month report
November 2015
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
November 2015 closed with 368 published CVEs. 75 criticals, microsoft led volume, mostly via internet explorer. Top weakness class — CWE-119 (68 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
368
— MoM— YoY
Severity mix
75 / 73
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.9%
7 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
3770.4
n=7
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2451
n=2
Weakness × Vendor
What's spreading where in November 2015
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
119Memory Buffer Bounds200Information Exposure264CWE-26420Improper Input Validation79XSS399CWE-399254CWE-254284CWE-284352CSRF189CWE-189microsoft30653311microsoft corp30653311cisco5253713canonical623143ibm7611111debian73411mozilla941241adobe1112mozilla corp.941241adobe systems inc.1112redhat143111maven44111
Most discussed CVEs — November 2015
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #13jenkins12 CVE
- #20huawei7 CVE
- #31arris4 CVE
- #32csl dualcom4 CVE
- #33ffmpeg team4 CVE
- #34lenovo4 CVE
- #35libreoffice4 CVE
- #37the document foundation4 CVE
- #38xmlsoft4 CVE
- #41qemu3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 51 CVE33 critCVSS 7.1PoC 8internet explorer (25) · windows server 2008 r2 service pack 1 (11) · windows server 2008 (11)
- 30 CVE1 critCVSS 5.9PoC 1firepower extensible operating system (8) · cisco firepower extensible operating system (8) · web security appliance (4)
- 28 CVE1 critCVSS 5.5PoC 3ubuntu linux (28) · ubuntu (9)
- 26 CVECVSS 5.2security qradar incident forensics (7) · system networking switch center (4) · maximo asset management (2)
- 24 CVE1 critCVSS 6.0PoC 3debian linux (24)
- 23 CVE1 critCVSS 6.7PoC 3firefox (23) · firefox esr (13) · network security services (3)
- 22 CVE17 critCVSS 8.9PoC 3air sdk (17) · air sdk \& compiler (17) · air (17)
- 17 CVE1 critCVSS 6.0KEV 1PoC 2openshift (11) · enterprise linux server aus (2) · enterprise linux desktop (2)
- 16 CVE1 critCVSS 5.8KEV 1PoC 1org.jenkins-ci.main:jenkins-core (11) · org.apache.ambari:ambari (2) · org.bouncycastle:bcprov-jdk14 (1)
- 14 CVE1 critCVSS 5.7PoC 2opensuse (14) · leap (8)
- 13 CVECVSS 5.1PoC 2ambari (6) · openoffice (4) · cordova (2)
- 13 CVE8 critCVSS 8.1PoC 2android (10) · picasa (2) · chrome (1)
- 12 CVE1 critCVSS 6.2NEWKEV 1PoC 1jenkins (12)
- 11 CVE4 critCVSS 8.1KEV 1PoC 2solaris (5) · virtual desktop infrastructure (2) · vm virtualbox (2)
- 9 CVECVSS 6.3PoC 1arcsight logger (3) · arcsight smartconnectors (2) · arcsight connectors (1)
- 9 CVECVSS 5.7PoC 2debian gnu/linux (7) · libxml2 (2) · linux (1)
- 8 CVECVSS 5.1PoC 1mac os x (7) · iphone os (6) · tvos (3)
- 8 CVECVSS 6.6fedora (8)
- 7 CVECVSS 7.1ffmpeg (7)
- 7 CVECVSS 5.5NEWPoC 1espace firmware (3) · ne router software (1) · vp 9660 firmware (1)
- 7 CVE1 critCVSS 5.5PoC 1linux kernel (7)
- 7 CVE1 critCVSS 6.7PoC 7sap hana (5) · hana (5) · manufacturing integration and intelligence (1)
- 6 CVECVSS 4.5opensuse (5) · suse linux enterprise desktop (1)
- 6 CVECVSS 5.7linux enterprise desktop (6) · linux enterprise server (6) · linux enterprise software development kit (4)
- 6 CVECVSS 5.4Nuclei 6wordpress (6)
- 5 CVECVSS 6.0ibm maximo asset management (1) · ibm smartcloud control desk (1) · ibm sterling b2b integrator (1)
- 5 CVECVSS 5.2mediawiki (5)
