month report
July 2016
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
July 2016 closed with 789 published CVEs — +22.5% YoY . 91 criticals, oracle led volume, mostly via mysql. Biggest breakout: phpmyadmin at ×15.0 their 12-month median. Top weakness class — CWE-119 (121 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
789
— MoM+22.5% YoY
Severity mix
91 / 400
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.1%
1 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
3515.4
n=1
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
—
n=0
Weakness × Vendor
What's spreading where in July 2016
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
119Memory Buffer Bounds264CWE-26420Improper Input Validation200Information Exposure787Out-of-bounds Write79XSS284CWE-284416Use After Free254CWE-254399CWE-399oracle112google164514133443adobe28361101adobe systems inc.28361101google inc52715131213microsoft corp187828453apple3333712131ibm161161052microsoft187843cisco3492426зао «нпп «релэкс»813opensuse44111
Most discussed CVEs — July 2016
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
- 15.0×phpmyadmin15 CVE
- 5.8×oracle204 CVE
- 5.0×vmware5 CVE
- 5.0×solarwinds inc.5 CVE
- 5.0×nuget5 CVE
- 5.0×siemens10 CVE
- 4.5×php group9 CVE
- 4.1×google120 CVE
- 4.0×ао «нтц ит роса»6 CVE
- 3.7×packagist11 CVE
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #9зао «нпп «релэкс»25 CVE
- #28ооо «1с-софт»6 CVE
- #33solarwinds inc.5 CVE
- #36nixu corp.4 CVE
- #37opera software asa4 CVE
- #38meinberg3 CVE
- #39misys3 CVE
- #40solare datensysteme gmbh3 CVE
- #43accela2 CVE
- #44bosch2 CVE
Top vendors
Ranked by distinct CVE count this period.
- 204 CVE20 critCVSS 6.8×5.8Nuclei 1PoC 6mysql (21) · linux (20) · agile product lifecycle management (19)
- 120 CVE6 critCVSS 7.5×4.1android (100) · chrome (19) · google chrome (13)
- 83 CVE22 critCVSS 9.1PoC 18flash player (52) · flash player desktop runtime (52) · flash player for linux (52)
- 73 CVECVSS 7.1PoC 7internet explorer (48) · microsoft edge (46) · windows 10 rtm (12)
- 64 CVE10 critCVSS 8.0PoC 17mac os x (41) · iphone os (26) · tvos (21)
- 57 CVE1 critCVSS 6.1PoC 1jazz reporting service (6) · powerkvm (6) · tririga application platform (6)
- 33 CVE2 critCVSS 7.4PoC 3webex meetings server (5) · epc3928 firmware (3) · prime infrastructure (3)
- 27 CVE6 critCVSS 7.4PoC 4ubuntu linux (18) · ubuntu (9) · openstack ironic (1)
- 25 CVE2 critCVSS 7.6NEWлинтер бастион (24) · программа linstmgr.exe мониторинга и управления серверами системы управления базами данных линтер бастион 6.0 (1)
- 22 CVE1 critCVSS 7.0PoC 4opensuse (21) · leap (19)
- 18 CVE4 critCVSS 7.5PoC 2debian linux (18)
- 17 CVE1 critCVSS 7.5PoC 5struts (8) · http server (3) · tomcat (2)
- 17 CVE2 critCVSS 6.9enterprise linux server (10) · enterprise linux workstation (9) · enterprise linux desktop (9)
- 16 CVE6 critCVSS 7.9PoC 9debian gnu/linux (10) · linux (6)
- 15 CVE2 critCVSS 6.5×15.0PoC 1phpmyadmin (15)
- 14 CVE1 critCVSS 7.6PoC 2struts:struts (3) · org.apache.struts:struts-core (3) · org.apache.struts:struts2-core (2)
- 11 CVE1 critCVSS 6.4×3.7PoC 1phpmyadmin/phpmyadmin (11)
- 11 CVE6 critCVSS 8.9PoC 4php (11)
- 10 CVE1 critCVSS 7.5×3.3PoC 1struts (7) · http server (1) · commons fileupload (1)
- 10 CVE4 critCVSS 8.0fedora (10)
- 10 CVE1 critCVSS 7.0×5.0PoC 4simatic net cp 443-1 opc ua firmware (4) · simatic wincc (2) · siemens sicam pas (2)
- 9 CVE5 critCVSS 8.9×4.5PoC 4php (9)
