month report
February 2016
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
February 2016 closed with 394 published CVEs. 42 criticals, debian led volume, mostly via debian linux. Top weakness class — CWE-119 (63 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
394
— MoM— YoY
Severity mix
42 / 159
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.5%
2 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
3674.1
n=2
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2296
n=5
Detection gap
KEV pressure, no Nuclei coverage
February 2016 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1debian40 CVE
- KEV 1microsoft36 CVE
- KEV 1opensuse25 CVE
- KEV 1redhat9 CVE
- KEV 1rubygems9 CVE
- KEV 1rubyonrails9 CVE
- KEV 1rails core team6 CVE
- KEV 1suse4 CVE
Weakness × Vendor
What's spreading where in February 2016
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
119Memory Buffer Bounds200Information Exposure264CWE-26479XSS20Improper Input Validation787Out-of-bounds Write254CWE-254284CWE-284255CWE-255352CSRFdebian1028121microsoft1735141microsoft corp1735141adobe32111511ibm373911211adobe systems inc.311511canonical61321opensuse43523google51122google inc511321moodle711622packagist797412
Most discussed CVEs — February 2016
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #11мартин догиамас23 CVE
- #28ffmpeg team6 CVE
- #30rails core team6 CVE
- #31ipswitch5 CVE
- #40jenkins4 CVE
- #41qnap4 CVE
- #43sil4 CVE
- #44sil international4 CVE
- #45squid-cache4 CVE
- #46squid software foundation4 CVE
Top vendors
Ranked by distinct CVE count this period.
- 40 CVE2 critCVSS 7.1KEV 1PoC 9debian linux (40)
- 36 CVECVSS 7.6KEV 1PoC 4internet explorer (13) · windows server 2012 (12) · windows server 2012 r2 (11)
- 32 CVE4 critCVSS 8.8KEV 1Nuclei 1PoC 11flash player (22) · flash player desktop runtime (22) · adobe integrated runtime (22)
- 31 CVE4 critCVSS 6.5websphere portal (8) · qradar security information and event manager (4) · security access manager for web 8.0 firmware (3)
- 26 CVE4 critCVSS 7.8PoC 6ubuntu linux (26) · ubuntu (6)
- 25 CVE2 critCVSS 6.9PoC 1spark (3) · unified communications manager (3) · nx-os (3)
- 25 CVE5 critCVSS 8.0PoC 2android (14) · chrome (8) · google chrome (8)
- 25 CVE5 critCVSS 7.2KEV 1PoC 3opensuse (20) · leap (18)
- 23 CVECVSS 5.4moodle (23)
- 23 CVECVSS 5.7moodle/moodle (20) · phpmyadmin/phpmyadmin (3)
- 23 CVECVSS 5.4NEWmoodle (23)
- 20 CVE2 critCVSS 8.1PoC 10iphone os (14) · ios (13) · watchos (12)
- 18 CVECVSS 6.2PoC 2fedora (18)
- 16 CVECVSS 6.0office (16)
- 16 CVE1 critCVSS 7.0PoC 5org.apache.tomcat:tomcat (7) · org.jenkins-ci.main:jenkins-core (4) · org.apache.solr:solr-core (2)
- 14 CVE2 critCVSS 6.9PoC 5tomcat (7) · solr (3) · cloudstack (2)
- 14 CVE4 critCVSS 7.1ibm webshpere portal (8) · ibm tivoli storage manager fastback (3) · ibm spectrum protect snapshot (1)
- 12 CVE1 critCVSS 6.5PoC 2linux kernel (12)
- 12 CVECVSS 6.0wireshark (12)
- 11 CVE2 critCVSS 8.1PoC 1debian gnu/linux (7) · linux (2) · libxml2 (1)
- 9 CVECVSS 5.8phpmyadmin (9)
- 9 CVECVSS 7.0KEV 1PoC 3enterprise linux workstation (3) · openshift (3) · enterprise linux desktop (3)
- 9 CVECVSS 6.3KEV 1PoC 6actionpack (4) · rails-html-sanitizer (3) · activemodel (1)
- 9 CVECVSS 6.0KEV 1PoC 6rails (6) · html sanitizer (3) · ruby on rails (3)
