month report
January 2016
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
January 2016 closed with 670 published CVEs. 64 criticals, oracle led volume, mostly via solaris. Biggest breakout: oracle at ×17.0 their 12-month median. Top weakness class — CWE-119 (68 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
670
— MoM— YoY
Severity mix
64 / 163
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.9%
6 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
3710.0
n=6
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2262
n=2
Detection gap
KEV pressure, no Nuclei coverage
January 2016 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1microsoft25 CVE
Weakness × Vendor
What's spreading where in January 2016
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — January 2016
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #19advantech co., ltd11 CVE
- #24kddi6 CVE
- #32fedora project4 CVE
- #34lenovo4 CVE
- #35matroska4 CVE
- #38cgit project3 CVE
- #39f5 networks, inc.3 CVE
- #40isc3 CVE
- #42openbsd project3 CVE
- #44roundcube3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 230 CVE12 critCVSS 5.3×17.0PoC 13solaris (30) · e-business suite (24) · mysql (23)
- 76 CVE2 critCVSS 5.4KEV 1Nuclei 1PoC 2jazz reporting service (7) · maximo for life sciences (6) · maximo for nuclear power (6)
- 43 CVE4 critCVSS 5.7PoC 2leap (43) · opensuse (38)
- 34 CVE3 critCVSS 5.7PoC 4ubuntu linux (32) · ubuntu (4)
- 33 CVECVSS 5.5×5.5wireshark (33)
- 27 CVE3 critCVSS 6.7PoC 2android (16) · chrome (11) · google chrome (11)
- 25 CVE1 critCVSS 5.6PoC 1debian linux (24) · fuse (1)
- 25 CVE1 critCVSS 7.0KEV 1PoC 4windows 7 service pack 1 (9) · windows 7 (9) · windows server 2008 r2 service pack 1 (8)
- 24 CVE4 critCVSS 5.1PoC 1enterprise linux (18) · enterprise linux workstation (13) · enterprise linux desktop (12)
- 23 CVE5 critCVSS 7.7PoC 1firesight system software (2) · identity services engine software (2) · aironet access point software (2)
- 22 CVE4 critCVSS 7.3PoC 3firefox (17) · firefox os (3) · bugzilla (2)
- 18 CVE1 critCVSS 6.8PoC 2mac os x (9) · quicktime (9) · os x (5)
- 17 CVE6 critCVSS 9.1acrobat dc (17) · acrobat reader (17) · acrobat reader dc (17)
- 16 CVE5 critCVSS 8.2×16.0PoC 1webaccess (15) · eki-1321 series firmware (1) · eki-1322 series firmware (1)
- 15 CVE3 critCVSS 7.1PoC 1fedora (15)
- 14 CVECVSS 6.5×14.0p8 firmware (3) · vcn500 (3) · gem-703l firmware (2)
- 14 CVECVSS 4.5PoC 1mariadb (14)
- 13 CVE1 critCVSS 7.3PoC 2storeonce backup system software (3) · storeonce backup (3) · hpe systems insight manager (2)
- 11 CVE5 critCVSS 8.5NEWPoC 1advantech webaccess (10) · eki серии 1321 (1) · eki серии 1322 (1)
- 11 CVE3 critCVSS 8.1PoC 3php (11)
- 10 CVE2 critCVSS 7.9PoC 3php (10)
- 7 CVECVSS 6.1×4.7PoC 2typo3/cms (4) · dolibarr/dolibarr (1) · symphonycms/symphony-2 (1)
- 6 CVECVSS 6.0×6.0junos (5) · screenos (1)
- 6 CVECVSS 6.0NEWhome spot cube firmware (6)
- 6 CVECVSS 6.2×3.0nova (2) · swift (2) · orchestration api (1)
- 6 CVECVSS 5.6×6.0typo3 (6)
- 5 CVE2 critCVSS 7.3big-ip access policy manager (5) · big-ip application security manager (4) · big-ip analytics (4)
- 5 CVE1 critCVSS 7.0PoC 1swift (2) · nova (1) · pygments (1)