- 8 CVECVSS 5.6mariadb (8)
- 7 CVE1 critCVSS 7.5PoC 1linux kernel (7)
- 7 CVECVSS 6.7PoC 4linux enterprise desktop (5) · linux enterprise server (5) · manager proxy (5)
- 6 CVE1 critCVSS 8.6PoC 1system management homepage (3) · icewall identity manager (1) · icewall sso agent option (1)
- 6 CVECVSS 5.9×4.0PoC 5роса кобальт (5) · rosa virtualization 3.0 (1) · rosa virtualization (1)
- 6 CVE1 critCVSS 8.1NEW1с:предприятие (6)
- 5 CVECVSS 6.4websphere application server (4) · ibm maximo asset management (1)
- 5 CVECVSS 7.5PoC 3suse manager (3) · suse linux enterprise live patching (1) · suse linux enterprise module for public cloud (1)
- 5 CVECVSS 6.7×3.3PoC 4ntp (5)
- 5 CVECVSS 8.8×5.0microsoft.chakracore (5)
- 5 CVECVSS 5.8NEW×5.0serv-u file server (5)
- 5 CVECVSS 6.4×5.0vrealize log insight (2) · vcenter server (1) · spring framework (1)
- 5 CVE4 critCVSS 9.6×3.3libxslt (4) · libxml2 (1)
- 4 CVE1 critCVSS 5.4NEWnamesurfer (4)
- 4 CVE2 critCVSS 8.8NEWopera (4)
- 3 CVECVSS 7.6NEWPoC 2ims-lantime m1000 (3) · ims-lantime m3000 (3) · ims-lantime m500 (3)
- 3 CVECVSS 6.6NEWfusioncapital opics plus (3)
- 3 CVE1 critCVSS 7.5NEWмикропрограммное обеспечение звена фотоэлектрической системы solar-log (2) · solar-log web (1)
- 3 CVECVSS 5.7workspace streaming (2) · workspace virtualization (2) · client intrusion detection system (1)
- 2 CVE1 critCVSS 7.31с-битрикс: управление сайтом (2)
- 2 CVECVSS 7.5NEWcivic platform (1) · civic platform citizen access portal (1)
- 2 CVECVSS 6.3NEWbladecontrol-webvis (2)
- 2 CVECVSS 8.8ehealth (2)
- 2 CVECVSS 6.4dsr-500 (2)
- 2 CVECVSS 5.8NEWdr.web enterprise security suite (2)
- 2 CVECVSS 6.7elcsoft (2)
- 2 CVECVSS 3.3ecryptfs-utils (2)
- 2 CVECVSS 7.5avamar (1) · rsa archer egrc (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 204 | 20 | · | 1 | ×5.8Nuclei 1PoC 6 | mysql (21) · linux (20) · agile product lifecycle management (19) | — | |
| 2 | 120 | 6 | · | · | ×4.1 | android (100) · chrome (19) · google chrome (13) | — | ||
| 3 | adobe | 83 | 22 | · | · | PoC 18 | flash player (52) · flash player desktop runtime (52) · flash player for linux (52) | — | |
| 4 | microsoft | 73 | · | · | · | PoC 7 | internet explorer (48) · microsoft edge (46) · windows 10 rtm (12) | — | |
| 5 | apple | 64 | 10 | · | · | PoC 17 | mac os x (41) · iphone os (26) · tvos (21) | — | |
| 6 | ibm | 57 | 1 | · | · | PoC 1 | jazz reporting service (6) · powerkvm (6) · tririga application platform (6) | — | |
| 7 | cisco | 33 | 2 | · | · | PoC 3 | webex meetings server (5) · epc3928 firmware (3) · prime infrastructure (3) | — | |
| 8 | canonical | 27 | 6 | · | · | PoC 4 | ubuntu linux (18) · ubuntu (9) · openstack ironic (1) | — | |
| 9 | зао «нпп «релэкс» | 25 | 2 | · | · | NEW | линтер бастион (24) · программа linstmgr.exe мониторинга и управления серверами системы управления базами данных линтер бастион 6.0 (1) | — | |
| 10 | opensuse | 22 | 1 | · | · | PoC 4 | opensuse (21) · leap (19) | — | |
| 11 | debian | 18 | 4 | · | · | PoC 2 | debian linux (18) | — | |
| 12 | apache | 17 | 1 | · | · | PoC 5 | struts (8) · http server (3) · tomcat (2) | — | |
| 13 | redhat | 17 | 2 | · | · | enterprise linux server (10) · enterprise linux workstation (9) · enterprise linux desktop (9) | — | ||
| 14 | сообщество свободного программного обеспечения | 16 | 6 | · | · | PoC 9 | debian gnu/linux (10) · linux (6) | — | |
| 15 | phpmyadmin | 15 | 2 | · | · | ×15.0PoC 1 | phpmyadmin (15) | — | |
