month report
June 2015
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
June 2015 closed with 499 published CVEs. 51 criticals, cisco led volume, mostly via cisco ios. Top weakness class — CWE-79 (86 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
499
— MoM— YoY
Severity mix
51 / 90
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
5.4%
27 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
3915.1
n=27
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2486
n=3
Weakness × Vendor
What's spreading where in June 2015
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
79XSS200Information Exposure399CWE-399119Memory Buffer Bounds352CSRF264CWE-26489SQL Injection22Path Traversal20Improper Input Validation189CWE-189cisco7151521136microsoft2319412microsoft corp2219412ibm53122222packagist752251cisco systems inc.31063moodle652251мартин догиамас652251adobe255112adobe systems inc.255112ibm corp.21211redhat11422
Most discussed CVEs — June 2015
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #6мартин догиамас25 CVE
- #19sysaid9 CVE
- #21xcloner8 CVE
- #22zohocorp8 CVE
- #23igreks7 CVE
- #24libmspack project7 CVE
- #27openssl6 CVE
- #28openssl software foundation6 CVE
- #30w1.fi6 CVE
- #35the linux foundation5 CVE
Top vendors
Ranked by distinct CVE count this period.
- 62 CVECVSS 5.6cisco ios (11) · ios (6) · webex meeting center (6)
- 47 CVE24 critCVSS 7.3KEV 2PoC 8internet explorer (24) · windows server 2012 (14) · windows 7 (13)
- 43 CVE4 critCVSS 5.6PoC 1tivoli storage manager fastback (17) · tivoli directory server (5) · leads (5)
- 28 CVECVSS 4.7Nuclei 1PoC 4moodle/moodle (24) · symfony/http-kernel (2) · symfony/symfony (2)
- 25 CVECVSS 4.5moodle (25)
- 25 CVECVSS 4.5NEWmoodle (25)
- 20 CVE11 critCVSS 7.7KEV 1PoC 3flash player (14) · air sdk (13) · air (13)
- 19 CVE1 critCVSS 6.7PoC 4ubuntu (12) · ubuntu linux (8)
- 19 CVE4 critCVSS 7.7PoC 1tivoli storage manager fastback (17) · business process manager (1) · infosphere information server (1)
- 19 CVE1 critCVSS 6.6KEV 1PoC 6enterprise linux server (14) · enterprise linux desktop (14) · enterprise linux workstation (14)
- 16 CVE6 critCVSS 6.5PoC 2android (12) · chrome (4) · google chrome (4)
- 13 CVE1 critCVSS 6.7PoC 5mac os x (11) · os x (3) · common unix printing system (2)
- 13 CVECVSS 6.5PoC 4debian gnu/linux (13)
- 11 CVECVSS 6.6PoC 4php (11)
- 11 CVECVSS 6.6PoC 4php (11)
- 10 CVE3 critCVSS 6.4KEV 1PoC 1opensuse (9) · evergreen (2)
- 9 CVE1 critCVSS 5.3Nuclei 1PoC 2debian linux (9)
- 9 CVECVSS 6.5PoC 6netweaver abap application server (3) · netweaver java application server (3) · maxdb (2)
- 9 CVECVSS 6.5NEWNuclei 1PoC 9sysaid (9)
- 8 CVECVSS 6.6PoC 2solaris (5) · linux (3) · glassfish server (1)
- 8 CVECVSS 4.9NEWNuclei 8PoC 5xcloner (8)
- 8 CVECVSS 5.0NEWPoC 4manageengine netflow analyzer (4) · manageengine assetexplorer (2) · manageengine supportcenter plus (2)
- 7 CVECVSS 6.3NEWmilkystep light (7) · milkystep professional (7) · milkystep professional oem (7)
- 7 CVECVSS 4.7NEWPoC 3libmspack (7)
- 7 CVECVSS 5.0com.ning:async-http-client (2) · org.apache.camel:camel-core (2) · org.apache.tomcat:tomcat (2)
- 6 CVE1 critCVSS 8.0KEV 1PoC 2system management homepage (3) · insight orchestration (1) · smart zero core (1)
- 6 CVECVSS 6.0NEWopenssl (6)
- 6 CVECVSS 6.0NEWopenssl (6)
- 6 CVECVSS 6.2player (6) · workstation (6) · fusion (6)