- 5 CVE1 critCVSS 7.7PoC 1gpu driver (5) · nvidia gpu (4)
- 5 CVECVSS 5.9PoC 1astra linux common edition (4) · astra linux special edition (3) · astra linux special edition для «эльбрус» (1)
- 4 CVECVSS 6.2openoffice (4)
- 4 CVE1 critCVSS 6.2NEWPoC 1na model 862 gw mono firmware (4)
- 4 CVECVSS 6.0NEWPoC 2gprs cs2300-r firmware (4)
- 4 CVECVSS 7.3NEWffmpeg (4)
- 4 CVECVSS 6.6NEWswitch center (4)
- 4 CVECVSS 6.2NEWlibreoffice (4)
- 4 CVECVSS 6.2kerberos 5 (4)
- 4 CVECVSS 6.2NEWlibreoffice (4)
- 4 CVECVSS 4.7NEWPoC 1libxml2 (3) · libxslt (1)
- 3 CVECVSS 4.8netscaler gateway firmware (3) · netscaler service delivery appliance service vm (3) · netscaler application delivery controller firmware (3)
- 3 CVECVSS 5.8ipsilon (2) · ironic-inspector (1) · python-ironic-inspector-client (1)
- 3 CVECVSS 6.6NEWqemu (3)
- 3 CVECVSS 7.0NEWPoC 1smartviewer (2) · galaxy s6 (1)
- 3 CVECVSS 7.7endpoint protection manager (2) · endpoint protection (1)
- 3 CVE1 critCVSS 6.6NEWxen (3)
- 3 CVE1 critCVSS 6.6xen (3)
- 2 CVE1 critCVSS 8.8NEWeos (2)
- 2 CVECVSS 6.5PoC 2atutor (2)
- 2 CVECVSS 5.3PoC 1isilon onefs (1) · vplex geosynchrony (1)
- 2 CVE1 critCVSS 7.8big-ip analytics (2) · big-ip access policy manager (2) · big-ip advanced firewall manager (2)
- 2 CVECVSS 6.3NEWqemu (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 51 | 33 | · | · | PoC 8 | internet explorer (25) · windows server 2008 r2 service pack 1 (11) · windows server 2008 (11) | — | |
| 2 | cisco | 30 | 1 | · | · | PoC 1 | firepower extensible operating system (8) · cisco firepower extensible operating system (8) · web security appliance (4) | — | |
| 3 | canonical | 28 | 1 | · | · | PoC 3 | ubuntu linux (28) · ubuntu (9) | — | |
| 4 | ibm | 26 | · | · | · | security qradar incident forensics (7) · system networking switch center (4) · maximo asset management (2) | — | ||
| 5 | debian | 24 | 1 | · | · | PoC 3 | debian linux (24) | — | |
| 6 | mozilla | 23 | 1 | · | · | PoC 3 | firefox (23) · firefox esr (13) · network security services (3) | — | |
| 7 | adobe | 22 | 17 | · | · | PoC 3 | air sdk (17) · air sdk \& compiler (17) · air (17) | — | |
| 8 | redhat | 17 | 1 | 1 | · | KEV 1PoC 2 | openshift (11) · enterprise linux server aus (2) · enterprise linux desktop (2) | — | |
| 9 | maven | 16 | 1 | 1 | · | KEV 1PoC 1 | org.jenkins-ci.main:jenkins-core (11) · org.apache.ambari:ambari (2) · org.bouncycastle:bcprov-jdk14 (1) | — | |
| 10 | opensuse | 14 | 1 | · | · | PoC 2 | opensuse (14) · leap (8) | — | |
| 11 | apache | 13 | · | · | · | PoC 2 | ambari (6) · openoffice (4) · cordova (2) | — | |
| 12 | 13 | 8 | · | · | PoC 2 | android (10) · picasa (2) · chrome (1) | — | ||
| 13 | jenkins | 12 | 1 | 1 | · | NEWKEV 1PoC 1 | jenkins (12) | — | |
| 14 | oracle | 11 | 4 | 1 | · | KEV 1PoC 2 | solaris (5) · virtual desktop infrastructure (2) · vm virtualbox (2) | — | |
| 15 | hp | 9 | · | · | · | PoC 1 | arcsight logger (3) · arcsight smartconnectors (2) · arcsight connectors (1) | — | |
| 16 | сообщество свободного программного обеспечения | 9 | · | · | · | PoC 2 | debian gnu/linux (7) · libxml2 (2) · linux (1) | — | |
| 17 | apple | 8 | · | · | · | PoC 1 | mac os x (7) · iphone os (6) · tvos (3) | — | |
| 18 | fedoraproject | 8 | · | · | · | fedora (8) | — | ||
| 19 | ffmpeg | 7 | · | · | · | ffmpeg (7) | — | ||
