month report
July 2015
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
July 2015 closed with 644 published CVEs. 126 criticals, oracle led volume, mostly via solaris. Biggest breakout: adobe at ×28.3 their 12-month median. Top weakness class — CWE-119 (108 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
644
— MoM— YoY
Severity mix
126 / 99
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.4%
9 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
3894.2
n=9
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2443
n=9
Weakness × Vendor
What's spreading where in July 2015
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
119Memory Buffer Bounds200Information Exposure79XSS20Improper Input Validation264CWE-264284CWE-284399CWE-399352CSRF254CWE-25417CWE-17oracle621216adobe20716oracle corp.adobe systems inc.205apple386115517microsoft261113721cisco1157611411microsoft corp251011621debian81121237opensuse7321133canonical61115redhat4111232
Most discussed CVEs — July 2015
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #20dell technologies5 CVE
- #21hospira5 CVE
- #25wvware4 CVE
- #29hospira inc.3 CVE
- #30lemon-s php3 CVE
- #33webservice-dic3 CVE
- #34antlabs2 CVE
- #35centreon2 CVE
- #36dhcpcd project2 CVE
- #37django software foundation2 CVE
Top vendors
Ranked by distinct CVE count this period.
- 176 CVE22 critCVSS 5.7KEV 1PoC 1solaris (40) · berkeley db (25) · fusion middleware (24)
- 85 CVE58 critCVSS 8.7×28.3KEV 3PoC 6acrobat dc (45) · acrobat (45) · acrobat reader (45)
- 72 CVE8 critCVSS 6.6PoC 2mac os x (63) · iphone os (22) · quicktime (10)
- 60 CVE25 critCVSS 6.6KEV 5PoC 5internet explorer (28) · windows server 2012 (18) · windows 8.1 (16)
- 55 CVE2 critCVSS 5.8nx-os (5) · adaptive security appliance (4) · adaptive security appliance software (4)
- 47 CVE10 critCVSS 6.5KEV 1PoC 2debian linux (46) · unattended-upgrades (1)
- 38 CVE6 critCVSS 6.4×3.2KEV 4PoC 4opensuse (35) · evergreen (4) · openstack cloud (1)
- 36 CVE9 critCVSS 6.0KEV 1ubuntu linux (36) · ubuntu (2)
- 33 CVE6 critCVSS 6.6KEV 4PoC 2enterprise linux workstation supplementary (18) · enterprise linux server supplementary (18) · enterprise linux desktop supplementary (18)
- 28 CVE2 critCVSS 4.7db2 (5) · infosphere master data management (4) · websphere application server (3)
- 22 CVE1 critCVSS 6.6chrome (21) · google chrome (13) · v8 (1)
- 21 CVE13 critCVSS 8.9firefox (19) · firefox esr (16) · thunderbird (11)
- 15 CVE1 critCVSS 5.0×15.0ibm db2 (4) · websphere application server (3) · business process manager (3)
- 14 CVE9 critCVSS 8.5suse linux enterprise desktop (13) · suse linux enterprise server (13) · suse linux enterprise software development kit (11)
- 11 CVE2 critCVSS 5.7documentum digital asset manager (3) · documentum taskspace (3) · documentum administrator (3)
- 10 CVE8 critCVSS 9.2KEV 4PoC 2linux enterprise desktop (8) · linux enterprise server (6) · linux enterprise software development kit (5)
- 8 CVE1 critCVSS 6.3junos (7) · junos space (1)
- 7 CVECVSS 5.0Nuclei 1PoC 4activesupport (2) · jquery-ujs (1) · paperclip (1)
- 6 CVECVSS 4.0mariadb (6)
- 5 CVE1 critCVSS 5.4NEWemc documentum taskspace (3) · emc documentum administrator (3) · emc documentum digital asset management (3)
- 5 CVE1 critCVSS 6.5NEWlifecare pcainfusion firmware (5) · lifecare pca3 (1) · lifecare pca infusion system (1)
