month report
October 2015
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
October 2015 closed with 739 published CVEs. 147 criticals, oracle led volume, mostly via solaris. Top weakness class — CWE-119 (142 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
739
— MoM— YoY
Severity mix
147 / 104
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.8%
6 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
3793.0
n=6
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2328
n=2
Weakness × Vendor
What's spreading where in October 2015
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
119Memory Buffer Bounds264CWE-264200Information Exposure79XSS20Improper Input Validation399CWE-39989SQL Injection189CWE-189254CWE-254284CWE-284oracle21apple6181516252oracle corp.1adobe155adobe systems inc.155google inc2514151714google2513151714apple inc.1551414141ibm25813212cisco19343124redhat132511microsoft75631
Most discussed CVEs — October 2015
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #17revive-adserver10 CVE
- #20ао «лаборатория касперского»8 CVE
- #21infinite automation systems7 CVE
- #22janitza7 CVE
- #23janitza electronics gmbh7 CVE
- #24jenkins7 CVE
- #29joomla5 CVE
- #31medicomp5 CVE
- #32rockwellautomation5 CVE
- #33rockwell automation inc.5 CVE
Top vendors
Ranked by distinct CVE count this period.
- 130 CVE16 critCVSS 5.1KEV 1PoC 9solaris (27) · mysql (27) · jdk (25)
- 115 CVE8 critCVSS 6.4PoC 2mac os x (87) · iphone os (51) · os x (35)
- 82 CVE29 critCVSS 7.3KEV 1PoC 4acrobat reader (57) · acrobat reader dc (57) · adobe acrobat (57)
- 74 CVE48 critCVSS 8.6PoC 4android (62) · chrome (12) · google chrome (12)
- 44 CVE4 critCVSS 4.5websphere extreme scale (7) · openpages grc platform (6) · tivoli service request manager (5)
- 36 CVE1 critCVSS 5.7secure access control server (5) · cisco secure access control system (5) · adaptive security appliance software (4)
- 35 CVECVSS 4.6KEV 2PoC 3enterprise linux workstation (20) · enterprise linux server (20) · enterprise linux desktop (20)
- 31 CVE14 critCVSS 7.4PoC 4internet explorer (11) · windows vista (7) · windows 7 (7)
- 25 CVECVSS 4.9PoC 3ubuntu linux (25) · ubuntu (3)
- 22 CVECVSS 4.5PoC 1debian linux (22)
- 21 CVECVSS 4.4PoC 1fedora (19) · 389 directory server (1) · sssd (1)
- 20 CVECVSS 4.3KEV 2PoC 2opensuse (19) · leap (13) · evergreen (1)
- 17 CVECVSS 3.9PoC 1mariadb (17)
- 12 CVE4 critCVSS 6.7owncloud (10) · owncloud server (8) · owncloud desktop client (2)
- 11 CVE1 critCVSS 7.1PoC 5sap hana (7) · hana (7) · 3d visual enterprise viewer (3)
- 10 CVECVSS 6.2PoC 2junos (7) · pulse connect secure (2) · screenos (1)
- 10 CVECVSS 5.6NEWPoC 10revive adserver (10)
- 9 CVECVSS 5.2linux kernel (9)
- 8 CVECVSS 4.0xen (8)
- 8 CVE7 critCVSS 9.3NEWPoC 7kaspersky anti-virus (8)
- 7 CVECVSS 5.6NEWPoC 1mango automation (7)
- 7 CVE1 critCVSS 6.6NEWumg 508 (7) · umg 509 (7) · umg 511 (7)
- 7 CVE1 critCVSS 6.6NEWjanitza umg 509 (7) · janitza umg 508 (7) · janitza umg 511 (7)
- 7 CVECVSS 4.9NEWjenkins (7)
- 7 CVECVSS 5.0org.jenkins-ci.main:jenkins-core (6) · org.apache.httpcomponents:httpclient (1)
- 7 CVECVSS 5.4PoC 1glance (2) · nova (2) · neutron (1)
- 6 CVECVSS 5.4image registry and delivery service \(glance\) (2) · nova (2) · swift (1)