- 5 CVE3 critCVSS 8.4PoC 1netweaver (2) · hana (2) · sap hana (2)
- 5 CVE1 critCVSS 8.1PoC 3debian gnu/linux (4) · nghttp2 (1)
- 4 CVE1 critCVSS 8.8PoC 1hadoop (1) · activemq (1) · hive (1)
- 4 CVECVSS 7.9NEWPoC 2fedora (4)
- 4 CVE2 critCVSS 8.6×4.0KEV 1Nuclei 1PoC 1ibm spectrum protect for virtual environments (1) · ibm webshpere portal (1) · installation manager (1)
- 4 CVECVSS 6.8NEWPoC 4shareit (4)
- 4 CVE1 critCVSS 5.9NEWlibebml (3) · libmatroska (1)
- 4 CVE1 critCVSS 7.9file lock (2) · application control (1) · epolicy orchestrator (1)
- 4 CVECVSS 5.5PoC 1owncloud (4) · owncloud server (4)
- 3 CVE1 critCVSS 5.7NEWcgit (3)
- 3 CVE2 critCVSS 7.1NEWbig-ip access policy manager (3) · big-ip advanced firewall manager (2) · big-ip analytics (2)
- 3 CVECVSS 6.7NEW×3.0bind (2) · dhcp (1)
- 3 CVECVSS 6.6PoC 2openssh (3)
- 3 CVECVSS 6.6NEWPoC 2openssh (3)
- 3 CVECVSS 6.2prosody (3)
- 3 CVECVSS 6.7NEW×3.0PoC 1roundcube webmail (2) · webmail (1)
- 3 CVECVSS 7.9web viewer (3)
- 3 CVECVSS 7.0PoC 2unified threat management software (2) · unified threat management up2date (1)
- 3 CVECVSS 6.6xen (3)
- 2 CVECVSS 7.1NEWPoC 2fritz\! os (2)
- 2 CVECVSS 7.5NEWwmr-433 firmware (2) · wsr-1166dhp firmware (2) · wmr-300 firmware (2)
- 2 CVECVSS 5.8PoC 2dolibarr (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 230 | 12 | · | · | ×17.0PoC 13 | solaris (30) · e-business suite (24) · mysql (23) | — | |
| 2 | ibm | 76 | 2 | 1 | 1 | KEV 1Nuclei 1PoC 2 | jazz reporting service (7) · maximo for life sciences (6) · maximo for nuclear power (6) | — | |
| 3 | opensuse | 43 | 4 | · | · | PoC 2 | leap (43) · opensuse (38) | — | |
| 4 | canonical | 34 | 3 | · | · | PoC 4 | ubuntu linux (32) · ubuntu (4) | — | |
| 5 | wireshark | 33 | · | · | · | ×5.5 | wireshark (33) | — | |
| 6 | 27 | 3 | · | · | PoC 2 | android (16) · chrome (11) · google chrome (11) | — | ||
| 7 | debian | 25 | 1 | · | · | PoC 1 | debian linux (24) · fuse (1) | — | |
| 8 | microsoft | 25 | 1 | 1 | · | KEV 1PoC 4 | windows 7 service pack 1 (9) · windows 7 (9) · windows server 2008 r2 service pack 1 (8) | — | |
| 9 | redhat | 24 | 4 | · | · | PoC 1 | enterprise linux (18) · enterprise linux workstation (13) · enterprise linux desktop (12) | — | |
| 10 | cisco | 23 | 5 | · | · | PoC 1 | firesight system software (2) · identity services engine software (2) · aironet access point software (2) | — | |
| 11 | mozilla | 22 | 4 | · | · | PoC 3 | firefox (17) · firefox os (3) · bugzilla (2) | — | |
| 12 | apple | 18 | 1 | · | · | PoC 2 | mac os x (9) · quicktime (9) · os x (5) | — | |
| 13 | adobe | 17 | 6 | · | · | acrobat dc (17) · acrobat reader (17) · acrobat reader dc (17) | — | ||
| 14 | advantech | 16 | 5 | · | · | ×16.0PoC 1 | webaccess (15) · eki-1321 series firmware (1) · eki-1322 series firmware (1) | — | |
| 15 | fedoraproject | 15 | 3 | · | · | PoC 1 | fedora (15) | — | |
| 16 | huawei | 14 | · | · | · | ×14.0 | p8 firmware (3) · vcn500 (3) · gem-703l firmware (2) | — | |
| 17 | mariadb | 14 | · | · | · | PoC 1 | mariadb (14) | — | |
| 18 | hp | 13 | 1 | · | · | PoC 2 | storeonce backup system software (3) · storeonce backup (3) · hpe systems insight manager (2) | — | |