- 4 CVECVSS 5.5http server (3) · struts (1)
- 4 CVECVSS 4.7Nuclei 1PoC 2rails (2) · jquery-ujs (1) · jquery-rails (1)
- 4 CVE1 critCVSS 6.6PoC 2sap netweaver (2) · enterprise central component (1) · afaria (1)
- 4 CVECVSS 5.7NEWPoC 2libwmf (4)
- 3 CVECVSS 4.8http server (3)
- 3 CVECVSS 6.6django (3)
- 3 CVECVSS 6.2PoC 1fedora (3)
- 3 CVE1 critCVSS 6.5NEWlifecare pca infusion system (3)
- 3 CVECVSS 5.2NEWgazou bbs plus (1) · simple oekaki (1) · simple oekaki bbs (1)
- 3 CVECVSS 6.2PoC 3pivotx (3)
- 3 CVECVSS 6.6django (3)
- 3 CVECVSS 6.7NEWyoyaku (3)
- 2 CVECVSS 5.9NEWinngate ig 3100 (2) · inngate ig 3.01 e (2) · inngate ig 3.10 e (2)
- 2 CVECVSS 7.0NEWPoC 2centreon (2)
- 2 CVECVSS 6.8NEWdhcpcd (2)
- 2 CVECVSS 6.0NEWdjango (2)
- 2 CVECVSS 6.3NEWNuclei 2PoC 2easy2map (2)
- 2 CVECVSS 5.5NEWPoC 2articlefr (2)
- 2 CVECVSS 4.3PoC 1getsimple cms (2)
- 2 CVECVSS 5.9tuxedo touch (2)
- 2 CVECVSS 6.6hp-ux (1) · hp system management homepage (1) · system management homepage (1)
- 2 CVECVSS 7.8PoC 1bind (2)
- 2 CVECVSS 4.2NEWNuclei 1virtual system administrator (2)
- 2 CVECVSS 7.5cups-filters (2)
- 2 CVECVSS 5.9edu.internet2.middleware:shibboleth-identityprovider (1) · org.apache.struts:struts2-core (1) · org.opensaml:opensaml (1)
- 2 CVECVSS 6.7NEWNuclei 1PoC 2novius os (2)
- 2 CVECVSS 5.4PoC 1openssl (2)
- 2 CVECVSS 5.4NEWPoC 1openssl (2)
- 2 CVECVSS 6.5PoC 2impresscms/impresscms (1) · centreon/centreon (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 176 | 22 | 1 | · | KEV 1PoC 1 | solaris (40) · berkeley db (25) · fusion middleware (24) | — | |
| 2 | adobe | 85 | 58 | 3 | · | ×28.3KEV 3PoC 6 | acrobat dc (45) · acrobat (45) · acrobat reader (45) | — | |
| 3 | apple | 72 | 8 | · | · | PoC 2 | mac os x (63) · iphone os (22) · quicktime (10) | — | |
| 4 | microsoft | 60 | 25 | 5 | · | KEV 5PoC 5 | internet explorer (28) · windows server 2012 (18) · windows 8.1 (16) | — | |
| 5 | cisco | 55 | 2 | · | · | nx-os (5) · adaptive security appliance (4) · adaptive security appliance software (4) | — | ||
| 6 | debian | 47 | 10 | 1 | · | KEV 1PoC 2 | debian linux (46) · unattended-upgrades (1) | — | |
| 7 | opensuse | 38 | 6 | 4 | · | ×3.2KEV 4PoC 4 | opensuse (35) · evergreen (4) · openstack cloud (1) | — | |
| 8 | canonical | 36 | 9 | 1 | · | KEV 1 | ubuntu linux (36) · ubuntu (2) | — | |
| 9 | redhat | 33 | 6 | 4 | · | KEV 4PoC 2 | enterprise linux workstation supplementary (18) · enterprise linux server supplementary (18) · enterprise linux desktop supplementary (18) | — | |
| 10 | ibm | 28 | 2 | · | · | db2 (5) · infosphere master data management (4) · websphere application server (3) | — | ||
| 11 | 22 | 1 | · | · | chrome (21) · google chrome (13) · v8 (1) | — | |||
| 12 | mozilla | 21 | 13 | · | · | firefox (19) · firefox esr (16) · thunderbird (11) | — | ||
| 13 | ibm corp. | 15 | 1 | · | · | ×15.0 | ibm db2 (4) · websphere application server (3) · business process manager (3) | — | |
| 14 | novell | 14 | 9 | · | · | suse linux enterprise desktop (13) · suse linux enterprise server (13) · suse linux enterprise software development kit (11) | — | ||
| 15 | emc | 11 | 2 | · | · | documentum digital asset manager (3) · documentum taskspace (3) · documentum administrator (3) | — | ||
| 16 | suse | 10 | 8 | 4 | · | KEV 4PoC 2 | linux enterprise desktop (8) · linux enterprise server (6) · linux enterprise software development kit (5) | — | |
