month report
August 2015
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
August 2015 closed with 625 published CVEs. 137 criticals, apple led volume, mostly via iphone os. Top weakness class — CWE-119 (127 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
625
— MoM— YoY
Severity mix
137 / 121
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
2.7%
17 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
3854.2
n=17
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2452
n=4
Weakness × Vendor
What's spreading where in August 2015
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
119Memory Buffer Bounds79XSS200Information Exposure264CWE-26420Improper Input Validation255CWE-255399CWE-39917CWE-17189CWE-189284CWE-284apple661177812123apple inc.631158711113microsoft15279131cisco245481133canonical181244hp2531adobe1411adobe systems inc.141oracle72121032opensuse1511123cisco systems inc.2418112mozilla932241
Most discussed CVEs — August 2015
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #10ge healthcare26 CVE
- #21basware7 CVE
- #27netgate5 CVE
- #30openbsd project5 CVE
- #33check mk project4 CVE
- #34garrettcom4 CVE
- #40fortinet inc.3 CVE
- #41mobile devices3 CVE
- #42munic3 CVE
- #43picketlink3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 120 CVE9 critCVSS 6.4PoC 7iphone os (71) · ios (67) · mac os x (66)
- 53 CVE35 critCVSS 7.4KEV 3PoC 17windows server 2008 (24) · windows vista (22) · windows 7 (22)
- 44 CVECVSS 5.8telepresence video communication server software (12) · telepresence video communication server (12) · ios xe (8)
- 40 CVE8 critCVSS 6.8KEV 1PoC 3ubuntu linux (36) · ubuntu (6)
- 36 CVE3 critCVSS 7.2keyview (9) · systems insight manager (6) · matrix operating environment (5)
- 35 CVE34 critCVSS 10.0PoC 8adobe integrated runtime (34) · air (34) · air sdk (34)
- 35 CVE6 critCVSS 6.3KEV 1PoC 7solaris (31) · linux (7) · oracle linux (2)
- 32 CVE16 critCVSS 8.1KEV 1PoC 9opensuse (24) · evergreen (8)
- 29 CVE10 critCVSS 7.2KEV 1PoC 2firefox (23) · firefox esr (18) · firefox os (10)
- 26 CVE26 critCVSS 10.0NEWcentricity pacs workstation (3) · optima mr360 firmware (2) · centricity pacs-iw (2)
- 21 CVE5 critCVSS 5.4tivoli storage manager fastback (5) · websphere mq light (4) · tivoli storage manager for mail data protection for microsoft exchange server (3)
- 20 CVE2 critCVSS 5.7Nuclei 5PoC 5debian linux (20)
- 20 CVECVSS 5.2PoC 3linux kernel (20)
- 18 CVE1 critCVSS 7.6KEV 1PoC 5enterprise linux server aus (5) · enterprise linux server (4) · enterprise linux workstation (4)
- 11 CVECVSS 6.3PoC 2debian gnu/linux (8) · linux (2) · libxml2 (1)
- 9 CVE4 critCVSS 7.0documentum content server (6) · rsa archer egrc (1) · documentum administrator (1)
- 9 CVECVSS 4.3wireshark (9)
- 8 CVE1 critCVSS 6.5PoC 3activemq (4) · subversion (2) · groovy (1)
- 8 CVE1 critCVSS 6.5PoC 1fedora (8)
- 8 CVE1 critCVSS 6.7Nuclei 1PoC 4org.apache.activemq:activemq-broker (2) · org.apache.activemq:activemq-client (2) · org.apache.activemq:activemq-jaas (2)
- 7 CVECVSS 5.0NEWbanking (7)
- 7 CVE1 critCVSS 7.7PoC 1bsafe (5) · bsafe ssl-c (5) · bios (1)
- 7 CVECVSS 6.5PoC 3endpoint protection manager (7)
