month report
December 2015
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
December 2015 closed with 567 published CVEs. 187 criticals, adobe led volume, mostly via flash player. Top weakness class — CWE-119 (142 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
567
— MoM— YoY
Severity mix
187 / 149
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.5%
3 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
3732.1
n=3
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2359
n=3
Weakness × Vendor
What's spreading where in December 2015
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
119Memory Buffer Bounds200Information Exposure264CWE-26420Improper Input Validation79XSS189CWE-189352CSRF399CWE-399255CWE-25522Path Traversaladobe21111adobe systems inc.21111apple40665111apple inc.42564111microsoft corp39575311microsoft3367531google14101142cisco175663811fedoraproject116226google inc810411opensuse86129canonical833112
Most discussed CVEs — December 2015
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #13pcre18 CVE
- #22acorn computers8 CVE
- #23xmlsoft8 CVE
- #24фссп россии8 CVE
- #27ewon6 CVE
- #30joomla5 CVE
- #32adcon4 CVE
- #36openssl software foundation4 CVE
- #39ampedwireless3 CVE
- #40corega3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 99 CVE79 critCVSS 9.6KEV 1PoC 22flash player (98) · adobe integrated runtime (98) · air (98)
- 80 CVE11 critCVSS 6.5PoC 10iphone os (54) · ios (51) · mac os x (51)
- 66 CVE38 critCVSS 8.2KEV 1PoC 8internet explorer (28) · microsoft edge (14) · edge (13)
- 56 CVE20 critCVSS 7.4PoC 1chrome (33) · android (23) · google chrome (10)
- 44 CVE2 critCVSS 6.7PoC 3emergency responder (4) · ios xe (3) · unified communications manager (3)
- 32 CVE11 critCVSS 7.3PoC 3fedora (32)
- 28 CVE6 critCVSS 6.8KEV 1PoC 2opensuse (28) · leap (27) · evergreen (1)
- 27 CVECVSS 6.2PoC 4ubuntu linux (22) · ubuntu (19) · lxcfs (2)
- 21 CVE6 critCVSS 7.0PoC 1firefox (21) · firefox esr (7)
- 21 CVE1 critCVSS 6.0KEV 1PoC 4enterprise linux desktop (18) · enterprise linux workstation (18) · enterprise linux server (18)
- 20 CVE1 critCVSS 6.3PoC 3debian linux (19) · dpkg (1)
- 19 CVECVSS 6.0PoC 3debian gnu/linux (12) · libxml2 (8) · unix (8)
- 18 CVE6 critCVSS 8.2NEWPoC 3perl compatible regular expression library (16) · pcre (2)
- 12 CVE3 critCVSS 6.3PoC 3linux (8) · solaris (3) · vm virtualbox (2)
- 11 CVE4 critCVSS 9.0PoC 1gs1900-10hp firmware (4) · pmg5318-b20a firmware (4) · nbg-418n (2)
- 10 CVECVSS 6.3KEV 1PoC 2icewall federation agent (8) · icewall file manager (8) · icewall sso agent option (1)
- 10 CVECVSS 5.1websphere portal (5) · infosphere biginsights (3) · java 2 sdk (1)
- 10 CVE6 critCVSS 8.7php (10)
- 9 CVE1 critCVSS 6.0PoC 2os/2 (8) · powerkvm (1)
- 9 CVECVSS 4.5PoC 1linux kernel (9)
- 9 CVECVSS 6.7astra linux common edition (9)
- 8 CVECVSS 5.5NEWPoC 2risc os (8)
- 8 CVECVSS 5.5NEWPoC 2libxml2 (8)
- 8 CVECVSS 5.5NEWPoC 2ос тд аис фссп россии (8)
- 7 CVECVSS 6.5samba (7)
- 7 CVECVSS 6.5samba (7)
- 6 CVE1 critCVSS 7.6NEWPoC 5ewon firmware (6)
- 6 CVE1 critCVSS 8.3PoC 1com.orientechnologies:orientdb-studio (2) · com.orientechnologies:orientdb-server (1) · commons-collections:commons-collections (1)