| 20 | huawei | 7 | · | · | · | NEWPoC 1 | espace firmware (3) · ne router software (1) · vp 9660 firmware (1) | — | |
| 21 | linux | 7 | 1 | · | · | PoC 1 | linux kernel (7) | — | |
| 22 | sap | 7 | 1 | · | · | PoC 7 | sap hana (5) · hana (5) · manufacturing integration and intelligence (1) | — | |
| 23 | novell inc. | 6 | · | · | · | opensuse (5) · suse linux enterprise desktop (1) | — | ||
| 24 | suse | 6 | · | · | · | linux enterprise desktop (6) · linux enterprise server (6) · linux enterprise software development kit (4) | — | ||
| 25 | wordpress | 6 | · | · | 6 | Nuclei 6 | wordpress (6) | — | |
| 26 | ibm corp. | 5 | · | · | · | ibm maximo asset management (1) · ibm smartcloud control desk (1) · ibm sterling b2b integrator (1) | — | ||
| 27 | mediawiki | 5 | · | · | · | mediawiki (5) | — | ||
| 28 | nvidia | 5 | 1 | · | · | PoC 1 | gpu driver (5) · nvidia gpu (4) | — | |
| 29 | ооо «русбитех-астра» | 5 | · | · | · | PoC 1 | astra linux common edition (4) · astra linux special edition (3) · astra linux special edition для «эльбрус» (1) | — | |
| 30 | apache software foundation | 4 | · | · | · | openoffice (4) | — | ||
| 31 | arris | 4 | 1 | · | · | NEWPoC 1 | na model 862 gw mono firmware (4) | — | |
| 32 | csl dualcom | 4 | · | · | · | NEWPoC 2 | gprs cs2300-r firmware (4) | — | |
| 33 | ffmpeg team | 4 | · | · | · | NEW | ffmpeg (4) | — | |
| 34 | lenovo | 4 | · | · | · | NEW | switch center (4) | — | |
| 35 | libreoffice | 4 | · | · | · | NEW | libreoffice (4) | — | |
| 36 | mit | 4 | · | · | · | kerberos 5 (4) | — | ||
| 37 | the document foundation | 4 | · | · | · | NEW | libreoffice (4) | — | |
| 38 | xmlsoft | 4 | · | · | · | NEWPoC 1 | libxml2 (3) · libxslt (1) | — | |
| 39 | citrix | 3 | · | · | · | netscaler gateway firmware (3) · netscaler service delivery appliance service vm (3) · netscaler application delivery controller firmware (3) | — | ||
| 40 | pypi | 3 | · | · | · | ipsilon (2) · ironic-inspector (1) · python-ironic-inspector-client (1) | — | ||
| 41 | qemu | 3 | · | · | · | NEW | qemu (3) | — | |
| 42 | samsung | 3 | · | · | · | NEWPoC 1 | smartviewer (2) · galaxy s6 (1) | — | |
| 43 | symantec | 3 | · | · | · | endpoint protection manager (2) · endpoint protection (1) | — | ||
| 44 | the linux foundation | 3 | 1 | · | · | NEW | xen (3) | — | |
| 45 | xen | 3 | 1 | · | · | xen (3) | — | ||
| 46 | arista | 2 | 1 | · | · | NEW | eos (2) | — | |
| 47 | atutor | 2 | · | · | · | PoC 2 | atutor (2) | — | |
| 48 | emc | 2 | · | · | · | PoC 1 | isilon onefs (1) · vplex geosynchrony (1) | — | |
| 49 | f5 | 2 | 1 | · | · | big-ip analytics (2) · big-ip access policy manager (2) · big-ip advanced firewall manager (2) | — | ||
| 50 | fabrice bellard | 2 | · | · | · | NEW | qemu (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems120 CVE201 crit1 KEV26 vendorsCVSS 7.1ubuntu linux (28) · debian linux (24) · opensuse (19)
- Consumer Software56 CVE101 crit11 vendorsCVSS 8.6flash player (34) · adobe integrated runtime (17) · air (17)
- Enterprise Software50 CVE8 crit11 vendorsCVSS 9.7security qradar incident forensics (7) · system networking switch center (4) · arcsight logger (3)
- 5 crit12 vendorsCVSS 6.9cisco firepower extensible operating system (8) · firepower extensible operating system (8) · na model 862 gw mono firmware (4)
- OSS Libraries42 CVE2 crit1 KEV17 vendorsCVSS 6.8ffmpeg (11) · libpng (4) · libxml2 (3)
