month report
May 2015
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
May 2015 closed with 417 published CVEs. 99 criticals, microsoft led volume, mostly via windows. Top weakness class — CWE-119 (63 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
417
— MoM— YoY
Severity mix
99 / 70
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
4.3%
18 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
3939.1
n=18
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2569
n=3
Weakness × Vendor
What's spreading where in May 2015
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
119Memory Buffer Bounds79XSS200Information Exposure264CWE-264399CWE-399284CWE-28420Improper Input Validation89SQL Injection352CSRF189CWE-189microsoft28118141adobe1634141apple1222141cisco933921015ibm469243112adobe systems inc.15141debian331221111microsoft corp15google211111google inc211111canonical11141ibm corp.4311121
Most discussed CVEs — May 2015
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #20blue coat5 CVE
- #23clamav4 CVE
- #24docker4 CVE
- #26go4 CVE
- #27goautodial4 CVE
- #28huawei4 CVE
- #29digia3 CVE
- #30kozos3 CVE
- #31lenovo3 CVE
- #32module-signature project3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 78 CVE53 critCVSS 7.4KEV 1PoC 2windows (32) · internet explorer (23) · windows server 2012 (15)
- 49 CVE39 critCVSS 9.1PoC 9acrobat reader (32) · acrobat (32) · adobe acrobat (18)
- 43 CVE29 critCVSS 8.0PoC 2mac os x (37) · iphone os (7) · safari (6)
- 41 CVE2 critCVSS 6.5headend digital broadband delivery system (6) · headend system release (4) · wireless lan controller software (2)
- 39 CVE5 critCVSS 5.2license metric tool (6) · security siteprotector system (6) · endpoint manager family (5)
- 32 CVE1 critCVSS 6.0PoC 2debian linux (32)
- 19 CVECVSS 6.7PoC 1chrome (19) · google chrome (17) · google v8 (1)
- 18 CVE2 critCVSS 6.3PoC 1ubuntu linux (17) · ubuntu (2)
- 17 CVE5 critCVSS 6.6security siteprotector system (6) · ibm domino (2) · ibm webshpere portal (2)
- 14 CVECVSS 6.2firefox (14) · thunderbird (6) · firefox esr (5)
- 14 CVECVSS 6.3PoC 2opensuse (14)
- 12 CVE1 critCVSS 6.0PoC 2fedora (12)
- 11 CVECVSS 4.6PoC 1solaris (9) · linux (4) · enterprise manager ops center (2)
- 10 CVECVSS 6.7PoC 2enterprise linux server supplementary eus (2) · enterprise linux workstation supplementary (2) · enterprise linux desktop supplementary (2)
- 9 CVECVSS 6.2wireshark (9)
- 8 CVE1 critCVSS 5.5linux kernel (8)
- 8 CVECVSS 6.0PoC 3customer relationship management (2) · hana (2) · sybase unwired platform online data proxy (1)
- 7 CVE2 critCVSS 7.4access control (1) · hewlett-packard virtual application network software-defined networking controller (1) · hp access control (1)
- 6 CVE2 critCVSS 6.0PoC 1clearpass policy manager (6)
- 5 CVECVSS 4.8NEWssl visibility appliance sv1800 firmware (5) · ssl visibility appliance sv800 firmware (5) · ssl visibility appliance sv3800 firmware (5)
- 5 CVECVSS 4.3Nuclei 1PoC 1fortios (2) · fortiadc-700d (1) · fortiadc firmware (1)
- 5 CVECVSS 7.2suse linux enterprise desktop (5) · suse linux enterprise server (5) · suse linux enterprise software development kit (5)
- 4 CVECVSS 5.0NEWclamav (4)
- 4 CVECVSS 6.6NEWPoC 4docker (3) · libcontainer (2)
- 4 CVE1 critCVSS 7.1PoC 3document sciences xpression (1) · rsa identity management and governance (1) · autostart (1)