- 5 CVECVSS 6.5PoC 5sourceone email supervisor (4) · rsa onestep (1) · rsa certificate manager (1)
- 5 CVECVSS 6.5NEWNuclei 1PoC 3joomla\! (5)
- 5 CVECVSS 6.5junos (4) · screenos (1)
- 5 CVECVSS 6.9NEWmedcin engine (5)
- 5 CVE1 critCVSS 6.4NEWmicrologix 1100 firmware (5) · micrologix 1400 firmware (5)
- 5 CVE1 critCVSS 6.4NEWmicrologix 1100 (5) · micrologix 1400 (5)
- 4 CVE2 critCVSS 7.5NEWradia client automation (4)
- 4 CVECVSS 5.4ibm spectrum scale (2) · general parallel file system (2) · ibm webshpere portal (1)
- 4 CVECVSS 6.7NEWmatchasns (4)
- 4 CVE1 critCVSS 5.9NEWscada web server (4)
- 4 CVE2 critCVSS 7.5NEWradia client automation (4)
- 4 CVECVSS 4.0NEWpolkit (4)
- 4 CVECVSS 5.3KEV 2PoC 1linux enterprise server (2) · linux enterprise desktop (2) · linux enterprise software development kit (2)
- 4 CVECVSS 5.8NEWenisys gw (4)
- 3 CVECVSS 8.0garoon (3)
- 3 CVE1 critCVSS 5.5cx-programmer (3) · cj2h plc (2) · cj2m plc (2)
- 3 CVE1 critCVSS 5.5NEWomron cx-programmer (3) · omron cj2m (2) · omron cj2h (2)
- 3 CVE1 critCVSS 8.3NEWlog and event manager (2) · storage manager (1)
- 2 CVECVSS 6.5NEWbasercms (2)
- 2 CVE1 critCVSS 7.5vmware vcenter server (2)
- 2 CVECVSS 4.5NEWfedora (2)
- 2 CVECVSS 5.4NEWNuclei 2PoC 2pie register (2)
- 2 CVE1 critCVSS 6.5NEWglpi (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 130 | 16 | 1 | · | KEV 1PoC 9 | solaris (27) · mysql (27) · jdk (25) | — | |
| 2 | apple | 115 | 8 | · | · | PoC 2 | mac os x (87) · iphone os (51) · os x (35) | — | |
| 3 | adobe | 82 | 29 | 1 | · | KEV 1PoC 4 | acrobat reader (57) · acrobat reader dc (57) · adobe acrobat (57) | — | |
| 4 | 74 | 48 | · | · | PoC 4 | android (62) · chrome (12) · google chrome (12) | — | ||
| 5 | ibm | 44 | 4 | · | · | websphere extreme scale (7) · openpages grc platform (6) · tivoli service request manager (5) | — | ||
| 6 | cisco | 36 | 1 | · | · | secure access control server (5) · cisco secure access control system (5) · adaptive security appliance software (4) | — | ||
| 7 | redhat | 35 | · | 2 | · | KEV 2PoC 3 | enterprise linux workstation (20) · enterprise linux server (20) · enterprise linux desktop (20) | — | |
| 8 | microsoft | 31 | 14 | · | · | PoC 4 | internet explorer (11) · windows vista (7) · windows 7 (7) | — | |
| 9 | canonical | 25 | · | · | · | PoC 3 | ubuntu linux (25) · ubuntu (3) | — | |
| 10 | debian | 22 | · | · | · | PoC 1 | debian linux (22) | — | |
| 11 | fedoraproject | 21 | · | · | · | PoC 1 | fedora (19) · 389 directory server (1) · sssd (1) | — | |
| 12 | opensuse | 20 | · | 2 | · | KEV 2PoC 2 | opensuse (19) · leap (13) · evergreen (1) | — | |
| 13 | mariadb | 17 | · | · | · | PoC 1 | mariadb (17) | — | |
| 14 | owncloud | 12 | 4 | · | · | owncloud (10) · owncloud server (8) · owncloud desktop client (2) | — | ||
| 15 | sap | 11 | 1 | · | · | PoC 5 | sap hana (7) · hana (7) · 3d visual enterprise viewer (3) | — | |
| 16 | juniper | 10 | · | · | · | PoC 2 | junos (7) · pulse connect secure (2) · screenos (1) | — | |
| 17 | revive-adserver | 10 | · | · | · | NEWPoC 10 | revive adserver (10) | — | |
| 18 | linux | 9 | · | · | · | linux kernel (9) | — | ||
| 19 | xen | 8 | · | · | · | xen (8) | — | ||
| 20 | ао «лаборатория касперского» | 8 | 7 | · | · | NEWPoC 7 | kaspersky anti-virus (8) | — | |
