month report
June 2016
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
June 2016 closed with 515 published CVEs — +3.2% YoY . 60 criticals, opensuse led volume, mostly via opensuse. Biggest breakout: suse at ×17.5 their 12-month median. Top weakness class — CWE-119 (80 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
515
— MoM+3.2% YoY
Severity mix
60 / 293
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
2.9%
15 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
3537.3
n=15
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
2028
n=6
Weakness × Vendor
What's spreading where in June 2016
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
119Memory Buffer Bounds200Information Exposure20Improper Input Validation284CWE-284264CWE-26479XSS254CWE-254787Out-of-bounds Write22Path Traversal399CWE-399opensuse22631721515redhat1491162415debian2433141423google186810731suse10510314canonical2336121331google inc18681073adobe612215adobe systems inc.15microsoft12681811microsoft corp85417112hp23111
Most discussed CVEs — June 2016
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #27gen digital7 CVE
- #29gnupg6 CVE
- #38asea brown boveri ltd.4 CVE
- #41imagemagick4 CVE
- #44spice project4 CVE
- #45welcart4 CVE
- #48fonality3 CVE
- #54solarwinds inc.3 CVE
- #55trihedral3 CVE
- #61atheme2 CVE
Top vendors
Ranked by distinct CVE count this period.
- 101 CVE5 critCVSS 7.8×3.6KEV 1PoC 6opensuse (99) · leap (59)
- 98 CVE9 critCVSS 8.1×5.2KEV 3Nuclei 2PoC 7enterprise linux server (78) · enterprise linux desktop (78) · enterprise linux workstation (78)
- 73 CVE5 critCVSS 7.6×3.3PoC 6debian linux (73)
- 71 CVE2 critCVSS 7.2PoC 4ubuntu linux (69) · ubuntu (8) · lxd (2)
- 71 CVE2 critCVSS 7.6PoC 1android (39) · chrome (32) · google chrome (32)
- 70 CVE4 critCVSS 8.4×17.5KEV 1PoC 4linux enterprise workstation extension (37) · linux enterprise desktop (37) · linux enterprise (32)
- 49 CVE10 critCVSS 9.0KEV 1PoC 4flash player (43) · flash player desktop runtime (41) · flash player for linux (34)
- 40 CVE3 critCVSS 7.4KEV 1PoC 9windows server 2012 (16) · windows server 2012 gold (16) · windows server 2012 r2 (16)
- 29 CVE9 critCVSS 8.5×3.2systems insight manager (14) · matrix operating environment (13) · insight control server deployment (4)
- 25 CVE2 critCVSS 7.5cisco ios (4) · ip phone 8800 series firmware (4) · cisco rv215w (3)
- 23 CVE2 critCVSS 7.3PoC 1domino (5) · websphere mq (4) · java sdk (3)
- 19 CVE1 critCVSS 8.0×6.3PoC 9endpoint protection manager (12) · csapi (7) · data center security server (7)
- 17 CVECVSS 7.1PoC 1linux kernel (16) · linux kernel-rt (1)
- 16 CVE1 critCVSS 7.0mate 8 firmware (4) · honor ws851 firmware (3) · hilink app (2)
- 14 CVECVSS 7.8PoC 1firefox (14) · firefox esr (4) · network security services (1)
- 12 CVE6 critCVSS 8.1KEV 2Nuclei 2PoC 8org.apache.struts:struts2-core (2) · org.apache.activemq:activemq-client (1) · org.apache.james:james-server (1)
- 11 CVECVSS 6.0×3.7garoon (11)
