CVE Tools
Track your stack

April 2012

228 CVEs published, −44% on March 2012 and −27% on April 2011. CISA added 0 to KEV.

2012 month by month

2012, month by month. Point at another month to read it.
2012: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2012January 2012: 316 CVEsFebruary 2012: 349 CVEsMarch 2012: 405 CVEsApril 2012: 228 CVEsMay 2012: 434 CVEsJune 2012: 413 CVEsJuly 2012: 536 CVEsAugust 2012: 741 CVEsSeptember 2012: 655 CVEsOctober 2012: 559 CVEsNovember 2012: 445 CVEsDecember 2012: 270 CVEs5,351+28%
Critical
5926% of the 228 with a CVSS score
Added to CISA KEV
02 of this month's CVEs are in KEV, listed a median 3602.5 days after publication
Vendors
96291 products
Top weakness
Memory Buffer BoundsCWE-119 · 58 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1MozillaFirefox Mobile, Firefox, Seamonkey3324nonenew
  2. 2Novell Inc.Opensuse2019nonenew
  3. 3FreetypeFreetype1918nonenew
  4. 4GoogleChrome, Sketchup153nonenew
  5. 5MicrosoftInternet Explorer, Office, Forefront Unified Access Gateway1162new
  6. 6HPSystem Management Homepage, Onboard Administrator, Hp-ux101nonenew
  7. 7WiresharkWireshark100nonenew
  8. 8Gentoo Foundation Inc.Gentoo Linux91nonenew
  9. 9AppleiPhone OS, Safari, Itunes80nonenew
  10. 10IntuitQuickbooks80nonenew
  11. 11Red HatEnterprise Linux, Red Hat Enterprise Linux, OpenSSL70nonenew
  12. 12AdobeAcrobat, Acrobat Reader, Air65nonenew
  13. 13RealnetworksHelix Mobile Server, Helix Server60nonenew
  14. 14WordPressWordPress62nonenew
  15. 15IBMTivoli Directory Server, Tivoli Event Pump, Rational Clearquest51nonenew
  16. 16InvensysWonderware Information Server, Archestra Application Object Toolkit, Foxboro Control Software50nonenew
  17. 17KoyoH0-ECOM, H0-ECOM100, H2-ECOM52nonenew
  18. 18NovellZenworks Configuration Management, Imanager52nonenew
  19. 19SiemensRuggedcom Rugged Operating System, Scalance S602, Scalance S61251nonenew
  20. 20ArcinfoFrontvue, Pcvue, Plantvue42nonenew
  21. 21AtviseWebmi2ads40nonenew
  22. 22F5Firepass, NGINX40nonenew
  23. 23FreebsdLibarchive40nonenew
  24. 24OwncloudOwncloud, Owncloud Server40nonenew
  25. 25AsteriskOpen Source30nonenew

Severity

How this month's CVEs score on CVSS. Severity is not exploitation.

  • Critical5926%
  • High3314%
  • Medium11450%
  • Low2210%

Breakouts

Vendors with at least three times their own 12-month median.

  1. Mozilla3316.5×
  2. Novell Inc.2010.0×
  3. Adobe66.0×
  4. Apple84.0×
  5. Wireshark103.3×

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Intuit8#10
  2. Koyo5#17
  3. Siemens5#19
  4. Arcinfo4#20
  5. Atvise4#21
  6. Owncloud4#24
  7. Asterisk3#25
  8. Cloudera2#29
  9. Dnnsoftware2#31
  10. Iconics2#34

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-119Memory Buffer Bounds58new
  2. CWE-79XSS26new
  3. CWE-26423new
  4. CWE-20Improper Input Validation15new
  5. CWE-94Code Injection11new
  6. CWE-416Use After Free10new
  7. CWE-3999new
  8. CWE-1898new
  9. CWE-200Information Exposure8new
  10. CWE-3108new
  11. CWE-89SQL Injection6new
  12. CWE-22Path Traversal4new
  13. CWE-2554new
  14. CWE-287Improper Authentication4new
  15. CWE-352CSRF4new
  16. CWE-3462new
  17. CWE-120Buffer Overflow1new
  18. CWE-125Out-of-bounds Read1new
  19. CWE-161new
  20. CWE-521Weak Password1new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

The lighter the cell, the more CVEs. Point at one to read it.

April 2012: weakness classes by vendor and by sector: By vendor
By vendor119Memory Buffer Bounds79XSS26420Improper Input Validation94Code Injection416Use After Free399189200Information Exposure310
Mozilla213412
Freetype181
Google219
Gentoo Foundation Inc.9211
Novell Inc.121
Microsoft136
HP1111
Wireshark1412
Apple7
Intuit1113
Adobe411
Realnetworks11111

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store