| 16 | maven | 14 | 1 | · | · | PoC 2 | struts:struts (3) · org.apache.struts:struts-core (3) · org.apache.struts:struts2-core (2) | — | |
| 17 | packagist | 11 | 1 | · | · | ×3.7PoC 1 | phpmyadmin/phpmyadmin (11) | — | |
| 18 | php | 11 | 6 | · | · | PoC 4 | php (11) | — | |
| 19 | apache software foundation | 10 | 1 | · | · | ×3.3PoC 1 | struts (7) · http server (1) · commons fileupload (1) | — | |
| 20 | fedoraproject | 10 | 4 | · | · | fedora (10) | — | ||
| 21 | siemens | 10 | 1 | · | · | ×5.0PoC 4 | simatic net cp 443-1 opc ua firmware (4) · simatic wincc (2) · siemens sicam pas (2) | — | |
| 22 | php group | 9 | 5 | · | · | ×4.5PoC 4 | php (9) | — | |
| 23 | mariadb | 8 | · | · | · | mariadb (8) | — | ||
| 24 | linux | 7 | 1 | · | · | PoC 1 | linux kernel (7) | — | |
| 25 | suse | 7 | · | · | · | PoC 4 | linux enterprise desktop (5) · linux enterprise server (5) · manager proxy (5) | — | |
| 26 | hp | 6 | 1 | · | · | PoC 1 | system management homepage (3) · icewall identity manager (1) · icewall sso agent option (1) | — | |
| 27 | ао «нтц ит роса» | 6 | · | · | · | ×4.0PoC 5 | роса кобальт (5) · rosa virtualization 3.0 (1) · rosa virtualization (1) | — | |
| 28 | ооо «1с-софт» | 6 | 1 | · | · | NEW | 1с:предприятие (6) | — | |
| 29 | ibm corp. | 5 | · | · | · | websphere application server (4) · ibm maximo asset management (1) | — | ||
| 30 | novell | 5 | · | · | · | PoC 3 | suse manager (3) · suse linux enterprise live patching (1) · suse linux enterprise module for public cloud (1) | — | |
| 31 | ntp | 5 | · | · | · | ×3.3PoC 4 | ntp (5) | — | |
| 32 | nuget | 5 | · | · | · | ×5.0 | microsoft.chakracore (5) | — | |
| 33 | solarwinds inc. | 5 | · | · | · | NEW×5.0 | serv-u file server (5) | — | |
| 34 | vmware | 5 | · | · | · | ×5.0 | vrealize log insight (2) · vcenter server (1) · spring framework (1) | — | |
| 35 | xmlsoft | 5 | 4 | · | · | ×3.3 | libxslt (4) · libxml2 (1) | — | |
| 36 | nixu corp. | 4 | 1 | · | · | NEW | namesurfer (4) | — | |
| 37 | opera software asa | 4 | 2 | · | · | NEW | opera (4) | — | |
| 38 | meinberg | 3 | · | · | · | NEWPoC 2 | ims-lantime m1000 (3) · ims-lantime m3000 (3) · ims-lantime m500 (3) | — | |
| 39 | misys | 3 | · | · | · | NEW | fusioncapital opics plus (3) | — | |
| 40 | solare datensysteme gmbh | 3 | 1 | · | · | NEW | микропрограммное обеспечение звена фотоэлектрической системы solar-log (2) · solar-log web (1) | — | |
| 41 | symantec | 3 | · | · | · | workspace streaming (2) · workspace virtualization (2) · client intrusion detection system (1) | — | ||
| 42 | 1с-битрикс | 2 | 1 | · | · | 1с-битрикс: управление сайтом (2) | — | ||
| 43 | accela | 2 | · | · | · | NEW | civic platform (1) · civic platform citizen access portal (1) | — | |
| 44 | bosch | 2 | · | · | · | NEW | bladecontrol-webvis (2) | — | |
| 45 | ca | 2 | · | · | · | ehealth (2) | — | ||
| 46 | dlink | 2 | · | · | · | dsr-500 (2) | — | ||
| 47 | drweb | 2 | · | · | · | NEW | dr.web enterprise security suite (2) | — | |
| 48 | eaton | 2 | · | · | · | elcsoft (2) | — | ||
| 49 | ecryptfs | 2 | · | · | · | ecryptfs-utils (2) | — | ||
| 50 | emc | 2 | · | · | · | avamar (1) · rsa archer egrc (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Databases224 CVE35 crit5 vendorsCVSS 6.7mysql (21) · linux (20) · agile product lifecycle management (19)
- Mobile Apps186 CVE50 crit5 vendorsCVSS 8.0android (162) · chrome (19) · google chrome (13)