| 21 | infinite automation systems | 7 | · | · | · | NEWPoC 1 | mango automation (7) | — | |
| 22 | janitza | 7 | 1 | · | · | NEW | umg 508 (7) · umg 509 (7) · umg 511 (7) | — | |
| 23 | janitza electronics gmbh | 7 | 1 | · | · | NEW | janitza umg 509 (7) · janitza umg 508 (7) · janitza umg 511 (7) | — | |
| 24 | jenkins | 7 | · | · | · | NEW | jenkins (7) | — | |
| 25 | maven | 7 | · | · | · | org.jenkins-ci.main:jenkins-core (6) · org.apache.httpcomponents:httpclient (1) | — | ||
| 26 | pypi | 7 | · | · | · | PoC 1 | glance (2) · nova (2) · neutron (1) | — | |
| 27 | openstack | 6 | · | · | · | image registry and delivery service \(glance\) (2) · nova (2) · swift (1) | — | ||
| 28 | emc | 5 | · | · | · | PoC 5 | sourceone email supervisor (4) · rsa onestep (1) · rsa certificate manager (1) | — | |
| 29 | joomla | 5 | · | · | 1 | NEWNuclei 1PoC 3 | joomla\! (5) | — | |
| 30 | juniper networks | 5 | · | · | · | junos (4) · screenos (1) | — | ||
| 31 | medicomp | 5 | · | · | · | NEW | medcin engine (5) | — | |
| 32 | rockwellautomation | 5 | 1 | · | · | NEW | micrologix 1100 firmware (5) · micrologix 1400 firmware (5) | — | |
| 33 | rockwell automation inc. | 5 | 1 | · | · | NEW | micrologix 1100 (5) · micrologix 1400 (5) | — | |
| 34 | accelerite | 4 | 2 | · | · | NEW | radia client automation (4) | — | |
| 35 | ibm corp. | 4 | · | · | · | ibm spectrum scale (2) · general parallel file system (2) · ibm webshpere portal (1) | — | ||
| 36 | icz | 4 | · | · | · | NEW | matchasns (4) | — | |
| 37 | ininet solutions | 4 | 1 | · | · | NEW | scada web server (4) | — | |
| 38 | persistent systems ltd. | 4 | 2 | · | · | NEW | radia client automation (4) | — | |
| 39 | polkit project | 4 | · | · | · | NEW | polkit (4) | — | |
| 40 | suse | 4 | · | 2 | · | KEV 2PoC 1 | linux enterprise server (2) · linux enterprise desktop (2) · linux enterprise software development kit (2) | — | |
| 41 | techno project japan | 4 | · | · | · | NEW | enisys gw (4) | — | |
| 42 | cybozu | 3 | · | · | · | garoon (3) | — | ||
| 43 | omron | 3 | 1 | · | · | cx-programmer (3) · cj2h plc (2) · cj2m plc (2) | — | ||
| 44 | omron electronics llc | 3 | 1 | · | · | NEW | omron cx-programmer (3) · omron cj2m (2) · omron cj2h (2) | — | |
| 45 | solarwinds | 3 | 1 | · | · | NEW | log and event manager (2) · storage manager (1) | — | |
| 46 | basercms | 2 | · | · | · | NEW | basercms (2) | — | |
| 47 | broadcom inc. | 2 | 1 | · | · | vmware vcenter server (2) | — | ||
| 48 | fedora project | 2 | · | · | · | NEW | fedora (2) | — | |
| 49 | genetechsolutions | 2 | · | · | 2 | NEWNuclei 2PoC 2 | pie register (2) | — | |
| 50 | glpi-project | 2 | 1 | · | · | NEW | glpi (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Mobile Apps190 CVE117 crit5 vendorsCVSS 8.5mac os x (87) · iphone os (51) · os x (35)
- Databases140 CVE40 crit3 KEV10 vendorsCVSS 5.3mysql (54) · solaris (38) · fusion middleware (30)
- Operating Systems97 CVE65 crit28 KEV20 vendorsCVSS 7.4ubuntu linux (25) · debian linux (22) · fedora (21)
- Consumer Software87 CVE174 crit2 KEV6 vendorsCVSS 7.3acrobat (57) · acrobat dc (57) · acrobat reader (57)
- Enterprise Software79 CVE17 crit15 vendorsCVSS 7.1websphere extreme scale (7) · openpages grc platform (6) · change and configuration management database (5)
