curl (4) · libcurl (4) · php (3)
- Cloud & SaaS20 CVE1 crit7 vendorsCVSS 6.4netscaler (4) · spectrum (2)
- ICS / OT / IoT13 CVE5 crit6 vendorsCVSS 8.9ignition (6) · centum vp (1) · integraxor (1)
- Security Products11 CVE8 vendorsCVSS 5.5networker (1) · openldap (1) · powerpath virtual appliance (1)
- Hardware Firmware5 CVE2 vendorsCVSS 4.7thinkserver system manager baseboard management controller firmware (2) · thinkserver rd350 (1) · thinkserver rd350 firmware (1)
- DevTools & CI4 CVE2 vendorsCVSS 5.5drutt mobile service delivery platform (3) · batch jobs (1)
- Communications4 CVE3 vendorsCVSS 4.8quassel (2) · hiphop virtual machine (1)
- Unclassified22 CVE18 vendorsCVSS 5.2node invite (3) · commerce balanced payments (2) · tadaa\! (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 148 | 201 | 44 | 21 | 97 | 7.7 | ubuntu linux (51) · debian linux (50) · opensuse (50) |
| Mobile Apps▸ 2 | 97 | 1 | 2 | 5 | 49 | 5.5 | iphone os (43) · mac os x (41) · tvos (23) |
| Databases▸ 1 | 94 | 24 | · | 6 | 34 | 5.2 | mysql (44) · solaris (15) · java platform (13) |
| Web & CMS Plugins▸ 5 | 59 | · | · | 29 | 34 | 7.5 | mediawiki (10) · subversion (4) · fiyo cms (2) |
| Networking Infrastructure▸ 5 | 56 | 9 | 21 | 13 | 63 | 9.3 | ios xe (5) · unity connection (5) · junos (4) |
| Enterprise Software▸ 5 | 54 | 8 | · | 11 | 49 | 6.3 | domino (4) · websphere application server (4) · system management homepage (3) |
| Consumer Software▸ 4 | 51 | 40 | 2 | 10 | 10 | 9.4 | flash player (42) · libreoffice (2) · coldfusion (1) |
| OSS Libraries▸ 5 | 23 | 4 | · | 10 | 20 | 7.2 | curl (4) · libcurl (4) · php (3) |
| Cloud & SaaS▸ 4 | 20 | 1 | · | 7 | 10 | 6.4 | netscaler (4) · spectrum (2) |
| ICS / OT / IoT▸ 2 | 13 | 5 | · | 6 | 9 | 8.9 | ignition (6) · centum vp (1) · integraxor (1) |
| Security Products▸ 4 | 11 | · | · | 8 | 9 | 5.5 | networker (1) · openldap (1) · powerpath virtual appliance (1) |
| Hardware Firmware▸ 1 | 5 | · | · | 2 | 17 | 4.7 | thinkserver system manager baseboard management controller firmware (2) · thinkserver rd350 (1) · thinkserver rd350 firmware (1) |
| DevTools & CI▸ 1 | 4 | · | · | 2 | 2 | 5.5 | drutt mobile service delivery platform (3) · batch jobs (1) |
| Communications▸ 2 | 4 | · | · | 3 | 4 | 4.8 | quassel (2) · hiphop virtual machine (1) |
| Unclassified | 22 | · | · | 18 | 17 | 5.2 | node invite (3) · commerce balanced payments (2) · tadaa\! (2) |
Weakness × Sector
Which weaknesses hit which solution categories in April 2015
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS200Information Exposure264CWE-264352CSRF119Memory Buffer Bounds20Improper Input Validation399CWE-39917CWE-1722Path Traversal284CWE-284Operating Systems12523201931345Consumer Software31112184862Enterprise Software6465611113Web & CMS Plugins26341032OSS Libraries633562121Networking Infrastructure12265378433Databases12ICS / OT / IoT151111Cloud & SaaS1421112Security Products14311