| 17 | juniper | 8 | 1 | · | · | junos (7) · junos space (1) | — | ||
| 18 | rubygems | 7 | · | · | 1 | Nuclei 1PoC 4 | activesupport (2) · jquery-ujs (1) · paperclip (1) | — | |
| 19 | mariadb | 6 | · | · | · | mariadb (6) | — | ||
| 20 | dell technologies | 5 | 1 | · | · | NEW | emc documentum taskspace (3) · emc documentum administrator (3) · emc documentum digital asset management (3) | — | |
| 21 | hospira | 5 | 1 | · | · | NEW | lifecare pcainfusion firmware (5) · lifecare pca3 (1) · lifecare pca infusion system (1) | — | |
| 22 | apache | 4 | · | · | · | http server (3) · struts (1) | — | ||
| 23 | rubyonrails | 4 | · | · | 1 | Nuclei 1PoC 2 | rails (2) · jquery-ujs (1) · jquery-rails (1) | — | |
| 24 | sap | 4 | 1 | · | · | PoC 2 | sap netweaver (2) · enterprise central component (1) · afaria (1) | — | |
| 25 | wvware | 4 | · | · | · | NEWPoC 2 | libwmf (4) | — | |
| 26 | apache software foundation | 3 | · | · | · | http server (3) | — | ||
| 27 | djangoproject | 3 | · | · | · | django (3) | — | ||
| 28 | fedoraproject | 3 | · | · | · | PoC 1 | fedora (3) | — | |
| 29 | hospira inc. | 3 | 1 | · | · | NEW | lifecare pca infusion system (3) | — | |
| 30 | lemon-s php | 3 | · | · | · | NEW | gazou bbs plus (1) · simple oekaki (1) · simple oekaki bbs (1) | — | |
| 31 | pivotx | 3 | · | · | · | PoC 3 | pivotx (3) | — | |
| 32 | pypi | 3 | · | · | · | django (3) | — | ||
| 33 | webservice-dic | 3 | · | · | · | NEW | yoyaku (3) | — | |
| 34 | antlabs | 2 | · | · | · | NEW | inngate ig 3100 (2) · inngate ig 3.01 e (2) · inngate ig 3.10 e (2) | — | |
| 35 | centreon | 2 | · | · | · | NEWPoC 2 | centreon (2) | — | |
| 36 | dhcpcd project | 2 | · | · | · | NEW | dhcpcd (2) | — | |
| 37 | django software foundation | 2 | · | · | · | NEW | django (2) | — | |
| 38 | easy2map project | 2 | · | · | 2 | NEWNuclei 2PoC 2 | easy2map (2) | — | |
| 39 | freereprintables | 2 | · | · | · | NEWPoC 2 | articlefr (2) | — | |
| 40 | get-simple | 2 | · | · | · | PoC 1 | getsimple cms (2) | — | |
| 41 | honeywell | 2 | · | · | · | tuxedo touch (2) | — | ||
| 42 | hp | 2 | · | · | · | hp-ux (1) · hp system management homepage (1) · system management homepage (1) | — | ||
| 43 | isc | 2 | · | · | · | PoC 1 | bind (2) | — | |
| 44 | kaseya | 2 | · | · | 1 | NEWNuclei 1 | virtual system administrator (2) | — | |
| 45 | linuxfoundation | 2 | · | · | · | cups-filters (2) | — | ||
| 46 | maven | 2 | · | · | · | edu.internet2.middleware:shibboleth-identityprovider (1) · org.apache.struts:struts2-core (1) · org.opensaml:opensaml (1) | — | ||
| 47 | novius-os | 2 | · | · | 1 | NEWNuclei 1PoC 2 | novius os (2) | — | |
| 48 | openssl | 2 | · | · | · | PoC 1 | openssl (2) | — | |
| 49 | openssl software foundation | 2 | · | · | · | NEWPoC 1 | openssl (2) | — | |
| 50 | packagist | 2 | · | · | · | PoC 2 | impresscms/impresscms (1) · centreon/centreon (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Databases192 CVE38 crit3 KEV5 vendorsCVSS 5.6solaris (43) · fusion middleware (41) · berkeley db (38)
- Operating Systems148 CVE176 crit94 KEV16 vendorsCVSS 6.9debian linux (46) · ubuntu linux (36) · opensuse (35)
- Consumer Software107 CVE325 crit8 KEV5 vendorsCVSS 8.9flash player (64) · acrobat (45) · acrobat dc (45)
- Mobile Apps96 CVE10 crit4 vendorsCVSS 6.6mac os x (63) · iphone os (22) · quicktime (10)