- Web & CMS Plugins31 CVE10 vendorsCVSS 7.5openoffice (8) · ambari (6) · wordpress (6)
- Mobile Apps31 CVE14 crit6 vendorsCVSS 7.4android (20) · espace firmware (3) · picasa (2)
- Security Products18 CVE18 crit12 vendorsCVSS 7.8ipsilon (2) · arcsight enterprise security manager (1) · isilon onefs (1)
- Databases16 CVE19 crit10 KEV3 vendorsCVSS 7.7solaris (5) · linux (2) · openjdk (2)
- Cloud & SaaS15 CVE2 crit6 vendorsCVSS 6.8netscaler application delivery controller firmware (3) · netscaler gateway firmware (3) · netscaler service delivery appliance service vm (3)
- DevTools & CI12 CVE1 crit1 KEV1 vendorsCVSS 6.2jenkins (12)
- Hardware Firmware9 CVE2 crit3 vendorsCVSS 7.7gpu driver (5) · nvidia gpu (4)
- ICS / OT / IoT6 CVE10 crit5 vendorsCVSS 9.6visilogic oplc ide (2) · eki-122x series firmware (1) · eki-1321 series firmware (1)
- Communications3 CVE4 vendorsCVSS 5.0groupware (1) · horde application framework (1) · ox guard (1)
- Unclassified15 CVE5 crit10 vendorsCVSS 6.6gprs cs2300-r firmware (4) · applican (2) · ос тд аис фссп россии (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 4 | 120 | 201 | 1 | 26 | 137 | 7.1 | ubuntu linux (28) · debian linux (24) · opensuse (19) |
| Consumer Software▸ 4 | 56 | 101 | · | 11 | 26 | 8.6 | flash player (34) · adobe integrated runtime (17) · air (17) |
| Enterprise Software▸ 5 | 50 | 8 | · | 11 | 58 | 9.7 | security qradar incident forensics (7) · system networking switch center (4) · arcsight logger (3) |
| Networking Infrastructure▸ 5 | 44 | 5 | · | 12 | 31 | 6.9 | cisco firepower extensible operating system (8) · firepower extensible operating system (8) · na model 862 gw mono firmware (4) |
| OSS Libraries▸ 6 | 42 | 2 | 1 | 17 | 24 | 6.8 | ffmpeg (11) · libpng (4) · libxml2 (3) |
| Web & CMS Plugins▸ 3 | 31 | · | · | 10 | 12 | 7.5 | openoffice (8) · ambari (6) · wordpress (6) |
| Mobile Apps▸ 2 | 31 | 14 | · | 6 | 19 | 7.4 | android (20) · espace firmware (3) · picasa (2) |
| Security Products▸ 5 | 18 | 18 | · | 12 | 31 | 7.8 | ipsilon (2) · arcsight enterprise security manager (1) · isilon onefs (1) |
| Databases▸ 1 | 16 | 19 | 10 | 3 | 31 | 7.7 | solaris (5) · linux (2) · openjdk (2) |
| Cloud & SaaS▸ 3 | 15 | 2 | · | 6 | 8 | 6.8 | netscaler application delivery controller firmware (3) · netscaler gateway firmware (3) · netscaler service delivery appliance service vm (3) |
| DevTools & CI▸ 1 | 12 | 1 | 1 | 1 | 1 | 6.2 | jenkins (12) |
| Hardware Firmware▸ 2 | 9 | 2 | · | 3 | 3 | 7.7 | gpu driver (5) · nvidia gpu (4) |
| ICS / OT / IoT▸ 2 | 6 | 10 | · | 5 | 13 | 9.6 | visilogic oplc ide (2) · eki-122x series firmware (1) · eki-1321 series firmware (1) |
| Communications▸ 1 | 3 | · | · | 4 | 5 | 5.0 | groupware (1) · horde application framework (1) · ox guard (1) |
| Unclassified | 15 | 5 | · | 10 | 13 | 6.6 | gprs cs2300-r firmware (4) · applican (2) · ос тд аис фссп россии (2) |
Weakness × Sector
Which weaknesses hit which solution categories in November 2015
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds200Information Exposure264CWE-26420Improper Input Validation79XSS399CWE-399254CWE-254284CWE-284352CSRF189CWE-189Operating Systems2415188453124Consumer Software4185261414OSS Libraries1010104211111Networking Infrastructure11081159151Web & CMS Plugins262172121Enterprise Software745111121Security Products34414111Hardware Firmware213121Databases1334Cloud & SaaS23122