month report
March 2016
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
March 2016 closed with 333 published CVEs. 33 criticals, apple led volume, mostly via mac os x. Top weakness class — CWE-119 (97 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
333
— MoM— YoY
Severity mix
33 / 192
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.3%
1 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
3632.8
n=1
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2262
n=3
Weakness × Vendor
What's spreading where in March 2016
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
119Memory Buffer Bounds200Information Exposure264CWE-26420Improper Input Validation416Use After Free79XSS399CWE-399284CWE-284254CWE-254787Out-of-bounds Writeapple289361151apple inc.249361151google589216google inc589216mozilla222212mozilla corp.222212microsoft corp211810microsoft201810opensuse191112adobe101157adobe systems inc.91157oracle1612
Most discussed CVEs — March 2016
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #12sil15 CVE
- #13sil international15 CVE
- #18openssl software foundation9 CVE
- #23zzinc6 CVE
- #25isc4 CVE
- #30fedora project3 CVE
- #31internet systems consortium3 CVE
- #32microfocus3 CVE
- #34broadcom2 CVE
- #35fuseiso project2 CVE
Top vendors
Ranked by distinct CVE count this period.
- 61 CVE3 critCVSS 6.9PoC 9mac os x (39) · os x (36) · iphone os (29)
- 44 CVE10 critCVSS 8.0KEV 1PoC 1google chrome (25) · chrome (25) · android (19)
- 42 CVE1 critCVSS 8.2PoC 1firefox (42) · firefox esr (28) · thunderbird (10)
- 41 CVE1 critCVSS 7.8KEV 1PoC 7internet explorer (14) · windows server 2008 (14) · windows 7 (13)
- 39 CVE1 critCVSS 8.2KEV 1PoC 2opensuse (39) · leap (29) · suse linux enterprise server (1)
- 37 CVE3 critCVSS 8.8KEV 1PoC 7flash player desktop runtime (33) · air (33) · air desktop runtime (33)
- 30 CVE2 critCVSS 8.4PoC 2linux (27) · vm server (2) · iplanet web server (1)
- 29 CVE1 critCVSS 8.6KEV 1PoC 6x14j firmware (29)
- 25 CVE2 critCVSS 7.0cisco ios (8) · nx-os (4) · ios xe (4)
- 21 CVECVSS 8.3KEV 1PoC 2linux enterprise (18) · linux enterprise debuginfo (2) · linux enterprise desktop (2)
- 17 CVE1 critCVSS 7.9KEV 1PoC 2debian linux (17)
- 15 CVECVSS 8.8NEWgraphite2 (15)
- 15 CVECVSS 8.8NEWgraphite 2 (15)
- 14 CVE1 critCVSS 7.7KEV 1PoC 2ubuntu linux (13) · ubuntu (1)
- 12 CVE6 critCVSS 8.2system management homepage (4) · hp system management homepage (4) · network automation (2)
- 12 CVE1 critCVSS 5.4maximo asset management (3) · business process manager (2) · maximo for government (2)
- 9 CVE3 critCVSS 7.5openssl (9)
- 9 CVE3 critCVSS 7.5NEWopenssl (9)
- 7 CVECVSS 4.9ibm maximo asset management (3) · ibm smartcloud control desk (2) · business process manager (2)
- 7 CVECVSS 6.8suse package hub for suse linux enterprise (6) · filr (1)
- 7 CVE1 critCVSS 7.4opensolaris (7)
- 7 CVE1 critCVSS 7.6gs1900-10hp firmware (7)
- 6 CVE1 critCVSS 7.6NEWkeymouse firmware (6)
- 4 CVECVSS 7.5PoC 1fedora (4)
- 4 CVECVSS 7.0NEWbind (3) · dhcp (1)
- 4 CVECVSS 7.1jr6150 firmware (4)