- 4 CVECVSS 6.5NEWPoC 4github.com/docker/docker (4)
- 4 CVE3 critCVSS 9.4NEWPoC 4goadmin ce (4)
- 4 CVE1 critCVSS 5.5NEWPoC 2seq analyst (2) · webui (1) · e355s mobile wifi firmware (1)
- 3 CVECVSS 6.8NEWqt (3)
- 3 CVECVSS 5.0NEWeasyctf (3)
- 3 CVECVSS 7.5NEWsystem update (3)
- 3 CVE1 critCVSS 7.4NEWmodule-signature (3)
- 3 CVECVSS 6.2NEWoscmax (3)
- 3 CVECVSS 6.8NEWqt (3)
- 3 CVECVSS 5.3linux enterprise desktop (2) · linux enterprise server (2) · linux enterprise software development kit (2)
- 3 CVECVSS 4.2NEWNuclei 3PoC 3thecartpress ecommerce shopping cart (3)
- 3 CVECVSS 5.1NEWycb001 firmware (3) · ycb002 firmware (3) · ycb003 firmware (3)
- 2 CVE1 critCVSS 8.4NEWKEV 1udp (1) · arcserve unified data protection (1)
- 2 CVECVSS 4.3NEWweb filter (2)
- 2 CVECVSS 4.3NEWPoC 1concrete5 (2)
- 2 CVECVSS 4.7NEWPoC 2coppermine photo gallery (2)
- 2 CVECVSS 6.7PoC 1big-ip application acceleration manager (2) · big-ip application security manager (2) · big-ip global traffic manager (2)
- 2 CVECVSS 5.5NEWPoC 1pacemaker configuration system (2)
- 2 CVECVSS 4.3Nuclei 1fortios (2)
- 2 CVECVSS 4.7NEWPoC 1enterprise reader (2) · foxit reader (2) · phantompdf (2)
- 2 CVECVSS 4.7NEWPoC 1pdf reader (2)
- 2 CVECVSS 7.5NEWPoC 1international components for unicode (2)
- 2 CVECVSS 7.5NEWPoC 1international components for unicode (2)
- 2 CVE2 critCVSS 9.7NEWPoC 2in3128hd firmware (2)
- 2 CVECVSS 4.3NEWwebodf (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 78 | 53 | 1 | · | KEV 1PoC 2 | windows (32) · internet explorer (23) · windows server 2012 (15) | — | |
| 2 | adobe | 49 | 39 | · | · | PoC 9 | acrobat reader (32) · acrobat (32) · adobe acrobat (18) | — | |
| 3 | apple | 43 | 29 | · | · | PoC 2 | mac os x (37) · iphone os (7) · safari (6) | — | |
| 4 | cisco | 41 | 2 | · | · | headend digital broadband delivery system (6) · headend system release (4) · wireless lan controller software (2) | — | ||
| 5 | ibm | 39 | 5 | · | · | license metric tool (6) · security siteprotector system (6) · endpoint manager family (5) | — | ||
| 6 | debian | 32 | 1 | · | · | PoC 2 | debian linux (32) | — | |
| 7 | 19 | · | · | · | PoC 1 | chrome (19) · google chrome (17) · google v8 (1) | — | ||
| 8 | canonical | 18 | 2 | · | · | PoC 1 | ubuntu linux (17) · ubuntu (2) | — | |
| 9 | ibm corp. | 17 | 5 | · | · | security siteprotector system (6) · ibm domino (2) · ibm webshpere portal (2) | — | ||
| 10 | mozilla | 14 | · | · | · | firefox (14) · thunderbird (6) · firefox esr (5) | — | ||
| 11 | opensuse | 14 | · | · | · | PoC 2 | opensuse (14) | — | |
| 12 | fedoraproject | 12 | 1 | · | · | PoC 2 | fedora (12) | — | |
| 13 | oracle | 11 | · | · | · | PoC 1 | solaris (9) · linux (4) · enterprise manager ops center (2) | — | |
| 14 | redhat | 10 | · | · | · | PoC 2 | enterprise linux server supplementary eus (2) · enterprise linux workstation supplementary (2) · enterprise linux desktop supplementary (2) | — | |
| 15 | wireshark | 9 | · | · | · | wireshark (9) | — | ||
| 16 | linux | 8 | 1 | · | · | linux kernel (8) | — | ||
| 17 | sap | 8 | · | · | · | PoC 3 | customer relationship management (2) · hana (2) · sybase unwired platform online data proxy (1) | — | |
| 18 | hp | 7 | 2 | · | · | access control (1) · hewlett-packard virtual application network software-defined networking controller (1) · hp access control (1) | — | ||