- 6 CVECVSS 4.8NEWhostapd (6) · wpa supplicant (6)
- 5 CVECVSS 5.2camel (2) · tomcat (2) · sling servlets post (1)
- 5 CVE2 critCVSS 7.3documentum d2 (1) · documentum thumbnail server (1) · rsa validation manager (1)
- 5 CVECVSS 6.3PoC 1fedora (5)
- 5 CVE1 critCVSS 5.7PoC 1opensuse (4) · zenworks configuration management (1)
- 5 CVECVSS 5.5NEWxen (5)
- 5 CVECVSS 5.5xen (5)
- 4 CVECVSS 5.5PoC 4omniswitch firmware (2) · cellpipe 7130 rg 5ae.m2013 hol firmware (1) · cellpipe 7130 router firmware (1)
- 4 CVECVSS 5.0drupal (4)
- 4 CVECVSS 4.7NEWhostapd (4) · wpa supplicant (4)
- 4 CVE2 critCVSS 8.6PoC 1linux kernel (4)
- 4 CVECVSS 4.0ceph-deploy (2) · cinder (1) · django (1)
- 3 CVECVSS 6.6vmware fusion (1) · vmware workstation (1) · vmware workstation player (1)
- 3 CVECVSS 4.6client automation (3) · network and systems management (3) · nsm job management option (3)
- 3 CVECVSS 6.4PoC 1cacti (3)
- 3 CVE3 critCVSS 10.0PoC 3zenworks configuration management (3)
- 3 CVECVSS 6.0NEWomnissa horizon client (3)
- 3 CVECVSS 5.7NEWregistration codes (3)
- 3 CVE1 critCVSS 7.0KEV 1linux enterprise desktop (3) · linux enterprise server (2) · linux enterprise software development kit (2)
- 3 CVECVSS 6.1NEWNuclei 3PoC 3slider revolution (3) · showbiz pro (1)
- 3 CVECVSS 5.8NEWweb-dorado spider video player (2) · spider catalog (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | cisco | 62 | · | · | · | cisco ios (11) · ios (6) · webex meeting center (6) | — | ||
| 2 | microsoft | 47 | 24 | 2 | · | KEV 2PoC 8 | internet explorer (24) · windows server 2012 (14) · windows 7 (13) | — | |
| 3 | ibm | 43 | 4 | · | · | PoC 1 | tivoli storage manager fastback (17) · tivoli directory server (5) · leads (5) | — | |
| 4 | packagist | 28 | · | · | 1 | Nuclei 1PoC 4 | moodle/moodle (24) · symfony/http-kernel (2) · symfony/symfony (2) | — | |
| 5 | moodle | 25 | · | · | · | moodle (25) | — | ||
| 6 | мартин догиамас | 25 | · | · | · | NEW | moodle (25) | — | |
| 7 | adobe | 20 | 11 | 1 | · | KEV 1PoC 3 | flash player (14) · air sdk (13) · air (13) | — | |
| 8 | canonical | 19 | 1 | · | · | PoC 4 | ubuntu (12) · ubuntu linux (8) | — | |
| 9 | ibm corp. | 19 | 4 | · | · | PoC 1 | tivoli storage manager fastback (17) · business process manager (1) · infosphere information server (1) | — | |
| 10 | redhat | 19 | 1 | 1 | · | KEV 1PoC 6 | enterprise linux server (14) · enterprise linux desktop (14) · enterprise linux workstation (14) | — | |
| 11 | 16 | 6 | · | · | PoC 2 | android (12) · chrome (4) · google chrome (4) | — | ||
| 12 | apple | 13 | 1 | · | · | PoC 5 | mac os x (11) · os x (3) · common unix printing system (2) | — | |
| 13 | сообщество свободного программного обеспечения | 13 | · | · | · | PoC 4 | debian gnu/linux (13) | — | |
| 14 | php | 11 | · | · | · | PoC 4 | php (11) | — | |
| 15 | php group | 11 | · | · | · | PoC 4 | php (11) | — | |
| 16 | opensuse | 10 | 3 | 1 | · | KEV 1PoC 1 | opensuse (9) · evergreen (2) | — | |
| 17 | debian | 9 | 1 | · | 1 | Nuclei 1PoC 2 | debian linux (9) | — | |
| 18 | sap | 9 | · | · | · | PoC 6 | netweaver abap application server (3) · netweaver java application server (3) · maxdb (2) | — | |
| 19 | sysaid | 9 | · | · | 1 | NEWNuclei 1PoC 9 | sysaid (9) | — | |
| 20 | oracle | 8 | · | · | · | PoC 2 | solaris (5) · linux (3) · glassfish server (1) | — | |