- 11 CVECVSS 8.1PoC 1suse linux enterprise software development kit (6) · suse linux enterprise server (6) · suse linux enterprise real time extension (5)
- 10 CVE4 critCVSS 8.1KEV 2Nuclei 2PoC 8struts (2) · qpid broker-j (2) · james server (1)
- 10 CVE3 critCVSS 7.3PoC 1linux (6) · vm server (4) · solaris (4)
- 10 CVECVSS 6.0×4.0qemu (10)
- 10 CVE3 critCVSS 7.9PoC 1debian gnu/linux (7) · libxml2 (3) · p7zip (1)
- 8 CVE3 critCVSS 7.8PoC 1mac os x (7) · iphone os (5) · watchos (4)
- 8 CVECVSS 7.2Nuclei 8wordpress (8)
- 7 CVE1 critCVSS 8.2PoC 6symantec content security api (csapi) (7) · broadcom symantec protection for sharepoint servers (7) · broadcom data center security: server (7)
- 7 CVE2 critCVSS 8.1PoC 1fedora (7)
- 7 CVE1 critCVSS 8.2NEWPoC 6norton 360 (7) · norton antivirus (7) · norton bootable recovery tool (7)
- 6 CVECVSS 7.8×6.0symantec data center security server (4) · symantec data center security server and agents (4) · symantec embedded security critical system protection (4)
- 6 CVECVSS 7.5NEW×6.0libksba (6)
- 6 CVECVSS 4.9websphere mq (4) · business process manager (1) · flex system manager (1)
- 6 CVE2 critCVSS 7.6opensuse (4) · opensuse leap (4)
- 5 CVECVSS 6.8big-ip access policy manager (4) · big-ip application acceleration manager (3) · big-ip application security manager (3)
- 5 CVECVSS 7.4PoC 2glibc (4) · wget (1)
- 5 CVE1 critCVSS 7.5PoC 1neutron (3) · ansible (1) · keystone (1)
- 5 CVECVSS 6.0×3.3PoC 1worry-free business security services (2) · internet security (2) · worry-free business security (2)
- 5 CVE1 critCVSS 7.8×3.3libxml2 (3) · libxlst (2) · libxslt (2)
- 4 CVECVSS 4.0×4.0pcm600 (4)
- 4 CVECVSS 4.0NEWabb pcm600 (4)
- 4 CVE1 critCVSS 7.4PoC 1ios receiver (1) · netscaler gateway 11.0 firmware (1) · xenapp (1)
- 4 CVE1 critCVSS 7.2data domain os (1) · documentum administrator (1) · documentum capital projects (1)
- 4 CVE2 critCVSS 9.3NEWimagemagick (4)
- 4 CVECVSS 7.3solution center (2) · accelerator application (1) · bios efi driver (1)
- 4 CVE1 critCVSS 7.8PoC 3symfony/symfony (2) · zendframework/zendframework1 (2) · symfony/security (2)
- 4 CVE1 critCVSS 8.0NEW×4.0spice (4)
- 4 CVECVSS 6.1NEW×4.0Nuclei 4welcart e-commerce (4)
- 3 CVECVSS 6.5cg-wlbaragm firmware (1) · cg-wlbargl firmware (1) · cg-wlr300gnv firmware (1)
- 3 CVECVSS 7.2×3.0libexpat (3)
- 3 CVE1 critCVSS 8.2NEWfonality (3) · hud web (1)
- 3 CVE1 critCVSS 8.5web gateway (2) · policy auditor (1)
- 3 CVECVSS 8.4×3.0microsoft.chakracore (3)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | opensuse | 101 | 5 | 1 | · | ×3.6KEV 1PoC 6 | opensuse (99) · leap (59) | — | |
| 2 | redhat | 98 | 9 | 3 | 2 | ×5.2KEV 3Nuclei 2PoC 7 | enterprise linux server (78) · enterprise linux desktop (78) · enterprise linux workstation (78) | — | |
| 3 | debian | 73 | 5 | · | · | ×3.3PoC 6 | debian linux (73) | — | |
| 4 | canonical | 71 | 2 | · | · | PoC 4 | ubuntu linux (69) · ubuntu (8) · lxd (2) | — | |
| 5 | 71 | 2 | · | · | PoC 1 | android (39) · chrome (32) · google chrome (32) | — | ||