- 4 CVECVSS 5.9phpmyadmin (4)
- 4 CVECVSS 8.2KEV 1PoC 2enterprise linux workstation (3) · enterprise linux desktop (3) · enterprise linux server (3)
- 4 CVECVSS 6.1PoC 1debian gnu/linux (2) · linux (2)
- 3 CVECVSS 7.0NEWPoC 2fedora (3)
- 3 CVECVSS 7.4NEWbind (3)
- 3 CVECVSS 7.3NEWarcsight enterprise security manager (2) · self service password reset (1)
- 3 CVECVSS 8.5endpoint protection manager (3)
- 2 CVE2 critCVSS 9.1NEWsingle sign-on (2)
- 2 CVECVSS 7.3NEWPoC 1fuseiso (2)
- 2 CVECVSS 7.7junos (2)
- 2 CVECVSS 6.7NEWthinkcentre e75s firmware (2)
- 2 CVECVSS 4.8linux kernel (2)
- 2 CVECVSS 5.3NEWioadmin firmware (2) · iologik firmware (2)
- 2 CVECVSS 6.3NEWnode.js (2)
- 2 CVECVSS 6.1phpmyadmin/phpmyadmin (2)
- 2 CVE1 critCVSS 9.0NEWPoC 1pcre (2) · pcre2 (1)
- 2 CVE1 critCVSS 9.0php (2)
- 2 CVE1 critCVSS 9.0php (2)
- 2 CVE1 critCVSS 7.8NEWclient (2) · steel belted radius (2)
- 2 CVECVSS 6.2samba (2)
- 2 CVECVSS 6.2samba (2)
- 2 CVECVSS 6.6NEWPoC 1struxureware building operations automation server as firmware (1) · struxureware building operations automation server as-p firmware (1) · telvent rtu firmware (1)
- 2 CVECVSS 5.0apogee insight (1) · simatic s7 cpu 1200 firmware (1)
- 2 CVECVSS 5.4vrealize automation (1) · vrealize business advanced and enterprise (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | apple | 61 | 3 | · | · | PoC 9 | mac os x (39) · os x (36) · iphone os (29) | — | |
| 2 | 44 | 10 | 1 | · | KEV 1PoC 1 | google chrome (25) · chrome (25) · android (19) | — | ||
| 3 | mozilla | 42 | 1 | · | · | PoC 1 | firefox (42) · firefox esr (28) · thunderbird (10) | — | |
| 4 | microsoft | 41 | 1 | 1 | · | KEV 1PoC 7 | internet explorer (14) · windows server 2008 (14) · windows 7 (13) | — | |
| 5 | opensuse | 39 | 1 | 1 | · | KEV 1PoC 2 | opensuse (39) · leap (29) · suse linux enterprise server (1) | — | |
| 6 | adobe | 37 | 3 | 1 | · | KEV 1PoC 7 | flash player desktop runtime (33) · air (33) · air desktop runtime (33) | — | |
| 7 | oracle | 30 | 2 | · | · | PoC 2 | linux (27) · vm server (2) · iplanet web server (1) | — | |
| 8 | samsung | 29 | 1 | 1 | · | KEV 1PoC 6 | x14j firmware (29) | — | |
| 9 | cisco | 25 | 2 | · | · | cisco ios (8) · nx-os (4) · ios xe (4) | — | ||
| 10 | suse | 21 | · | 1 | · | KEV 1PoC 2 | linux enterprise (18) · linux enterprise debuginfo (2) · linux enterprise desktop (2) | — | |
| 11 | debian | 17 | 1 | 1 | · | KEV 1PoC 2 | debian linux (17) | — | |
| 12 | sil | 15 | · | · | · | NEW | graphite2 (15) | — | |
| 13 | sil international | 15 | · | · | · | NEW | graphite 2 (15) | — | |
| 14 | canonical | 14 | 1 | 1 | · | KEV 1PoC 2 | ubuntu linux (13) · ubuntu (1) | — | |
| 15 | hp | 12 | 6 | · | · | system management homepage (4) · hp system management homepage (4) · network automation (2) | — | ||
| 16 | ibm | 12 | 1 | · | · | maximo asset management (3) · business process manager (2) · maximo for government (2) | — | ||
| 17 | openssl | 9 | 3 | · | · | openssl (9) | — | ||
| 18 | openssl software foundation | 9 | 3 | · | · | NEW | openssl (9) | — | |