| 21 | xcloner | 8 | · | · | 8 | NEWNuclei 8PoC 5 | xcloner (8) | — | |
| 22 | zohocorp | 8 | · | · | · | NEWPoC 4 | manageengine netflow analyzer (4) · manageengine assetexplorer (2) · manageengine supportcenter plus (2) | — | |
| 23 | igreks | 7 | · | · | · | NEW | milkystep light (7) · milkystep professional (7) · milkystep professional oem (7) | — | |
| 24 | libmspack project | 7 | · | · | · | NEWPoC 3 | libmspack (7) | — | |
| 25 | maven | 7 | · | · | · | com.ning:async-http-client (2) · org.apache.camel:camel-core (2) · org.apache.tomcat:tomcat (2) | — | ||
| 26 | hp | 6 | 1 | 1 | · | KEV 1PoC 2 | system management homepage (3) · insight orchestration (1) · smart zero core (1) | — | |
| 27 | openssl | 6 | · | · | · | NEW | openssl (6) | — | |
| 28 | openssl software foundation | 6 | · | · | · | NEW | openssl (6) | — | |
| 29 | vmware | 6 | · | · | · | player (6) · workstation (6) · fusion (6) | — | ||
| 30 | w1.fi | 6 | · | · | · | NEW | hostapd (6) · wpa supplicant (6) | — | |
| 31 | apache | 5 | · | · | · | camel (2) · tomcat (2) · sling servlets post (1) | — | ||
| 32 | emc | 5 | 2 | · | · | documentum d2 (1) · documentum thumbnail server (1) · rsa validation manager (1) | — | ||
| 33 | fedoraproject | 5 | · | · | · | PoC 1 | fedora (5) | — | |
| 34 | novell inc. | 5 | 1 | · | · | PoC 1 | opensuse (4) · zenworks configuration management (1) | — | |
| 35 | the linux foundation | 5 | · | · | · | NEW | xen (5) | — | |
| 36 | xen | 5 | · | · | · | xen (5) | — | ||
| 37 | alcatel-lucent | 4 | · | · | · | PoC 4 | omniswitch firmware (2) · cellpipe 7130 rg 5ae.m2013 hol firmware (1) · cellpipe 7130 router firmware (1) | — | |
| 38 | drupal | 4 | · | · | · | drupal (4) | — | ||
| 39 | jouni malinen | 4 | · | · | · | NEW | hostapd (4) · wpa supplicant (4) | — | |
| 40 | linux | 4 | 2 | · | · | PoC 1 | linux kernel (4) | — | |
| 41 | pypi | 4 | · | · | · | ceph-deploy (2) · cinder (1) · django (1) | — | ||
| 42 | broadcom inc. | 3 | · | · | · | vmware fusion (1) · vmware workstation (1) · vmware workstation player (1) | — | ||
| 43 | ca | 3 | · | · | · | client automation (3) · network and systems management (3) · nsm job management option (3) | — | ||
| 44 | cacti | 3 | · | · | · | PoC 1 | cacti (3) | — | |
| 45 | novell | 3 | 3 | · | · | PoC 3 | zenworks configuration management (3) | — | |
| 46 | omnissa | 3 | · | · | · | NEW | omnissa horizon client (3) | — | |
| 47 | registration codes project | 3 | · | · | · | NEW | registration codes (3) | — | |
| 48 | suse | 3 | 1 | 1 | · | KEV 1 | linux enterprise desktop (3) · linux enterprise server (2) · linux enterprise software development kit (2) | — | |
| 49 | themepunch | 3 | · | · | 3 | NEWNuclei 3PoC 3 | slider revolution (3) · showbiz pro (1) | — | |
| 50 | web-dorado | 3 | · | · | · | NEW | web-dorado spider video player (2) · spider catalog (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems99 CVE85 crit30 KEV17 vendorsCVSS 7.3enterprise linux desktop (14) · enterprise linux server (14) · enterprise linux workstation (14)
- Enterprise Software93 CVE10 crit6 KEV18 vendorsCVSS 6.8tivoli storage manager fastback (17) · sysaid (9) · leads (5)
- OSS Libraries84 CVE1 crit26 vendorsCVSS 5.9php (22) · openssl (12) · libmspack (7)
- Web & CMS Plugins75 CVE34 vendorsCVSS 6.0moodle (50) · drupal (4) · camel (2)