| 19 | arubanetworks | 6 | 2 | · | · | PoC 1 | clearpass policy manager (6) | — | |
| 20 | blue coat | 5 | · | · | · | NEW | ssl visibility appliance sv1800 firmware (5) · ssl visibility appliance sv800 firmware (5) · ssl visibility appliance sv3800 firmware (5) | — | |
| 21 | fortinet | 5 | · | · | 1 | Nuclei 1PoC 1 | fortios (2) · fortiadc-700d (1) · fortiadc firmware (1) | — | |
| 22 | novell | 5 | · | · | · | suse linux enterprise desktop (5) · suse linux enterprise server (5) · suse linux enterprise software development kit (5) | — | ||
| 23 | clamav | 4 | · | · | · | NEW | clamav (4) | — | |
| 24 | docker | 4 | · | · | · | NEWPoC 4 | docker (3) · libcontainer (2) | — | |
| 25 | emc | 4 | 1 | · | · | PoC 3 | document sciences xpression (1) · rsa identity management and governance (1) · autostart (1) | — | |
| 26 | go | 4 | · | · | · | NEWPoC 4 | github.com/docker/docker (4) | — | |
| 27 | goautodial | 4 | 3 | · | · | NEWPoC 4 | goadmin ce (4) | — | |
| 28 | huawei | 4 | 1 | · | · | NEWPoC 2 | seq analyst (2) · webui (1) · e355s mobile wifi firmware (1) | — | |
| 29 | digia | 3 | · | · | · | NEW | qt (3) | — | |
| 30 | kozos | 3 | · | · | · | NEW | easyctf (3) | — | |
| 31 | lenovo | 3 | · | · | · | NEW | system update (3) | — | |
| 32 | module-signature project | 3 | 1 | · | · | NEW | module-signature (3) | — | |
| 33 | oscmax | 3 | · | · | · | NEW | oscmax (3) | — | |
| 34 | qt | 3 | · | · | · | NEW | qt (3) | — | |
| 35 | suse | 3 | · | · | · | linux enterprise desktop (2) · linux enterprise server (2) · linux enterprise software development kit (2) | — | ||
| 36 | thecartpress | 3 | · | · | 3 | NEWNuclei 3PoC 3 | thecartpress ecommerce shopping cart (3) | — | |
| 37 | y-cam | 3 | · | · | · | NEW | ycb001 firmware (3) · ycb002 firmware (3) · ycb003 firmware (3) | — | |
| 38 | arcserve | 2 | 1 | 1 | · | NEWKEV 1 | udp (1) · arcserve unified data protection (1) | — | |
| 39 | barracuda | 2 | · | · | · | NEW | web filter (2) | — | |
| 40 | concrete5 | 2 | · | · | · | NEWPoC 1 | concrete5 (2) | — | |
| 41 | coppermine-gallery | 2 | · | · | · | NEWPoC 2 | coppermine photo gallery (2) | — | |
| 42 | f5 | 2 | · | · | · | PoC 1 | big-ip application acceleration manager (2) · big-ip application security manager (2) · big-ip global traffic manager (2) | — | |
| 43 | fedora | 2 | · | · | · | NEWPoC 1 | pacemaker configuration system (2) | — | |
| 44 | fortinet inc. | 2 | · | · | 1 | Nuclei 1 | fortios (2) | — | |
| 45 | foxitsoftware | 2 | · | · | · | NEWPoC 1 | enterprise reader (2) · foxit reader (2) · phantompdf (2) | — | |
| 46 | foxit software inc. | 2 | · | · | · | NEWPoC 1 | pdf reader (2) | — | |
| 47 | icu project | 2 | · | · | · | NEWPoC 1 | international components for unicode (2) | — | |
| 48 | icu-project | 2 | · | · | · | NEWPoC 1 | international components for unicode (2) | — | |
| 49 | infocus | 2 | 2 | · | · | NEWPoC 2 | in3128hd firmware (2) | — | |
| 50 | kogmbh | 2 | · | · | · | NEW | webodf (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems150 CVE178 crit16 KEV17 vendorsCVSS 7.4internet explorer (37) · windows (32) · windows 8 (21)
- Consumer Software67 CVE136 crit9 vendorsCVSS 8.9acrobat (32) · acrobat reader (32) · flash player (22)