| 19 | ibm corp. | 7 | · | · | · | ibm maximo asset management (3) · ibm smartcloud control desk (2) · business process manager (2) | — | ||
| 20 | novell | 7 | · | · | · | suse package hub for suse linux enterprise (6) · filr (1) | — | ||
| 21 | sun | 7 | 1 | · | · | opensolaris (7) | — | ||
| 22 | zyxel | 7 | 1 | · | · | gs1900-10hp firmware (7) | — | ||
| 23 | zzinc | 6 | 1 | · | · | NEW | keymouse firmware (6) | — | |
| 24 | fedoraproject | 4 | · | · | · | PoC 1 | fedora (4) | — | |
| 25 | isc | 4 | · | · | · | NEW | bind (3) · dhcp (1) | — | |
| 26 | netgear | 4 | · | · | · | jr6150 firmware (4) | — | ||
| 27 | phpmyadmin | 4 | · | · | · | phpmyadmin (4) | — | ||
| 28 | redhat | 4 | · | 1 | · | KEV 1PoC 2 | enterprise linux workstation (3) · enterprise linux desktop (3) · enterprise linux server (3) | — | |
| 29 | сообщество свободного программного обеспечения | 4 | · | · | · | PoC 1 | debian gnu/linux (2) · linux (2) | — | |
| 30 | fedora project | 3 | · | · | · | NEWPoC 2 | fedora (3) | — | |
| 31 | internet systems consortium | 3 | · | · | · | NEW | bind (3) | — | |
| 32 | microfocus | 3 | · | · | · | NEW | arcsight enterprise security manager (2) · self service password reset (1) | — | |
| 33 | symantec | 3 | · | · | · | endpoint protection manager (3) | — | ||
| 34 | broadcom | 2 | 2 | · | · | NEW | single sign-on (2) | — | |
| 35 | fuseiso project | 2 | · | · | · | NEWPoC 1 | fuseiso (2) | — | |
| 36 | juniper | 2 | · | · | · | junos (2) | — | ||
| 37 | lenovo | 2 | · | · | · | NEW | thinkcentre e75s firmware (2) | — | |
| 38 | linux | 2 | · | · | · | linux kernel (2) | — | ||
| 39 | moxa | 2 | · | · | · | NEW | ioadmin firmware (2) · iologik firmware (2) | — | |
| 40 | nodejs | 2 | · | · | · | NEW | node.js (2) | — | |
| 41 | packagist | 2 | · | · | · | phpmyadmin/phpmyadmin (2) | — | ||
| 42 | pcre | 2 | 1 | · | · | NEWPoC 1 | pcre (2) · pcre2 (1) | — | |
| 43 | php | 2 | 1 | · | · | php (2) | — | ||
| 44 | php group | 2 | 1 | · | · | php (2) | — | ||
| 45 | pulsesecure | 2 | 1 | · | · | NEW | client (2) · steel belted radius (2) | — | |
| 46 | samba | 2 | · | · | · | samba (2) | — | ||
| 47 | samba team | 2 | · | · | · | samba (2) | — | ||
| 48 | schneider-electric | 2 | · | · | · | NEWPoC 1 | struxureware building operations automation server as firmware (1) · struxureware building operations automation server as-p firmware (1) · telvent rtu firmware (1) | — | |
| 49 | siemens | 2 | · | · | · | apogee insight (1) · simatic s7 cpu 1200 firmware (1) | — | ||
| 50 | vmware | 2 | · | · | · | vrealize automation (1) · vrealize business advanced and enterprise (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Mobile Apps134 CVE30 crit3 KEV5 vendorsCVSS 8.1android (37) · x14j firmware (29) · chrome (25)
- Operating Systems106 CVE12 crit25 KEV23 vendorsCVSS 7.9opensuse (39) · leap (29) · linux enterprise (18)
- Consumer Software96 CVE20 crit9 KEV7 vendorsCVSS 8.8firefox (84) · firefox esr (28) · thunderbird (19)
- Enterprise Software44 CVE10 crit7 vendorsCVSS 7.1graphite2 (15) · hp system management homepage (4) · system management homepage (4)