| 6 | suse | 70 | 4 | 1 | · | ×17.5KEV 1PoC 4 | linux enterprise workstation extension (37) · linux enterprise desktop (37) · linux enterprise (32) | — | |
| 7 | adobe | 49 | 10 | 1 | · | KEV 1PoC 4 | flash player (43) · flash player desktop runtime (41) · flash player for linux (34) | — | |
| 8 | microsoft | 40 | 3 | 1 | · | KEV 1PoC 9 | windows server 2012 (16) · windows server 2012 gold (16) · windows server 2012 r2 (16) | — | |
| 9 | hp | 29 | 9 | · | · | ×3.2 | systems insight manager (14) · matrix operating environment (13) · insight control server deployment (4) | — | |
| 10 | cisco | 25 | 2 | · | · | cisco ios (4) · ip phone 8800 series firmware (4) · cisco rv215w (3) | — | ||
| 11 | ibm | 23 | 2 | · | · | PoC 1 | domino (5) · websphere mq (4) · java sdk (3) | — | |
| 12 | symantec | 19 | 1 | · | · | ×6.3PoC 9 | endpoint protection manager (12) · csapi (7) · data center security server (7) | — | |
| 13 | linux | 17 | · | · | · | PoC 1 | linux kernel (16) · linux kernel-rt (1) | — | |
| 14 | huawei | 16 | 1 | · | · | mate 8 firmware (4) · honor ws851 firmware (3) · hilink app (2) | — | ||
| 15 | mozilla | 14 | · | · | · | PoC 1 | firefox (14) · firefox esr (4) · network security services (1) | — | |
| 16 | maven | 12 | 6 | 2 | 2 | KEV 2Nuclei 2PoC 8 | org.apache.struts:struts2-core (2) · org.apache.activemq:activemq-client (1) · org.apache.james:james-server (1) | — | |
| 17 | cybozu | 11 | · | · | · | ×3.7 | garoon (11) | — | |
| 18 | novell | 11 | · | · | · | PoC 1 | suse linux enterprise software development kit (6) · suse linux enterprise server (6) · suse linux enterprise real time extension (5) | — | |
| 19 | apache | 10 | 4 | 2 | 2 | KEV 2Nuclei 2PoC 8 | struts (2) · qpid broker-j (2) · james server (1) | — | |
| 20 | oracle | 10 | 3 | · | · | PoC 1 | linux (6) · vm server (4) · solaris (4) | — | |
| 21 | qemu | 10 | · | · | · | ×4.0 | qemu (10) | — | |
| 22 | сообщество свободного программного обеспечения | 10 | 3 | · | · | PoC 1 | debian gnu/linux (7) · libxml2 (3) · p7zip (1) | — | |
| 23 | apple | 8 | 3 | · | · | PoC 1 | mac os x (7) · iphone os (5) · watchos (4) | — | |
| 24 | wordpress | 8 | · | · | 8 | Nuclei 8 | wordpress (8) | — | |
| 25 | broadcom inc. | 7 | 1 | · | · | PoC 6 | symantec content security api (csapi) (7) · broadcom symantec protection for sharepoint servers (7) · broadcom data center security: server (7) | — | |
| 26 | fedoraproject | 7 | 2 | · | · | PoC 1 | fedora (7) | — | |
| 27 | gen digital | 7 | 1 | · | · | NEWPoC 6 | norton 360 (7) · norton antivirus (7) · norton bootable recovery tool (7) | — | |
| 28 | broadcom | 6 | · | · | · | ×6.0 | symantec data center security server (4) · symantec data center security server and agents (4) · symantec embedded security critical system protection (4) | — | |
| 29 | gnupg | 6 | · | · | · | NEW×6.0 | libksba (6) | — | |
| 30 | ibm corp. | 6 | · | · | · | websphere mq (4) · business process manager (1) · flex system manager (1) | — | ||