- Operating Systems149 CVE25 crit19 vendorsCVSS 7.5opensuse (21) · leap (19) · debian linux (18)
- Enterprise Software122 CVE13 crit15 vendorsCVSS 7.6линтер бастион (24) · jazz reporting service (6) · powerkvm (6)
- Consumer Software93 CVE178 crit9 vendorsCVSS 9.1flash player (104) · flash player desktop runtime (52) · flash player for linux (52)
- OSS Libraries56 CVE19 crit17 vendorsCVSS 8.8php (20) · libxslt (4) · libpng (2)
- 6 crit11 vendorsCVSS 8.1prime infrastructure (6) · webex meetings server (5) · pr-400mi firmware (4)
- Web & CMS Plugins21 CVE3 crit6 vendorsCVSS 8.1struts (15) · http server (4) · tomcat (3)
- Security Products18 CVE4 crit10 vendorsCVSS 9.8dr.web enterprise security suite (2) · workspace streaming (2) · workspace virtualization (2)
- ICS / OT / IoT13 CVE8 crit7 vendorsCVSS 9.0factorytalk energrymetrix (2) · cimplicity (1) · levistudio (1)
- Cloud & SaaS9 CVE6 vendorsCVSS 6.2vrealize log insight (2) · ehealth (1) · nsx edge (1)
- Hardware Firmware5 CVE1 crit3 vendorsCVSS 7.5микропрограммное обеспечение звена фотоэлектрической системы solar-log (2) · qts (1) · solar-log web (1)
- Communications2 CVE2 vendorsCVSS 7.7lighthouse sms (1) · line (1) · line installer (1)
- Unclassified8 CVE1 crit4 vendorsCVSS 5.7namesurfer (4) · fanuc (2) · cavium sdk (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Databases▸ 2 | 224 | 35 | · | 5 | 78 | 6.7 | mysql (21) · linux (20) · agile product lifecycle management (19) |
| Mobile Apps▸ 2 | 186 | 50 | · | 5 | 19 | 8.0 | android (162) · chrome (19) · google chrome (13) |
| Operating Systems▸ 3 | 149 | 25 | · | 19 | 127 | 7.5 | opensuse (21) · leap (19) · debian linux (18) |
| Enterprise Software▸ 3 | 122 | 13 | · | 15 | 67 | 7.6 | линтер бастион (24) · jazz reporting service (6) · powerkvm (6) |
| Consumer Software▸ 3 | 93 | 178 | · | 9 | 18 | 9.1 | flash player (104) · flash player desktop runtime (52) · flash player for linux (52) |
| OSS Libraries▸ 7 | 56 | 19 | · | 17 | 27 | 8.8 | php (20) · libxslt (4) · libpng (2) |
| Networking Infrastructure▸ 4 | 51 | 6 | · | 11 | 51 | 8.1 | prime infrastructure (6) · webex meetings server (5) · pr-400mi firmware (4) |
| Web & CMS Plugins▸ 2 | 21 | 3 | · | 6 | 12 | 8.1 | struts (15) · http server (4) · tomcat (3) |
| Security Products▸ 4 | 18 | 4 | · | 10 | 14 | 9.8 | dr.web enterprise security suite (2) · workspace streaming (2) · workspace virtualization (2) |
| ICS / OT / IoT▸ 3 | 13 | 8 | · | 7 | 14 | 9.0 | factorytalk energrymetrix (2) · cimplicity (1) · levistudio (1) |
| Cloud & SaaS▸ 2 | 9 | · | · | 6 | 11 | 6.2 | vrealize log insight (2) · ehealth (1) · nsx edge (1) |
| Hardware Firmware▸ 2 | 5 | 1 | · | 3 | 4 | 7.5 | микропрограммное обеспечение звена фотоэлектрической системы solar-log (2) · qts (1) · solar-log web (1) |
| Communications▸ 1 | 2 | · | · | 2 | 3 | 7.7 | lighthouse sms (1) · line (1) · line installer (1) |
| Unclassified | 8 | 1 | · | 4 | 4 | 5.7 | namesurfer (4) · fanuc (2) · cavium sdk (1) |
Weakness × Sector
Which weaknesses hit which solution categories in July 2016
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds264CWE-26420Improper Input Validation200Information Exposure787Out-of-bounds Write79XSS284CWE-284416Use After Free254CWE-254399CWE-399Operating Systems625621281711565Enterprise Software41218121133Consumer Software591663716154OSS Libraries228572331Databases1276221Networking Infrastructure671344227Security Products322434ICS / OT / IoT22521Cloud & SaaS61142Hardware Firmware1111