- 3 crit8 vendorsCVSS 10.0junos (11) · cisco secure access control system (5) · secure access control server (5)
- ICS / OT / IoT34 CVE24 crit14 vendorsCVSS 6.6mango automation (7) · micrologix 1100 (5) · micrologix 1100 firmware (5)
- Cloud & SaaS32 CVE10 crit9 vendorsCVSS 7.8owncloud (10) · owncloud server (8) · image registry and delivery service \(glance\) (2)
- Web & CMS Plugins30 CVE2 crit15 vendorsCVSS 9.3revive adserver (10) · joomla\! (5) · basercms (2)
- OSS Libraries27 CVE1 crit15 vendorsCVSS 6.1ffmpeg (2) · colorbox (1) · html-scrubber (1)
- Security Products20 CVE8 crit8 vendorsCVSS 9.3kaspersky anti-virus (8) · avast antivirus (1) · netbackup opscenter (1)
- DevTools & CI8 CVE2 vendorsCVSS 5.0jenkins (7)
- Hardware Firmware5 CVE2 crit4 vendorsCVSS 9.7ftp utility (2) · network utility (1)
- Communications2 CVE2 vendorsCVSS 7.5freeswitch (1)
- Unclassified10 CVE2 crit4 vendorsCVSS 6.7matchasns (4) · radia client automation (4) · afnetworking (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Mobile Apps▸ 2 | 190 | 117 | · | 5 | 21 | 8.5 | mac os x (87) · iphone os (51) · os x (35) |
| Databases▸ 2 | 140 | 40 | 3 | 10 | 34 | 5.3 | mysql (54) · solaris (38) · fusion middleware (30) |
| Operating Systems▸ 3 | 97 | 65 | 28 | 20 | 91 | 7.4 | ubuntu linux (25) · debian linux (22) · fedora (21) |
| Consumer Software▸ 3 | 87 | 174 | 2 | 6 | 18 | 7.3 | acrobat (57) · acrobat dc (57) · acrobat reader (57) |
| Enterprise Software▸ 5 | 79 | 17 | · | 15 | 68 | 7.1 | websphere extreme scale (7) · openpages grc platform (6) · change and configuration management database (5) |
| Networking Infrastructure▸ 4 | 54 | 3 | · | 8 | 34 | 10.0 | junos (11) · cisco secure access control system (5) · secure access control server (5) |
| ICS / OT / IoT▸ 2 | 34 | 24 | · | 14 | 28 | 6.6 | mango automation (7) · micrologix 1100 (5) · micrologix 1100 firmware (5) |
| Cloud & SaaS▸ 3 | 32 | 10 | · | 9 | 16 | 7.8 | owncloud (10) · owncloud server (8) · image registry and delivery service \(glance\) (2) |
| Web & CMS Plugins▸ 3 | 30 | 2 | · | 15 | 14 | 9.3 | revive adserver (10) · joomla\! (5) · basercms (2) |
| OSS Libraries▸ 7 | 27 | 1 | · | 15 | 20 | 6.1 | ffmpeg (2) · colorbox (1) · html-scrubber (1) |
| Security Products▸ 4 | 20 | 8 | · | 8 | 10 | 9.3 | kaspersky anti-virus (8) · avast antivirus (1) · netbackup opscenter (1) |
| DevTools & CI▸ 2 | 8 | · | · | 2 | 2 | 5.0 | jenkins (7) |
| Hardware Firmware▸ 2 | 5 | 2 | · | 4 | 4 | 9.7 | ftp utility (2) · network utility (1) |
| Communications▸ 2 | 2 | · | · | 2 | 2 | 7.5 | freeswitch (1) |
| Unclassified | 10 | 2 | · | 4 | 4 | 6.7 | matchasns (4) · radia client automation (4) · afnetworking (1) |
Weakness × Sector
Which weaknesses hit which solution categories in October 2015
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds264CWE-264200Information Exposure79XSS20Improper Input Validation399CWE-39989SQL Injection189CWE-189254CWE-254284CWE-284Operating Systems94301751561986Consumer Software303111312Enterprise Software121112163212Databases3124231OSS Libraries1165412132Networking Infrastructure212458145Cloud & SaaS1321581ICS / OT / IoT42841231Web & CMS Plugins336183Security Products5122