| 31 | novell inc. | 6 | 2 | · | · | opensuse (4) · opensuse leap (4) | — | ||
| 32 | f5 | 5 | · | · | · | big-ip access policy manager (4) · big-ip application acceleration manager (3) · big-ip application security manager (3) | — | ||
| 33 | gnu | 5 | · | · | · | PoC 2 | glibc (4) · wget (1) | — | |
| 34 | pypi | 5 | 1 | · | · | PoC 1 | neutron (3) · ansible (1) · keystone (1) | — | |
| 35 | trendmicro | 5 | · | · | · | ×3.3PoC 1 | worry-free business security services (2) · internet security (2) · worry-free business security (2) | — | |
| 36 | xmlsoft | 5 | 1 | · | · | ×3.3 | libxml2 (3) · libxlst (2) · libxslt (2) | — | |
| 37 | abb | 4 | · | · | · | ×4.0 | pcm600 (4) | — | |
| 38 | asea brown boveri ltd. | 4 | · | · | · | NEW | abb pcm600 (4) | — | |
| 39 | citrix | 4 | 1 | · | · | PoC 1 | ios receiver (1) · netscaler gateway 11.0 firmware (1) · xenapp (1) | — | |
| 40 | emc | 4 | 1 | · | · | data domain os (1) · documentum administrator (1) · documentum capital projects (1) | — | ||
| 41 | imagemagick | 4 | 2 | · | · | NEW | imagemagick (4) | — | |
| 42 | lenovo | 4 | · | · | · | solution center (2) · accelerator application (1) · bios efi driver (1) | — | ||
| 43 | packagist | 4 | 1 | · | · | PoC 3 | symfony/symfony (2) · zendframework/zendframework1 (2) · symfony/security (2) | — | |
| 44 | spice project | 4 | 1 | · | · | NEW×4.0 | spice (4) | — | |
| 45 | welcart | 4 | · | · | 4 | NEW×4.0Nuclei 4 | welcart e-commerce (4) | — | |
| 46 | corega | 3 | · | · | · | cg-wlbaragm firmware (1) · cg-wlbargl firmware (1) · cg-wlr300gnv firmware (1) | — | ||
| 47 | expat | 3 | · | · | · | ×3.0 | libexpat (3) | — | |
| 48 | fonality | 3 | 1 | · | · | NEW | fonality (3) · hud web (1) | — | |
| 49 | mcafee | 3 | 1 | · | · | web gateway (2) · policy auditor (1) | — | ||
| 50 | nuget | 3 | · | · | · | ×3.0 | microsoft.chakracore (3) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems217 CVE85 crit18 KEV22 vendorsCVSS 7.9opensuse (103) · enterprise linux desktop (78) · enterprise linux server (78)
- Mobile Apps95 CVE21 crit5 vendorsCVSS 7.8android (76) · chrome (32) · google chrome (32)
- Enterprise Software76 CVE30 crit2 KEV12 vendorsCVSS 9.8systems insight manager (14) · matrix operating environment (13) · domino (5)
- Consumer Software68 CVE40 crit2 KEV10 vendorsCVSS 9.8flash player (79) · flash player desktop runtime (41) · flash player for linux (34)
- OSS Libraries66 CVE20 crit2 KEV34 vendorsCVSS 9.3glibc (4) · imagemagick (4) · openssl (4)
- Security Products46 CVE24 crit13 vendorsCVSS 8.0norton 360 (14) · norton antivirus (14) · norton power eraser (14)
- Cloud & SaaS41 CVE12 crit11 vendorsCVSS 8.0broadcom data center security: server (7) · broadcom end-user security: advanced threat protection (7) · broadcom message gateway for service providers (7)
- 9 crit11 vendorsCVSS 7.5cisco ios (4) · ip phone 8800 series firmware (4) · cisco rv110w (3)
- Web & CMS Plugins28 CVE6 crit4 KEV9 vendorsCVSS 7.6wordpress (8) · activemq (2) · qpid broker-j (2)