- 6 CVE1 critCVSS 7.0PoC 5zxhn h108n r1a firmware (6) · zxv10 w300 firmware (1)
- 5 CVECVSS 7.4NEWNuclei 1PoC 2joomla\! (4) · session (1)
- 5 CVECVSS 5.9openssl (5)
- 4 CVE1 critCVSS 9.0NEWa840 telemetry gateway base station firmware (4)
- 4 CVE1 critCVSS 7.2PoC 1cordova file transfer (1) · hive (1) · hbase (1)
- 4 CVECVSS 5.3wl-330nul firmware (3) · wl-33nul firmware (1) · wl-330nul (1)
- 4 CVECVSS 7.1PoC 2isilon onefs (1) · networker (1) · secure remote services (1)
- 4 CVECVSS 6.2NEWopenssl (4)
- 4 CVECVSS 7.0PoC 4symfony/security-http (2) · symfony/security (2) · symfony/symfony (2)
- 4 CVECVSS 6.1xen (4)
- 3 CVE1 critCVSS 8.0NEWr10000 firmware (3)
- 3 CVE1 critCVSS 7.1NEWcg-wlbaragm firmware (1) · cg-wlbargs firmware (1) · cg-wlncm4g firmware (1)
- 3 CVECVSS 7.5NEWimap (3)
- 3 CVECVSS 8.0ffmpeg (3)
- 3 CVECVSS 8.0NEWffmpeg (3)
- 3 CVECVSS 6.0NEWuptime infrastructure monitor (3)
- 3 CVECVSS 6.3NEWPoC 1bind (2) · kea (1)
- 3 CVE1 critCVSS 8.7NEWlac9000436u firmware (3) · lac9000464u firmware (3)
- 3 CVE1 critCVSS 8.2NEWPoC 1medialink mwn-wapr300n firmware (3) · medialink mwn-warp300n (2)
- 3 CVECVSS 7.3NEWoncell central manager (2) · moxa edr-810 (1)
- 3 CVE1 critCVSS 8.3NEWnode.js (3)
- 3 CVECVSS 7.5opensuse (3) · opensuse leap (3)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | adobe | 99 | 79 | 1 | · | KEV 1PoC 22 | flash player (98) · adobe integrated runtime (98) · air (98) | — | |
| 2 | apple | 80 | 11 | · | · | PoC 10 | iphone os (54) · ios (51) · mac os x (51) | — | |
| 3 | microsoft | 66 | 38 | 1 | · | KEV 1PoC 8 | internet explorer (28) · microsoft edge (14) · edge (13) | — | |
| 4 | 56 | 20 | · | · | PoC 1 | chrome (33) · android (23) · google chrome (10) | — | ||
| 5 | cisco | 44 | 2 | · | · | PoC 3 | emergency responder (4) · ios xe (3) · unified communications manager (3) | — | |
| 6 | fedoraproject | 32 | 11 | · | · | PoC 3 | fedora (32) | — | |
| 7 | opensuse | 28 | 6 | 1 | · | KEV 1PoC 2 | opensuse (28) · leap (27) · evergreen (1) | — | |
| 8 | canonical | 27 | · | · | · | PoC 4 | ubuntu linux (22) · ubuntu (19) · lxcfs (2) | — | |
| 9 | mozilla | 21 | 6 | · | · | PoC 1 | firefox (21) · firefox esr (7) | — | |
| 10 | redhat | 21 | 1 | 1 | · | KEV 1PoC 4 | enterprise linux desktop (18) · enterprise linux workstation (18) · enterprise linux server (18) | — | |
| 11 | debian | 20 | 1 | · | · | PoC 3 | debian linux (19) · dpkg (1) | — | |
| 12 | сообщество свободного программного обеспечения | 19 | · | · | · | PoC 3 | debian gnu/linux (12) · libxml2 (8) · unix (8) | — | |
| 13 | pcre | 18 | 6 | · | · | NEWPoC 3 | perl compatible regular expression library (16) · pcre (2) | — | |
| 14 | oracle | 12 | 3 | · | · | PoC 3 | linux (8) · solaris (3) · vm virtualbox (2) | — | |
| 15 | zyxel | 11 | 4 | · | · | PoC 1 | gs1900-10hp firmware (4) · pmg5318-b20a firmware (4) · nbg-418n (2) | — | |
| 16 | hp | 10 | · | 1 | · | KEV 1PoC 2 | icewall federation agent (8) · icewall file manager (8) · icewall sso agent option (1) | — | |
| 17 | ibm | 10 | · | · | · | websphere portal (5) · infosphere biginsights (3) · java 2 sdk (1) | — | ||
| 18 | php | 10 | 6 | · | · | php (10) | — | ||