- 6 CVE5 critCVSS 8.9tivoli storage manager fastback (5) · business process manager (1)
- 6 CVECVSS 4.3django (2) · horizon (1) · neutron (1)
- 5 CVECVSS 5.6drupal (5)
- 5 CVECVSS 4.3NEWpfsense (5)
- 5 CVECVSS 4.0openafs (5)
- 5 CVECVSS 6.6PoC 1openssh (5)
- 5 CVECVSS 6.8NEWPoC 1openssh (5) · openbsd (1)
- 5 CVECVSS 6.2PoC 1scalance x204rna eec (hsr) (1) · compas (1) · ruggedcom rox ii firmware (1)
- 5 CVECVSS 4.1Nuclei 5PoC 2wordpress (5)
- 4 CVECVSS 6.1NEWcheck mk (4)
- 4 CVECVSS 4.8NEWmagnum 6k firmware (4) · magnum 10k firmware (4)
- 4 CVECVSS 5.5gnutls (2) · libidn (1) · glibc (1)
- 4 CVECVSS 4.0glance (2) · neutron (1) · horizon (1)
- 4 CVECVSS 5.0foreman (4)
- 3 CVECVSS 5.8PoC 1activemq (3)
- 3 CVECVSS 5.2fortios (3)
- 3 CVECVSS 5.2NEWfortios (3)
- 3 CVE3 critCVSS 9.0NEWc4 obd-ii dongle firmware (3)
- 3 CVE3 critCVSS 9.0NEWmobile devices (mdi) obd-ii dongles (3)
- 3 CVECVSS 5.3NEWpicketlink (3)
- 3 CVECVSS 5.3PoC 1qemu (3)
- 3 CVECVSS 6.0PoC 3sap afaria (2) · netweaver (1) · afaria (1)
- 3 CVE1 critCVSS 8.2KEV 1PoC 1linux enterprise debuginfo (3) · linux enterprise server (3) · linux enterprise desktop (2)
- 3 CVE1 critCVSS 7.9NEWxen (3)
- 3 CVE1 critCVSS 7.9xen (3)
- 2 CVECVSS 7.5NEWncs01 firmware (2)
- 2 CVE1 critCVSS 8.1NEWPoC 1eos (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | apple | 120 | 9 | · | · | PoC 7 | iphone os (71) · ios (67) · mac os x (66) | — | |
| 2 | microsoft | 53 | 35 | 3 | · | KEV 3PoC 17 | windows server 2008 (24) · windows vista (22) · windows 7 (22) | — | |
| 3 | cisco | 44 | · | · | · | telepresence video communication server software (12) · telepresence video communication server (12) · ios xe (8) | — | ||
| 4 | canonical | 40 | 8 | 1 | · | KEV 1PoC 3 | ubuntu linux (36) · ubuntu (6) | — | |
| 5 | hp | 36 | 3 | · | · | keyview (9) · systems insight manager (6) · matrix operating environment (5) | — | ||
| 6 | adobe | 35 | 34 | · | · | PoC 8 | adobe integrated runtime (34) · air (34) · air sdk (34) | — | |
| 7 | oracle | 35 | 6 | 1 | · | KEV 1PoC 7 | solaris (31) · linux (7) · oracle linux (2) | — | |
| 8 | opensuse | 32 | 16 | 1 | · | KEV 1PoC 9 | opensuse (24) · evergreen (8) | — | |
| 9 | mozilla | 29 | 10 | 1 | · | KEV 1PoC 2 | firefox (23) · firefox esr (18) · firefox os (10) | — | |
| 10 | ge healthcare | 26 | 26 | · | · | NEW | centricity pacs workstation (3) · optima mr360 firmware (2) · centricity pacs-iw (2) | — | |
| 11 | ibm | 21 | 5 | · | · | tivoli storage manager fastback (5) · websphere mq light (4) · tivoli storage manager for mail data protection for microsoft exchange server (3) | — | ||
| 12 | debian | 20 | 2 | · | 5 | Nuclei 5PoC 5 | debian linux (20) | — | |
| 13 | linux | 20 | · | · | · | PoC 3 | linux kernel (20) | — | |
| 14 | redhat | 18 | 1 | 1 | · | KEV 1PoC 5 | enterprise linux server aus (5) · enterprise linux server (4) · enterprise linux workstation (4) | — | |
| 15 | сообщество свободного программного обеспечения | 11 | · | · | · | PoC 2 | debian gnu/linux (8) · linux (2) · libxml2 (1) | — | |
| 16 | emc | 9 | 4 | · | · | documentum content server (6) · rsa archer egrc (1) · documentum administrator (1) | — | ||