- Mobile Apps67 CVE31 crit6 vendorsCVSS 8.0mac os x (37) · iphone os (7) · itunes (6)
- 68 crit48 KEV17 vendorsCVSS 7.9headend digital broadband delivery system (6) · headend system release (4) · telepresence te software (3)
- Enterprise Software62 CVE13 crit1 KEV11 vendorsCVSS 6.0license metric tool (6) · security siteprotector system (6) · endpoint manager family (5)
- Databases33 CVE6 crit8 vendorsCVSS 10.0solaris (9) · security siteprotector system (6) · linux (4)
- Security Products33 CVE2 crit13 vendorsCVSS 7.1wireshark (9) · milw0rm clone script (1) · suricata (1)
- Web & CMS Plugins29 CVE1 crit18 vendorsCVSS 6.0concrete5 (2) · coppermine photo gallery (2) · template cms (2)
- OSS Libraries28 CVE2 crit21 vendorsCVSS 6.5qt (6) · international components for unicode (4) · nbd (2)
- Cloud & SaaS11 CVE6 vendorsCVSS 7.8docker (3) · libcontainer (2) · xen (1)
- Hardware Firmware10 CVE7 crit5 KEV8 vendorsCVSS 10.0system update (3)
- ICS / OT / IoT9 CVE1 crit7 vendorsCVSS 10.0rsview32 (2) · ams device manager (1) · pi server (1)
- Communications7 CVE5 crit3 vendorsCVSS 9.6goadmin ce (4) · connectpro (1) · terminal emulation (1)
- Unclassified16 CVE6 crit10 vendorsCVSS 7.6easyctf (3) · module-signature (3) · in3128hd firmware (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 150 | 178 | 16 | 17 | 75 | 7.4 | internet explorer (37) · windows (32) · windows 8 (21) |
| Consumer Software▸ 3 | 67 | 136 | · | 9 | 25 | 8.9 | acrobat (32) · acrobat reader (32) · flash player (22) |
| Mobile Apps▸ 2 | 67 | 31 | · | 6 | 17 | 8.0 | mac os x (37) · iphone os (7) · itunes (6) |
| Networking Infrastructure▸ 5 | 64 | 68 | 48 | 17 | 113 | 7.9 | headend digital broadband delivery system (6) · headend system release (4) · telepresence te software (3) |
| Enterprise Software▸ 3 | 62 | 13 | 1 | 11 | 55 | 6.0 | license metric tool (6) · security siteprotector system (6) · endpoint manager family (5) |
| Databases▸ 4 | 33 | 6 | · | 8 | 19 | 10.0 | solaris (9) · security siteprotector system (6) · linux (4) |
| Security Products▸ 5 | 33 | 2 | · | 13 | 46 | 7.1 | wireshark (9) · milw0rm clone script (1) · suricata (1) |
| Web & CMS Plugins▸ 5 | 29 | 1 | · | 18 | 18 | 6.0 | concrete5 (2) · coppermine photo gallery (2) · template cms (2) |
| OSS Libraries▸ 6 | 28 | 2 | · | 21 | 22 | 6.5 | qt (6) · international components for unicode (4) · nbd (2) |
| Cloud & SaaS▸ 3 | 11 | · | · | 6 | 10 | 7.8 | docker (3) · libcontainer (2) · xen (1) |
| Hardware Firmware▸ 5 | 10 | 7 | 5 | 8 | 10 | 10.0 | system update (3) |
| ICS / OT / IoT▸ 4 | 9 | 1 | · | 7 | 26 | 10.0 | rsview32 (2) · ams device manager (1) · pi server (1) |
| Communications▸ 2 | 7 | 5 | · | 3 | 4 | 9.6 | goadmin ce (4) · connectpro (1) · terminal emulation (1) |
| Unclassified | 16 | 6 | · | 10 | 11 | 7.6 | easyctf (3) · module-signature (3) · in3128hd firmware (2) |
Weakness × Sector
Which weaknesses hit which solution categories in May 2015
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds79XSS200Information Exposure264CWE-264399CWE-399284CWE-28420Improper Input Validation89SQL Injection352CSRF189CWE-189Operating Systems264119916315Consumer Software4018131524Networking Infrastructure2117414412273OSS Libraries124773213Enterprise Software74102432231Web & CMS Plugins1161174Security Products62353Databases23411221Communications4112ICS / OT / IoT211112