- 6 crit8 vendorsCVSS 7.3nx-os (10) · junos (7) · adaptive security appliance (4)
- Enterprise Software50 CVE6 crit18 vendorsCVSS 8.3db2 (5) · infosphere master data management (4) · business process manager (3)
- Web & CMS Plugins33 CVE21 vendorsCVSS 5.8http server (6) · pivotx (3) · yoyaku (3)
- OSS Libraries32 CVE19 vendorsCVSS 6.6libwmf (4) · openssl (4) · ffmpeg (2)
- Security Products19 CVE2 crit8 vendorsCVSS 5.6documentum administrator (3) · documentum digital asset manager (3) · documentum taskspace (3)
- ICS / OT / IoT11 CVE2 crit6 vendorsCVSS 6.9security api activex sdk (2) · tuxedo touch (2) · idea/ideaplus relays (1)
- Hardware Firmware6 CVE1 crit2 vendorsCVSS 7.2emc documentum administrator (3) · emc documentum digital asset management (3) · emc documentum taskspace (3)
- Cloud & SaaS3 CVE2 crit3 vendorsCVSS 7.9horizon view client (1) · netscaler application delivery controller firmware (1) · netscaler gateway firmware (1)
- AI / ML2 CVE1 vendorsCVSS 7.5cups-filters (2)
- Communications1 CVE1 vendorsCVSS 7.5gxv3611 hd firmware (1)
- Unclassified4 CVE3 vendorsCVSS 6.3research artisan lite (2) · redcarpet (1) · uconnect (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Databases▸ 1 | 192 | 38 | 3 | 5 | 37 | 5.6 | solaris (43) · fusion middleware (41) · berkeley db (38) |
| Operating Systems▸ 4 | 148 | 176 | 94 | 16 | 89 | 6.9 | debian linux (46) · ubuntu linux (36) · opensuse (35) |
| Consumer Software▸ 3 | 107 | 325 | 8 | 5 | 20 | 8.9 | flash player (64) · acrobat (45) · acrobat dc (45) |
| Mobile Apps▸ 2 | 96 | 10 | · | 4 | 12 | 6.6 | mac os x (63) · iphone os (22) · quicktime (10) |
| Networking Infrastructure▸ 4 | 72 | 6 | · | 8 | 61 | 7.3 | nx-os (10) · junos (7) · adaptive security appliance (4) |
| Enterprise Software▸ 6 | 50 | 6 | · | 18 | 50 | 8.3 | db2 (5) · infosphere master data management (4) · business process manager (3) |
| Web & CMS Plugins▸ 4 | 33 | · | · | 21 | 23 | 5.8 | http server (6) · pivotx (3) · yoyaku (3) |
| OSS Libraries▸ 6 | 32 | · | · | 19 | 29 | 6.6 | libwmf (4) · openssl (4) · ffmpeg (2) |
| Security Products▸ 4 | 19 | 2 | · | 8 | 25 | 5.6 | documentum administrator (3) · documentum digital asset manager (3) · documentum taskspace (3) |
| ICS / OT / IoT▸ 3 | 11 | 2 | · | 6 | 9 | 6.9 | security api activex sdk (2) · tuxedo touch (2) · idea/ideaplus relays (1) |
| Hardware Firmware▸ 2 | 6 | 1 | · | 2 | 8 | 7.2 | emc documentum administrator (3) · emc documentum digital asset management (3) · emc documentum taskspace (3) |
| Cloud & SaaS▸ 2 | 3 | 2 | · | 3 | 6 | 7.9 | horizon view client (1) · netscaler application delivery controller firmware (1) · netscaler gateway firmware (1) |
| AI / ML▸ 1 | 2 | · | · | 1 | 1 | 7.5 | cups-filters (2) |
| Communications▸ 1 | 1 | · | · | 1 | 1 | 7.5 | gxv3611 hd firmware (1) |
| Unclassified | 4 | · | · | 3 | 3 | 6.3 | research artisan lite (2) · redcarpet (1) · uconnect (1) |
Weakness × Sector
Which weaknesses hit which solution categories in July 2015
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds200Information Exposure79XSS20Improper Input Validation264CWE-264284CWE-284399CWE-399352CSRF254CWE-25417CWE-17Operating Systems5514371653119Consumer Software5616443649Databases2112611OSS Libraries19421722Enterprise Software101244311Networking Infrastructure416972191113Web & CMS Plugins11132Security Products114221ICS / OT / IoT212121Communications55