- 8 CVECVSS 6.6PoC 1linux (3) · exalogic infrastructure (2) · solaris (2)
- 7 CVECVSS 6.6PoC 4tomcat (7)
- 6 CVECVSS 8.4ffmpeg (6)
- 6 CVECVSS 8.4NEWffmpeg (6)
- 6 CVE3 critCVSS 8.8PoC 1opensuse leap (4) · opensuse (3) · suse linux enterprise (1)
- 6 CVECVSS 6.1NEWKEV 1PoC 6ruby on rails (6)
- 5 CVECVSS 6.3NEWPoC 5moveit mobile (3) · moveit dmz (3)
- 5 CVECVSS 8.2PoC 1firefox (5) · thunderbird (4) · firefox esr (4)
- 5 CVE2 critCVSS 7.6radicale (3) · keystonemiddleware (1) · django (1)
- 5 CVE1 critCVSS 7.4KEV 2Nuclei 1PoC 4sap netweaver (4) · netweaver (2) · netweaver application server java (2)
- 5 CVECVSS 6.5opensolaris (5)
- 5 CVECVSS 6.3gs1900-10hp firmware (5)
- 4 CVE1 critCVSS 8.0PoC 1nginx (3) · big-ip advanced firewall manager (1) · big-ip analytics (1)
- 4 CVE1 critCVSS 7.9PoC 2server migration pack (2) · continuous delivery automation (1) · helion openstack (1)
- 4 CVE1 critCVSS 7.2PoC 1mt882 firmware (2) · e5186 firmware (1) · agile controller-campus (1)
- 4 CVECVSS 7.6NEWjenkins (4)
- 4 CVE1 critCVSS 8.5NEWsignage station (3) · iartist lite (2) · sinage station (1)
- 4 CVECVSS 6.8x14j firmware (4)
- 4 CVECVSS 8.1NEWPoC 1graphite2 (4)
- 4 CVECVSS 8.1NEWPoC 1graphite 2 (4)
- 4 CVECVSS 7.5NEWsquid (4)
- 4 CVECVSS 7.5NEWsquid (4)
- 4 CVECVSS 7.8KEV 1PoC 2linux enterprise real time extension (2) · linux enterprise module for containers (1) · linux enterprise server (1)
- 4 CVE1 critCVSS 8.0encryption management server (4)
- 4 CVECVSS 7.3NEWsmartgrid lighthouse sensor management system (4)
- 4 CVECVSS 6.5NEWkeymouse firmware (4)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | debian | 40 | 2 | 1 | · | KEV 1PoC 9 | debian linux (40) | — | |
| 2 | microsoft | 36 | · | 1 | · | KEV 1PoC 4 | internet explorer (13) · windows server 2012 (12) · windows server 2012 r2 (11) | — | |
| 3 | adobe | 32 | 4 | 1 | 1 | KEV 1Nuclei 1PoC 11 | flash player (22) · flash player desktop runtime (22) · adobe integrated runtime (22) | — | |
| 4 | ibm | 31 | 4 | · | · | websphere portal (8) · qradar security information and event manager (4) · security access manager for web 8.0 firmware (3) | — | ||
| 5 | canonical | 26 | 4 | · | · | PoC 6 | ubuntu linux (26) · ubuntu (6) | — | |
| 6 | cisco | 25 | 2 | · | · | PoC 1 | spark (3) · unified communications manager (3) · nx-os (3) | — | |
| 7 | 25 | 5 | · | · | PoC 2 | android (14) · chrome (8) · google chrome (8) | — | ||
| 8 | opensuse | 25 | 5 | 1 | · | KEV 1PoC 3 | opensuse (20) · leap (18) | — | |
| 9 | moodle | 23 | · | · | · | moodle (23) | — | ||
| 10 | packagist | 23 | · | · | · | moodle/moodle (20) · phpmyadmin/phpmyadmin (3) | — | ||
| 11 | мартин догиамас | 23 | · | · | · | NEW | moodle (23) | — | |
| 12 | apple | 20 | 2 | · | · | PoC 10 | iphone os (14) · ios (13) · watchos (12) | — | |
| 13 | fedoraproject | 18 | · | · | · | PoC 2 | fedora (18) | — | |
| 14 | cybozu | 16 | · | · | · | office (16) | — | ||
| 15 | maven | 16 | 1 | · | · | PoC 5 | org.apache.tomcat:tomcat (7) · org.jenkins-ci.main:jenkins-core (4) · org.apache.solr:solr-core (2) | — | |
| 16 | apache | 14 | 2 | · | · | PoC 5 | tomcat (7) · solr (3) · cloudstack (2) | — | |
| 17 | ibm corp. | 14 | 4 | · | · | ibm webshpere portal (8) · ibm tivoli storage manager fastback (3) · ibm spectrum protect snapshot (1) | — | ||