- Databases43 CVE2 crit6 vendorsCVSS 7.8linux (27) · ibm maximo asset management (3) · business process manager (2)
- 6 crit11 vendorsCVSS 7.8cisco ios (8) · nx-os (6) · ios xe (4)
- OSS Libraries18 CVE10 crit11 vendorsCVSS 7.8openssl (18) · php (4) · node.js (2)
- Security Products9 CVE5 vendorsCVSS 8.4arcsight enterprise security manager (2) · documentum xcp (1) · self service password reset (1)
- ICS / OT / IoT7 CVE5 vendorsCVSS 6.2compactlogix 1756-en2f series a firmware (1) · compactlogix 1756-en2f series b firmware (1) · compactlogix 1756-en2t series a firmware (1)
- Cloud & SaaS5 CVE2 crit3 vendorsCVSS 7.3single sign-on (2) · vrealize automation (1) · vrealize business advanced and enterprise (1)
- Hardware Firmware3 CVE2 vendorsCVSS 7.5thinkcentre e75s firmware (2)
- Communications2 CVE1 vendorsCVSS 5.9webrtc (2)
- Unclassified8 CVE1 crit3 vendorsCVSS 7.3keymouse firmware (6) · insight (1) · ос тд аис фссп россии (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Mobile Apps▸ 2 | 134 | 30 | 3 | 5 | 18 | 8.1 | android (37) · x14j firmware (29) · chrome (25) |
| Operating Systems▸ 4 | 106 | 12 | 25 | 23 | 92 | 7.9 | opensuse (39) · leap (29) · linux enterprise (18) |
| Consumer Software▸ 3 | 96 | 20 | 9 | 7 | 24 | 8.8 | firefox (84) · firefox esr (28) · thunderbird (19) |
| Enterprise Software▸ 2 | 44 | 10 | · | 7 | 44 | 7.1 | graphite2 (15) · hp system management homepage (4) · system management homepage (4) |
| Databases▸ 3 | 43 | 2 | · | 6 | 28 | 7.8 | linux (27) · ibm maximo asset management (3) · business process manager (2) |
| Networking Infrastructure▸ 3 | 43 | 6 | · | 11 | 31 | 7.8 | cisco ios (8) · nx-os (6) · ios xe (4) |
| OSS Libraries▸ 2 | 18 | 10 | · | 11 | 9 | 7.8 | openssl (18) · php (4) · node.js (2) |
| Security Products▸ 3 | 9 | · | · | 5 | 6 | 8.4 | arcsight enterprise security manager (2) · documentum xcp (1) · self service password reset (1) |
| ICS / OT / IoT▸ 2 | 7 | · | · | 5 | 30 | 6.2 | compactlogix 1756-en2f series a firmware (1) · compactlogix 1756-en2f series b firmware (1) · compactlogix 1756-en2t series a firmware (1) |
| Cloud & SaaS▸ 2 | 5 | 2 | · | 3 | 4 | 7.3 | single sign-on (2) · vrealize automation (1) · vrealize business advanced and enterprise (1) |
| Hardware Firmware▸ 2 | 3 | · | · | 2 | 2 | 7.5 | thinkcentre e75s firmware (2) |
| Communications▸ 1 | 2 | · | · | 1 | 1 | 5.9 | webrtc (2) |
| Unclassified | 8 | 1 | · | 3 | 3 | 7.3 | keymouse firmware (6) · insight (1) · ос тд аис фссп россии (1) |
Weakness × Sector
Which weaknesses hit which solution categories in March 2016
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds200Information Exposure264CWE-26420Improper Input Validation416Use After Free79XSS399CWE-399284CWE-284254CWE-254787Out-of-bounds WriteOperating Systems5516171813769Consumer Software57972152227OSS Libraries15413151117Databases1631522Enterprise Software1623234Networking Infrastructure6417212Hardware Firmware7111511Communications51Security Products1121ICS / OT / IoT31111