| 19 | ibm corp. | 9 | 1 | · | · | PoC 2 | os/2 (8) · powerkvm (1) | — | |
| 20 | linux | 9 | · | · | · | PoC 1 | linux kernel (9) | — | |
| 21 | ооо «русбитех-астра» | 9 | · | · | · | astra linux common edition (9) | — | ||
| 22 | acorn computers | 8 | · | · | · | NEWPoC 2 | risc os (8) | — | |
| 23 | xmlsoft | 8 | · | · | · | NEWPoC 2 | libxml2 (8) | — | |
| 24 | фссп россии | 8 | · | · | · | NEWPoC 2 | ос тд аис фссп россии (8) | — | |
| 25 | samba | 7 | · | · | · | samba (7) | — | ||
| 26 | samba team | 7 | · | · | · | samba (7) | — | ||
| 27 | ewon | 6 | 1 | · | · | NEWPoC 5 | ewon firmware (6) | — | |
| 28 | maven | 6 | 1 | · | · | PoC 1 | com.orientechnologies:orientdb-studio (2) · com.orientechnologies:orientdb-server (1) · commons-collections:commons-collections (1) | — | |
| 29 | zte | 6 | 1 | · | · | PoC 5 | zxhn h108n r1a firmware (6) · zxv10 w300 firmware (1) | — | |
| 30 | joomla | 5 | · | · | 1 | NEWNuclei 1PoC 2 | joomla\! (4) · session (1) | — | |
| 31 | openssl | 5 | · | · | · | openssl (5) | — | ||
| 32 | adcon | 4 | 1 | · | · | NEW | a840 telemetry gateway base station firmware (4) | — | |
| 33 | apache | 4 | 1 | · | · | PoC 1 | cordova file transfer (1) · hive (1) · hbase (1) | — | |
| 34 | asus | 4 | · | · | · | wl-330nul firmware (3) · wl-33nul firmware (1) · wl-330nul (1) | — | ||
| 35 | emc | 4 | · | · | · | PoC 2 | isilon onefs (1) · networker (1) · secure remote services (1) | — | |
| 36 | openssl software foundation | 4 | · | · | · | NEW | openssl (4) | — | |
| 37 | packagist | 4 | · | · | · | PoC 4 | symfony/security-http (2) · symfony/security (2) · symfony/symfony (2) | — | |
| 38 | xen | 4 | · | · | · | xen (4) | — | ||
| 39 | ampedwireless | 3 | 1 | · | · | NEW | r10000 firmware (3) | — | |
| 40 | corega | 3 | 1 | · | · | NEW | cg-wlbaragm firmware (1) · cg-wlbargs firmware (1) · cg-wlncm4g firmware (1) | — | |
| 41 | cyrus | 3 | · | · | · | NEW | imap (3) | — | |
| 42 | ffmpeg | 3 | · | · | · | ffmpeg (3) | — | ||
| 43 | ffmpeg team | 3 | · | · | · | NEW | ffmpeg (3) | — | |
| 44 | idera | 3 | · | · | · | NEW | uptime infrastructure monitor (3) | — | |
| 45 | isc | 3 | · | · | · | NEWPoC 1 | bind (2) · kea (1) | — | |
| 46 | lacie | 3 | 1 | · | · | NEW | lac9000436u firmware (3) · lac9000464u firmware (3) | — | |
| 47 | mediabridge | 3 | 1 | · | · | NEWPoC 1 | medialink mwn-wapr300n firmware (3) · medialink mwn-warp300n (2) | — | |
| 48 | moxa inc. | 3 | · | · | · | NEW | oncell central manager (2) · moxa edr-810 (1) | — | |
| 49 | nodejs | 3 | 1 | · | · | NEW | node.js (3) | — | |
| 50 | novell inc. | 3 | · | · | · | opensuse (3) · opensuse leap (3) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems154 CVE231 crit9 KEV18 vendorsCVSS 8.2fedora (34) · opensuse (31) · leap (27)
- Mobile Apps139 CVE78 crit6 vendorsCVSS 7.4iphone os (54) · ios (51) · mac os x (51)
- Consumer Software124 CVE488 crit6 KEV9 vendorsCVSS 9.5flash player (196) · adobe integrated runtime (98) · air (98)
- 41 crit2 KEV18 vendorsCVSS 9.0zxhn h108n r1a firmware (6) · emergency responder (4) · screenos (4)
- OSS Libraries57 CVE19 crit19 vendorsCVSS 8.3perl compatible regular expression library (16) · php (12) · openssl (9)