| 18 | linux | 12 | 1 | · | · | PoC 2 | linux kernel (12) | — | |
| 19 | wireshark | 12 | · | · | · | wireshark (12) | — | ||
| 20 | сообщество свободного программного обеспечения | 11 | 2 | · | · | PoC 1 | debian gnu/linux (7) · linux (2) · libxml2 (1) | — | |
| 21 | phpmyadmin | 9 | · | · | · | phpmyadmin (9) | — | ||
| 22 | redhat | 9 | · | 1 | · | KEV 1PoC 3 | enterprise linux workstation (3) · openshift (3) · enterprise linux desktop (3) | — | |
| 23 | rubygems | 9 | · | 1 | · | KEV 1PoC 6 | actionpack (4) · rails-html-sanitizer (3) · activemodel (1) | — | |
| 24 | rubyonrails | 9 | · | 1 | · | KEV 1PoC 6 | rails (6) · html sanitizer (3) · ruby on rails (3) | — | |
| 25 | oracle | 8 | · | · | · | PoC 1 | linux (3) · exalogic infrastructure (2) · solaris (2) | — | |
| 26 | apache software foundation | 7 | · | · | · | PoC 4 | tomcat (7) | — | |
| 27 | ffmpeg | 6 | · | · | · | ffmpeg (6) | — | ||
| 28 | ffmpeg team | 6 | · | · | · | NEW | ffmpeg (6) | — | |
| 29 | novell inc. | 6 | 3 | · | · | PoC 1 | opensuse leap (4) · opensuse (3) · suse linux enterprise (1) | — | |
| 30 | rails core team | 6 | · | 1 | · | NEWKEV 1PoC 6 | ruby on rails (6) | — | |
| 31 | ipswitch | 5 | · | · | · | NEWPoC 5 | moveit mobile (3) · moveit dmz (3) | — | |
| 32 | mozilla | 5 | · | · | · | PoC 1 | firefox (5) · thunderbird (4) · firefox esr (4) | — | |
| 33 | pypi | 5 | 2 | · | · | radicale (3) · keystonemiddleware (1) · django (1) | — | ||
| 34 | sap | 5 | 1 | 2 | 1 | KEV 2Nuclei 1PoC 4 | sap netweaver (4) · netweaver (2) · netweaver application server java (2) | — | |
| 35 | sun | 5 | · | · | · | opensolaris (5) | — | ||
| 36 | zyxel | 5 | · | · | · | gs1900-10hp firmware (5) | — | ||
| 37 | f5 | 4 | 1 | · | · | PoC 1 | nginx (3) · big-ip advanced firewall manager (1) · big-ip analytics (1) | — | |
| 38 | hp | 4 | 1 | · | · | PoC 2 | server migration pack (2) · continuous delivery automation (1) · helion openstack (1) | — | |
| 39 | huawei | 4 | 1 | · | · | PoC 1 | mt882 firmware (2) · e5186 firmware (1) · agile controller-campus (1) | — | |
| 40 | jenkins | 4 | · | · | · | NEW | jenkins (4) | — | |
| 41 | qnap | 4 | 1 | · | · | NEW | signage station (3) · iartist lite (2) · sinage station (1) | — | |
| 42 | samsung | 4 | · | · | · | x14j firmware (4) | — | ||
| 43 | sil | 4 | · | · | · | NEWPoC 1 | graphite2 (4) | — | |
| 44 | sil international | 4 | · | · | · | NEWPoC 1 | graphite 2 (4) | — | |
| 45 | squid-cache | 4 | · | · | · | NEW | squid (4) | — | |
| 46 | squid software foundation | 4 | · | · | · | NEW | squid (4) | — | |
| 47 | suse | 4 | · | 1 | · | KEV 1PoC 2 | linux enterprise real time extension (2) · linux enterprise module for containers (1) · linux enterprise server (1) | — | |
| 48 | symantec | 4 | 1 | · | · | encryption management server (4) | — | ||
| 49 | tollgrade | 4 | · | · | · | NEW | smartgrid lighthouse sensor management system (4) | — | |
| 50 | zzinc | 4 | · | · | · | NEW | keymouse firmware (4) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems121 CVE30 crit12 KEV23 vendorsCVSS 8.1debian linux (40) · ubuntu linux (26) · opensuse (23)
- OSS Libraries84 CVE7 crit4 KEV20 vendorsCVSS 8.8moodle/moodle (20) · phpmyadmin/phpmyadmin (3)