| 17 | wireshark | 9 | · | · | · | wireshark (9) | — | ||
| 18 | apache | 8 | 1 | · | · | PoC 3 | activemq (4) · subversion (2) · groovy (1) | — | |
| 19 | fedoraproject | 8 | 1 | · | · | PoC 1 | fedora (8) | — | |
| 20 | maven | 8 | 1 | · | 1 | Nuclei 1PoC 4 | org.apache.activemq:activemq-broker (2) · org.apache.activemq:activemq-client (2) · org.apache.activemq:activemq-jaas (2) | — | |
| 21 | basware | 7 | · | · | · | NEW | banking (7) | — | |
| 22 | dell | 7 | 1 | · | · | PoC 1 | bsafe (5) · bsafe ssl-c (5) · bios (1) | — | |
| 23 | symantec | 7 | · | · | · | PoC 3 | endpoint protection manager (7) | — | |
| 24 | ibm corp. | 6 | 5 | · | · | tivoli storage manager fastback (5) · business process manager (1) | — | ||
| 25 | pypi | 6 | · | · | · | django (2) · horizon (1) · neutron (1) | — | ||
| 26 | drupal | 5 | · | · | · | drupal (5) | — | ||
| 27 | netgate | 5 | · | · | · | NEW | pfsense (5) | — | |
| 28 | openafs | 5 | · | · | · | openafs (5) | — | ||
| 29 | openbsd | 5 | · | · | · | PoC 1 | openssh (5) | — | |
| 30 | openbsd project | 5 | · | · | · | NEWPoC 1 | openssh (5) · openbsd (1) | — | |
| 31 | siemens | 5 | · | · | · | PoC 1 | scalance x204rna eec (hsr) (1) · compas (1) · ruggedcom rox ii firmware (1) | — | |
| 32 | wordpress | 5 | · | · | 5 | Nuclei 5PoC 2 | wordpress (5) | — | |
| 33 | check mk project | 4 | · | · | · | NEW | check mk (4) | — | |
| 34 | garrettcom | 4 | · | · | · | NEW | magnum 6k firmware (4) · magnum 10k firmware (4) | — | |
| 35 | gnu | 4 | · | · | · | gnutls (2) · libidn (1) · glibc (1) | — | ||
| 36 | openstack | 4 | · | · | · | glance (2) · neutron (1) · horizon (1) | — | ||
| 37 | theforeman | 4 | · | · | · | foreman (4) | — | ||
| 38 | apache software foundation | 3 | · | · | · | PoC 1 | activemq (3) | — | |
| 39 | fortinet | 3 | · | · | · | fortios (3) | — | ||
| 40 | fortinet inc. | 3 | · | · | · | NEW | fortios (3) | — | |
| 41 | mobile devices | 3 | 3 | · | · | NEW | c4 obd-ii dongle firmware (3) | — | |
| 42 | munic | 3 | 3 | · | · | NEW | mobile devices (mdi) obd-ii dongles (3) | — | |
| 43 | picketlink | 3 | · | · | · | NEW | picketlink (3) | — | |
| 44 | qemu | 3 | · | · | · | PoC 1 | qemu (3) | — | |
| 45 | sap | 3 | · | · | · | PoC 3 | sap afaria (2) · netweaver (1) · afaria (1) | — | |
| 46 | suse | 3 | 1 | 1 | · | KEV 1PoC 1 | linux enterprise debuginfo (3) · linux enterprise server (3) · linux enterprise desktop (2) | — | |
| 47 | the linux foundation | 3 | 1 | · | · | NEW | xen (3) | — | |
| 48 | xen | 3 | 1 | · | · | xen (3) | — | ||
| 49 | actiontec | 2 | · | · | · | NEW | ncs01 firmware (2) | — | |
| 50 | arista | 2 | 1 | · | · | NEWPoC 1 | eos (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems160 CVE231 crit38 KEV21 vendorsCVSS 7.4ubuntu linux (36) · opensuse (24) · debian linux (20)
- Mobile Apps121 CVE26 crit4 vendorsCVSS 7.2iphone os (71) · ios (67) · mac os x (66)
- Enterprise Software92 CVE18 crit15 vendorsCVSS 7.5keyview (9) · systems insight manager (6) · bsafe (5)
- Consumer Software71 CVE233 crit5 KEV11 vendorsCVSS 9.9flash player (68) · adobe integrated runtime (34) · air (34)