| 19 | advantech co., ltd | 11 | 5 | · | · | NEWPoC 1 | advantech webaccess (10) · eki серии 1321 (1) · eki серии 1322 (1) | — | |
| 20 | php | 11 | 3 | · | · | PoC 3 | php (11) | — | |
| 21 | php group | 10 | 2 | · | · | PoC 3 | php (10) | — | |
| 22 | packagist | 7 | · | · | · | ×4.7PoC 2 | typo3/cms (4) · dolibarr/dolibarr (1) · symphonycms/symphony-2 (1) | — | |
| 23 | juniper | 6 | · | · | · | ×6.0 | junos (5) · screenos (1) | — | |
| 24 | kddi | 6 | · | · | · | NEW | home spot cube firmware (6) | — | |
| 25 | openstack | 6 | · | · | · | ×3.0 | nova (2) · swift (2) · orchestration api (1) | — | |
| 26 | typo3 | 6 | · | · | · | ×6.0 | typo3 (6) | — | |
| 27 | f5 | 5 | 2 | · | · | big-ip access policy manager (5) · big-ip application security manager (4) · big-ip analytics (4) | — | ||
| 28 | pypi | 5 | 1 | · | · | PoC 1 | swift (2) · nova (1) · pygments (1) | — | |
| 29 | sap | 5 | 3 | · | · | PoC 1 | netweaver (2) · hana (2) · sap hana (2) | — | |
| 30 | сообщество свободного программного обеспечения | 5 | 1 | · | · | PoC 3 | debian gnu/linux (4) · nghttp2 (1) | — | |
| 31 | apache | 4 | 1 | · | · | PoC 1 | hadoop (1) · activemq (1) · hive (1) | — | |
| 32 | fedora project | 4 | · | · | · | NEWPoC 2 | fedora (4) | — | |
| 33 | ibm corp. | 4 | 2 | 1 | 1 | ×4.0KEV 1Nuclei 1PoC 1 | ibm spectrum protect for virtual environments (1) · ibm webshpere portal (1) · installation manager (1) | — | |
| 34 | lenovo | 4 | · | · | · | NEWPoC 4 | shareit (4) | — | |
| 35 | matroska | 4 | 1 | · | · | NEW | libebml (3) · libmatroska (1) | — | |
| 36 | mcafee | 4 | 1 | · | · | file lock (2) · application control (1) · epolicy orchestrator (1) | — | ||
| 37 | owncloud | 4 | · | · | · | PoC 1 | owncloud (4) · owncloud server (4) | — | |
| 38 | cgit project | 3 | 1 | · | · | NEW | cgit (3) | — | |
| 39 | f5 networks, inc. | 3 | 2 | · | · | NEW | big-ip access policy manager (3) · big-ip advanced firewall manager (2) · big-ip analytics (2) | — | |
| 40 | isc | 3 | · | · | · | NEW×3.0 | bind (2) · dhcp (1) | — | |
| 41 | openbsd | 3 | · | · | · | PoC 2 | openssh (3) | — | |
| 42 | openbsd project | 3 | · | · | · | NEWPoC 2 | openssh (3) | — | |
| 43 | prosody | 3 | · | · | · | prosody (3) | — | ||
| 44 | roundcube | 3 | · | · | · | NEW×3.0PoC 1 | roundcube webmail (2) · webmail (1) | — | |
| 45 | samsung | 3 | · | · | · | web viewer (3) | — | ||
| 46 | sophos | 3 | · | · | · | PoC 2 | unified threat management software (2) · unified threat management up2date (1) | — | |
| 47 | xen | 3 | · | · | · | xen (3) | — | ||
| 48 | avm | 2 | · | · | · | NEWPoC 2 | fritz\! os (2) | — | |
| 49 | buffalotech | 2 | · | · | · | NEW | wmr-433 firmware (2) · wsr-1166dhp firmware (2) · wmr-300 firmware (2) | — | |
| 50 | dolibarr | 2 | · | · | · | PoC 2 | dolibarr (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Databases235 CVE28 crit1 KEV6 vendorsCVSS 5.3solaris (48) · mysql (44) · e-business suite (24)
- Enterprise Software109 CVE19 crit7 KEV15 vendorsCVSS 9.8jazz reporting service (7) · maximo asset management (6) · maximo asset management essentials (6)
- Operating Systems108 CVE33 crit2 KEV18 vendorsCVSS 7.2leap (43) · opensuse (39) · ubuntu linux (32)