- 10 vendorsCVSS 7.5cisco ios (12) · nx-os (8) · ios (6)
- Databases32 CVE5 crit7 vendorsCVSS 10.0tivoli storage manager fastback (17) · solaris (6) · linux (3)
- Mobile Apps31 CVE7 crit5 vendorsCVSS 6.7android (12) · chrome (4) · google chrome (4)
- Consumer Software29 CVE43 crit2 KEV4 vendorsCVSS 7.7flash player (21) · air (13) · air sdk (13)
- Cloud & SaaS23 CVE11 vendorsCVSS 6.8fusion (6) · player (6) · workstation (6)
- Security Products14 CVE2 crit8 vendorsCVSS 7.5documentum d2 (1) · documentum thumbnail server (1) · rsa validation manager (1)
- ICS / OT / IoT11 CVE1 crit5 vendorsCVSS 6.7milkystep light (7) · milkystep professional (7) · milkystep professional oem (7)
- Hardware Firmware7 CVE4 crit4 vendorsCVSS 8.1ceph-deploy (2) · emc unisphere (1) · unified infrastructure manager (1)
- Communications6 CVE3 vendorsCVSS 5.5omniswitch firmware (2) · cellpipe 7130 rg 5ae.m2013 hol firmware (1) · cellpipe 7130 router firmware (1)
- DevTools & CI3 CVE1 crit2 vendorsCVSS 10.0ctools (2)
- Unclassified36 CVE29 vendorsCVSS 5.7registration codes (3) · slider revolution (3) · audioshare (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 4 | 99 | 85 | 30 | 17 | 65 | 7.3 | enterprise linux desktop (14) · enterprise linux server (14) · enterprise linux workstation (14) |
| Enterprise Software▸ 5 | 93 | 10 | 6 | 18 | 73 | 6.8 | tivoli storage manager fastback (17) · sysaid (9) · leads (5) |
| OSS Libraries▸ 6 | 84 | 1 | · | 26 | 37 | 5.9 | php (22) · openssl (12) · libmspack (7) |
| Web & CMS Plugins▸ 5 | 75 | · | · | 34 | 37 | 6.0 | moodle (50) · drupal (4) · camel (2) |
| Networking Infrastructure▸ 4 | 73 | · | · | 10 | 61 | 7.5 | cisco ios (12) · nx-os (8) · ios (6) |
| Databases▸ 3 | 32 | 5 | · | 7 | 14 | 10.0 | tivoli storage manager fastback (17) · solaris (6) · linux (3) |
| Mobile Apps▸ 2 | 31 | 7 | · | 5 | 7 | 6.7 | android (12) · chrome (4) · google chrome (4) |
| Consumer Software▸ 2 | 29 | 43 | 2 | 4 | 13 | 7.7 | flash player (21) · air (13) · air sdk (13) |
| Cloud & SaaS▸ 4 | 23 | · | · | 11 | 19 | 6.8 | fusion (6) · player (6) · workstation (6) |
| Security Products▸ 3 | 14 | 2 | · | 8 | 12 | 7.5 | documentum d2 (1) · documentum thumbnail server (1) · rsa validation manager (1) |
| ICS / OT / IoT▸ 3 | 11 | 1 | · | 5 | 7 | 6.7 | milkystep light (7) · milkystep professional (7) · milkystep professional oem (7) |
| Hardware Firmware▸ 2 | 7 | 4 | · | 4 | 18 | 8.1 | ceph-deploy (2) · emc unisphere (1) · unified infrastructure manager (1) |
| Communications▸ 2 | 6 | · | · | 3 | 5 | 5.5 | omniswitch firmware (2) · cellpipe 7130 rg 5ae.m2013 hol firmware (1) · cellpipe 7130 router firmware (1) |
| DevTools & CI▸ 2 | 3 | 1 | · | 2 | 2 | 10.0 | ctools (2) |
| Unclassified | 36 | · | · | 29 | 30 | 5.7 | registration codes (3) · slider revolution (3) · audioshare (2) |
Weakness × Sector
Which weaknesses hit which solution categories in June 2015
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS200Information Exposure399CWE-399119Memory Buffer Bounds352CSRF264CWE-26489SQL Injection22Path Traversal20Improper Input Validation189CWE-189OSS Libraries101141473268Web & CMS Plugins34921181162Operating Systems710218312335Enterprise Software12521552584Networking Infrastructure71617431236Consumer Software68195151312Databases331153223Cloud & SaaS11821ICS / OT / IoT21111211Security Products441