- 4 crit16 vendorsCVSS 7.8telepresence video communication server (12) · telepresence video communication server software (12) · nx-os (10)
- Databases45 CVE15 crit1 KEV7 vendorsCVSS 6.6solaris (31) · linux (7) · tivoli storage manager fastback (5)
- Web & CMS Plugins42 CVE1 crit23 vendorsCVSS 5.9activemq (7) · drupal (5) · wordpress (5)
- Security Products42 CVE4 crit13 vendorsCVSS 7.8documentum content server (6) · picketlink (3) · documentum administrator (1)
- OSS Libraries36 CVE2 crit19 vendorsCVSS 6.8gnutls (3) · libevent (3) · tidy (2)
- ICS / OT / IoT33 CVE37 crit7 vendorsCVSS 10.0centricity pacs workstation (3) · centricity pacs server (2) · centricity pacs-iw (2)
- Cloud & SaaS18 CVE2 crit7 vendorsCVSS 6.8xen (3) · lxc (2) · pacemaker (1)
- Hardware Firmware6 CVE5 vendorsCVSS 7.5ncs01 firmware (2)
- Communications3 CVE3 vendorsCVSS 6.5jabberd2 (1)
- DevTools & CI1 CVE1 vendorsCVSS 4.3ctools (1)
- Unclassified18 CVE4 crit15 vendorsCVSS 6.2c4 obd-ii dongle firmware (3) · xsuite (2) · arista eos (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 4 | 160 | 231 | 38 | 21 | 90 | 7.4 | ubuntu linux (36) · opensuse (24) · debian linux (20) |
| Mobile Apps▸ 2 | 121 | 26 | · | 4 | 16 | 7.2 | iphone os (71) · ios (67) · mac os x (66) |
| Enterprise Software▸ 5 | 92 | 18 | · | 15 | 106 | 7.5 | keyview (9) · systems insight manager (6) · bsafe (5) |
| Consumer Software▸ 4 | 71 | 233 | 5 | 11 | 16 | 9.9 | flash player (68) · adobe integrated runtime (34) · air (34) |
| Networking Infrastructure▸ 4 | 67 | 4 | · | 16 | 51 | 7.8 | telepresence video communication server (12) · telepresence video communication server software (12) · nx-os (10) |
| Databases▸ 3 | 45 | 15 | 1 | 7 | 20 | 6.6 | solaris (31) · linux (7) · tivoli storage manager fastback (5) |
| Web & CMS Plugins▸ 3 | 42 | 1 | · | 23 | 26 | 5.9 | activemq (7) · drupal (5) · wordpress (5) |
| Security Products▸ 6 | 42 | 4 | · | 13 | 31 | 7.8 | documentum content server (6) · picketlink (3) · documentum administrator (1) |
| OSS Libraries▸ 6 | 36 | 2 | · | 19 | 34 | 6.8 | gnutls (3) · libevent (3) · tidy (2) |
| ICS / OT / IoT▸ 3 | 33 | 37 | · | 7 | 35 | 10.0 | centricity pacs workstation (3) · centricity pacs server (2) · centricity pacs-iw (2) |
| Cloud & SaaS▸ 3 | 18 | 2 | · | 7 | 9 | 6.8 | xen (3) · lxc (2) · pacemaker (1) |
| Hardware Firmware▸ 4 | 6 | · | · | 5 | 10 | 7.5 | ncs01 firmware (2) |
| Communications▸ 3 | 3 | · | · | 3 | 3 | 6.5 | jabberd2 (1) |
| DevTools & CI▸ 1 | 1 | · | · | 1 | 1 | 4.3 | ctools (1) |
| Unclassified | 18 | 4 | · | 15 | 15 | 6.2 | c4 obd-ii dongle firmware (3) · xsuite (2) · arista eos (1) |
Weakness × Sector
Which weaknesses hit which solution categories in August 2015
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds79XSS200Information Exposure264CWE-26420Improper Input Validation255CWE-255399CWE-39917CWE-17189CWE-189284CWE-284Operating Systems921126243028794Consumer Software606928162OSS Libraries1925111014381Enterprise Software7813114241Networking Infrastructure311671811523Web & CMS Plugins1222611ICS / OT / IoT23125Security Products16224311Databases6133511Hardware Firmware323