- Mobile Apps62 CVE10 crit6 vendorsCVSS 6.8android (29) · chrome (11) · google chrome (11)
- OSS Libraries56 CVE15 crit31 vendorsCVSS 8.8php (21) · curl (3) · ffmpeg (3)
- Security Products49 CVE12 crit7 vendorsCVSS 8.8wireshark (33) · greenbone os (1) · greenbone security assistant (1)
- 26 crit16 vendorsCVSS 9.8junos (5) · adaptive security appliance software (2) · aironet access point software (2)
- Consumer Software39 CVE57 crit4 vendorsCVSS 9.1firefox (21) · firefox os (3) · bugzilla (2)
- ICS / OT / IoT39 CVE22 crit9 vendorsCVSS 8.8webaccess (15) · 1763-l16awa series a (1) · 1763-l16awa series b (1)
- Cloud & SaaS22 CVE1 crit10 vendorsCVSS 7.5owncloud (4) · owncloud server (4) · nova (2)
- Web & CMS Plugins14 CVE2 crit6 vendorsCVSS 7.6typo3 (6) · activemq (1) · hadoop (1)
- Communications8 CVE4 vendorsCVSS 6.7prosody (3) · gajim (1) · quassel (1)
- Hardware Firmware8 CVE4 crit5 vendorsCVSS 9.8shareit (4)
- DevTools & CI3 CVE1 crit1 vendorsCVSS 5.7cgit (3)
- Unclassified3 CVE3 vendorsCVSS 5.9blueman (1) · field group (1) · gummi (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Databases▸ 1 | 235 | 28 | 1 | 6 | 70 | 5.3 | solaris (48) · mysql (44) · e-business suite (24) |
| Enterprise Software▸ 6 | 109 | 19 | 7 | 15 | 245 | 9.8 | jazz reporting service (7) · maximo asset management (6) · maximo asset management essentials (6) |
| Operating Systems▸ 3 | 108 | 33 | 2 | 18 | 105 | 7.2 | leap (43) · opensuse (39) · ubuntu linux (32) |
| Mobile Apps▸ 2 | 62 | 10 | · | 6 | 25 | 6.8 | android (29) · chrome (11) · google chrome (11) |
| OSS Libraries▸ 8 | 56 | 15 | · | 31 | 37 | 8.8 | php (21) · curl (3) · ffmpeg (3) |
| Security Products▸ 4 | 49 | 12 | · | 7 | 33 | 8.8 | wireshark (33) · greenbone os (1) · greenbone security assistant (1) |
| Networking Infrastructure▸ 5 | 48 | 26 | · | 16 | 59 | 9.8 | junos (5) · adaptive security appliance software (2) · aironet access point software (2) |
| Consumer Software▸ 2 | 39 | 57 | · | 4 | 15 | 9.1 | firefox (21) · firefox os (3) · bugzilla (2) |
| ICS / OT / IoT▸ 5 | 39 | 22 | · | 9 | 20 | 8.8 | webaccess (15) · 1763-l16awa series a (1) · 1763-l16awa series b (1) |
| Cloud & SaaS▸ 4 | 22 | 1 | · | 10 | 17 | 7.5 | owncloud (4) · owncloud server (4) · nova (2) |
| Web & CMS Plugins▸ 2 | 14 | 2 | · | 6 | 9 | 7.6 | typo3 (6) · activemq (1) · hadoop (1) |
| Communications▸ 2 | 8 | · | · | 4 | 5 | 6.7 | prosody (3) · gajim (1) · quassel (1) |
| Hardware Firmware▸ 3 | 8 | 4 | · | 5 | 5 | 9.8 | shareit (4) |
| DevTools & CI▸ 1 | 3 | 1 | · | 1 | 1 | 5.7 | cgit (3) |
| Unclassified | 3 | · | · | 3 | 3 | 5.9 | blueman (1) · field group (1) · gummi (1) |
Weakness × Sector
Which weaknesses hit which solution categories in January 2016
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds20Improper Input Validation79XSS200Information Exposure264CWE-264399CWE-399254CWE-25422Path Traversal17CWE-17352CSRFEnterprise Software3520191022145Operating Systems276911141313Databases44421Networking Infrastructure645835731OSS Libraries15671032211Consumer Software20347122ICS / OT / IoT83312112Cloud & SaaS121533111Hardware Firmware22133121Security Products323221