- Enterprise Software78 CVE17 crit4 KEV15 vendorsCVSS 9.8websphere portal (8) · graphite2 (4) · qradar security information and event manager (4)
- Mobile Apps53 CVE17 crit6 vendorsCVSS 8.1android (27) · chrome (8) · google chrome (8)
- Consumer Software46 CVE17 crit7 KEV9 vendorsCVSS 8.8flash player (44) · adobe integrated runtime (22) · air desktop runtime (22)
- 11 crit12 vendorsCVSS 8.7nx-os (5) · spark (3) · unified communications manager (3)
- Web & CMS Plugins39 CVE3 crit6 vendorsCVSS 9.1moodle (46) · tomcat (14) · solr (3)
- Databases33 CVE5 crit6 vendorsCVSS 7.0ibm webshpere portal (8) · postgresql (4) · ibm tivoli storage manager fastback (3)
- Security Products26 CVE2 crit7 vendorsCVSS 8.0wireshark (12)
- ICS / OT / IoT11 CVE4 crit6 vendorsCVSS 8.7smartgrid lighthouse sensor management system (4)
- Cloud & SaaS10 CVE3 crit6 vendorsCVSS 9.8netscaler (2) · xen (2)
- Hardware Firmware6 CVE4 crit3 vendorsCVSS 8.8signage station (3) · iartist lite (2) · sinage station (1)
- DevTools & CI4 CVE1 vendorsCVSS 7.6jenkins (4)
- Communications3 CVE3 vendorsCVSS 6.2asterisk (4) · certified asterisk (4)
- Unclassified8 CVE2 crit5 vendorsCVSS 7.4keymouse firmware (4) · aveva edge (1) · didiwiki (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 4 | 121 | 30 | 12 | 23 | 111 | 8.1 | debian linux (40) · ubuntu linux (26) · opensuse (23) |
| OSS Libraries▸ 8 | 84 | 7 | 4 | 20 | 33 | 8.8 | moodle/moodle (20) · phpmyadmin/phpmyadmin (3) |
| Enterprise Software▸ 4 | 78 | 17 | 4 | 15 | 37 | 9.8 | websphere portal (8) · graphite2 (4) · qradar security information and event manager (4) |
| Mobile Apps▸ 2 | 53 | 17 | · | 6 | 18 | 8.1 | android (27) · chrome (8) · google chrome (8) |
| Consumer Software▸ 4 | 46 | 17 | 7 | 9 | 22 | 8.8 | flash player (44) · adobe integrated runtime (22) · air desktop runtime (22) |
| Networking Infrastructure▸ 6 | 42 | 11 | · | 12 | 37 | 8.7 | nx-os (5) · spark (3) · unified communications manager (3) |
| Web & CMS Plugins▸ 2 | 39 | 3 | · | 6 | 8 | 9.1 | moodle (46) · tomcat (14) · solr (3) |
| Databases▸ 2 | 33 | 5 | · | 6 | 20 | 7.0 | ibm webshpere portal (8) · postgresql (4) · ibm tivoli storage manager fastback (3) |
| Security Products▸ 3 | 26 | 2 | · | 7 | 16 | 8.0 | wireshark (12) |
| ICS / OT / IoT▸ 4 | 11 | 4 | · | 6 | 9 | 8.7 | smartgrid lighthouse sensor management system (4) |
| Cloud & SaaS▸ 3 | 10 | 3 | · | 6 | 7 | 9.8 | netscaler (2) · xen (2) |
| Hardware Firmware▸ 1 | 6 | 4 | · | 3 | 6 | 8.8 | signage station (3) · iartist lite (2) · sinage station (1) |
| DevTools & CI▸ 1 | 4 | · | · | 1 | 1 | 7.6 | jenkins (4) |
| Communications▸ 2 | 3 | · | · | 3 | 3 | 6.2 | asterisk (4) · certified asterisk (4) |
| Unclassified | 8 | 2 | · | 5 | 6 | 7.4 | keymouse firmware (4) · aveva edge (1) · didiwiki (1) |
Weakness × Sector
Which weaknesses hit which solution categories in February 2016
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds200Information Exposure264CWE-26479XSS20Improper Input Validation787Out-of-bounds Write254CWE-254284CWE-284255CWE-255352CSRFOperating Systems3514208723122OSS Libraries95492175312Enterprise Software12167177223Consumer Software314811511Networking Infrastructure7895122321Web & CMS Plugins1711922Databases253421Hardware Firmware1121222Security Products2213121ICS / OT / IoT3221121