- ICS / OT / IoT22 CVE4 crit1 KEV10 vendorsCVSS 6.6pcm600 (4) · vtscada (3) · webaccess (2)
- Databases15 CVE6 crit3 vendorsCVSS 6.8linux (6) · solaris (4) · vm server (4)
- Hardware Firmware5 CVE2 vendorsCVSS 7.6solution center (2) · accelerator application (1) · bios efi driver (1)
- Communications5 CVE2 crit3 vendorsCVSS 9.8fonality (3) · hud web (1)
- DevTools & CI1 CVE1 crit1 vendorsCVSS 9.8chef manage (1)
- AI / ML1 CVE1 vendorsCVSS 7.8runc (1)
- Unclassified12 CVE4 crit10 vendorsCVSS 7.3ос тд аис фссп россии (3) · bac-5051e firmware (2) · alertus desktop notification for os x (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 217 | 85 | 18 | 22 | 139 | 7.9 | opensuse (103) · enterprise linux desktop (78) · enterprise linux server (78) |
| Mobile Apps▸ 2 | 95 | 21 | · | 5 | 28 | 7.8 | android (76) · chrome (32) · google chrome (32) |
| Enterprise Software▸ 3 | 76 | 30 | 2 | 12 | 50 | 9.8 | systems insight manager (14) · matrix operating environment (13) · domino (5) |
| Consumer Software▸ 4 | 68 | 40 | 2 | 10 | 18 | 9.8 | flash player (79) · flash player desktop runtime (41) · flash player for linux (34) |
| OSS Libraries▸ 8 | 66 | 20 | 2 | 34 | 71 | 9.3 | glibc (4) · imagemagick (4) · openssl (4) |
| Security Products▸ 4 | 46 | 24 | · | 13 | 61 | 8.0 | norton 360 (14) · norton antivirus (14) · norton power eraser (14) |
| Cloud & SaaS▸ 3 | 41 | 12 | · | 11 | 29 | 8.0 | broadcom data center security: server (7) · broadcom end-user security: advanced threat protection (7) · broadcom message gateway for service providers (7) |
| Networking Infrastructure▸ 4 | 38 | 9 | · | 11 | 73 | 7.5 | cisco ios (4) · ip phone 8800 series firmware (4) · cisco rv110w (3) |
| Web & CMS Plugins▸ 4 | 28 | 6 | 4 | 9 | 16 | 7.6 | wordpress (8) · activemq (2) · qpid broker-j (2) |
| ICS / OT / IoT▸ 2 | 22 | 4 | 1 | 10 | 14 | 6.6 | pcm600 (4) · vtscada (3) · webaccess (2) |
| Databases▸ 1 | 15 | 6 | · | 3 | 12 | 6.8 | linux (6) · solaris (4) · vm server (4) |
| Hardware Firmware▸ 1 | 5 | · | · | 2 | 4 | 7.6 | solution center (2) · accelerator application (1) · bios efi driver (1) |
| Communications▸ 2 | 5 | 2 | · | 3 | 4 | 9.8 | fonality (3) · hud web (1) |
| DevTools & CI▸ 1 | 1 | 1 | · | 1 | 1 | 9.8 | chef manage (1) |
| AI / ML▸ 1 | 1 | · | · | 1 | 1 | 7.8 | runc (1) |
| Unclassified | 12 | 4 | · | 10 | 11 | 7.3 | ос тд аис фссп россии (3) · bac-5051e firmware (2) · alertus desktop notification for os x (1) |
Weakness × Sector
Which weaknesses hit which solution categories in June 2016
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds200Information Exposure20Improper Input Validation284CWE-284264CWE-26479XSS254CWE-254787Out-of-bounds Write22Path Traversal399CWE-399Operating Systems492926262218173Consumer Software31831544615OSS Libraries23312442313Enterprise Software31431135121Security Products97713444Networking Infrastructure6411124223Cloud & SaaS515224221Web & CMS Plugins111181ICS / OT / IoT21222111Hardware Firmware2311612