- Enterprise Software38 CVE6 KEV10 vendorsCVSS 7.5icewall federation agent (8) · icewall file manager (8) · websphere portal (5)
- Databases25 CVE6 crit6 vendorsCVSS 6.9linux (8) · os/2 (8) · solaris (3)
- ICS / OT / IoT22 CVE43 crit13 vendorsCVSS 10.0ewon firmware (6) · oncell central manager (4) · 1000 ccu gms (1)
- Security Products16 CVE20 crit14 vendorsCVSS 9.0active directory self service (1) · ad self password reset (1) · isilon onefs (1)
- Web & CMS Plugins15 CVE4 crit8 vendorsCVSS 7.6joomla\! (4) · 1с-битрикс (2) · commons collections (2)
- Hardware Firmware15 CVE11 crit7 vendorsCVSS 9.0a840 telemetry gateway base station firmware (4)
- Cloud & SaaS9 CVE1 crit4 vendorsCVSS 10.0xen (4)
- Communications4 CVE3 vendorsCVSS 7.5cyrus imap (3) · imap (3)
- AI / ML1 CVE1 vendorsCVSS 7.5cups-filters (1) · foomatic-filters (1)
- DevTools & CI1 CVE2 crit2 vendorsCVSS 10.0git (2)
- Unclassified17 CVE3 crit8 vendorsCVSS 6.4ос тд аис фссп россии (8) · amped wireless r10000 (2) · cardio server (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 2 | 154 | 231 | 9 | 18 | 88 | 8.2 | fedora (34) · opensuse (31) · leap (27) |
| Mobile Apps▸ 2 | 139 | 78 | · | 6 | 15 | 7.4 | iphone os (54) · ios (51) · mac os x (51) |
| Consumer Software▸ 3 | 124 | 488 | 6 | 9 | 22 | 9.5 | flash player (196) · adobe integrated runtime (98) · air (98) |
| Networking Infrastructure▸ 4 | 82 | 41 | 2 | 18 | 85 | 9.0 | zxhn h108n r1a firmware (6) · emergency responder (4) · screenos (4) |
| OSS Libraries▸ 6 | 57 | 19 | · | 19 | 32 | 8.3 | perl compatible regular expression library (16) · php (12) · openssl (9) |
| Enterprise Software▸ 4 | 38 | · | 6 | 10 | 24 | 7.5 | icewall federation agent (8) · icewall file manager (8) · websphere portal (5) |
| Databases▸ 3 | 25 | 6 | · | 6 | 21 | 6.9 | linux (8) · os/2 (8) · solaris (3) |
| ICS / OT / IoT▸ 4 | 22 | 43 | · | 13 | 50 | 10.0 | ewon firmware (6) · oncell central manager (4) · 1000 ccu gms (1) |
| Security Products▸ 3 | 16 | 20 | · | 14 | 36 | 9.0 | active directory self service (1) · ad self password reset (1) · isilon onefs (1) |
| Web & CMS Plugins▸ 4 | 15 | 4 | · | 8 | 14 | 7.6 | joomla\! (4) · 1с-битрикс (2) · commons collections (2) |
| Hardware Firmware▸ 4 | 15 | 11 | · | 7 | 14 | 9.0 | a840 telemetry gateway base station firmware (4) |
| Cloud & SaaS▸ 3 | 9 | 1 | · | 4 | 6 | 10.0 | xen (4) |
| Communications▸ 2 | 4 | · | · | 3 | 3 | 7.5 | cyrus imap (3) · imap (3) |
| AI / ML▸ 1 | 1 | · | · | 1 | 2 | 7.5 | cups-filters (1) · foomatic-filters (1) |
| DevTools & CI▸ 1 | 1 | 2 | · | 2 | 1 | 10.0 | git (2) |
| Unclassified | 17 | 3 | · | 8 | 8 | 6.4 | ос тд аис фссп россии (8) · amped wireless r10000 (2) · cardio server (2) |
Weakness × Sector
Which weaknesses hit which solution categories in December 2015
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds200Information Exposure264CWE-26420Improper Input Validation79XSS189CWE-189352CSRF399CWE-399255CWE-25522Path TraversalConsumer Software779129310Operating Systems703622131331OSS Libraries5111332413Networking Infrastructure110141097882Enterprise Software84152ICS / OT / IoT381121Databases43222Hardware Firmware6221121Security Products372Web & CMS Plugins24214