CVE Tools
Track your stack

September 2012

655 CVEs published, −12% on August 2012 and +68% on September 2011. CISA added 0 to KEV.

2012 month by month

2012, month by month. Point at another month to read it.
2012: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2012January 2012: 316 CVEsFebruary 2012: 349 CVEsMarch 2012: 405 CVEsApril 2012: 228 CVEsMay 2012: 434 CVEsJune 2012: 413 CVEsJuly 2012: 536 CVEsAugust 2012: 741 CVEsSeptember 2012: 655 CVEsOctober 2012: 559 CVEsNovember 2012: 445 CVEsDecember 2012: 270 CVEs5,351+28%
Critical
7612% of the 655 with a CVSS score
Added to CISA KEV
02 of this month's CVEs are in KEV, listed a median 3547 days after publication
Vendors
300480 products
Top weakness
XSSCWE-79 · 113 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1AppleItunes, iPhone OS, Mac OS X876nonenew
  2. 2GoogleChrome, Mod Pagespeed, Google Chrome351nonenew
  3. 3FfmpegFfmpeg2928nonenew
  4. 4CiscoIOS, Cisco IOS, IOS XE282nonenew
  5. 5IBMMaximo Service Desk, Smartcloud Control Desk, Tivoli Asset Management For It233nonenew
  6. 6LibavLibav2323nonenew
  7. 7OpensuseOpensuse140nonenew
  8. 8PackagistTypo3/cms, Matomo/matomo, Piwik/piwik130nonenew
  9. 9JoomlaJoomla\!, Com Weblinks120nonenew
  10. 10HPSitescope, Business Availability Center, Network Node Manager I116nonenew
  11. 11OwncloudOwncloud Server, Owncloud110nonenew
  12. 12Red HatEnterprise Mrg, Red Hat Enterprise Linux100nonenew
  13. 13SilverstripeSilverstripe100nonenew
  14. 14MicrosoftInternet Explorer, System Center Configuration Manager, Systems Management Server941new
  15. 15TYPO3TYPO390nonenew
  16. 16Trevor MckayCumin80nonenew
  17. 17AdobeAudition, Coldfusion, Device Central CS4711new
  18. 18CyberlinkPower2go, Powerdirector, Labelprint71nonenew
  19. 19NovellGroupwise73nonenew
  20. 20DebianDebian Linux60nonenew
  21. 21Gentoo Foundation Inc.Gentoo Linux60nonenew
  22. 22MediawikiMediawiki60nonenew
  23. 23MoodleMoodle60nonenew
  24. 24RealnetworksRealplayer Sp, Realplayer60nonenew
  25. 25SiemensWincc, Simatic PCS7, Simatic S7-1200 Cpu 1211c Firmware60nonenew

Severity

How this month's CVEs score on CVSS. Severity is not exploitation.

  • Critical7612%
  • High8313%
  • Medium44969%
  • Low477%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Libav23#6
  2. Owncloud11#11
  3. Silverstripe10#13
  4. Trevor Mckay8#16
  5. Cyberlink7#18
  6. Moodle6#23
  7. Siemens6#25
  8. Condor Project5#27
  9. Wikkawiki5#28
  10. Flatnux4#30

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-79XSS113new
  2. CWE-119Memory Buffer Bounds55new
  3. CWE-26451new
  4. CWE-89SQL Injection37new
  5. CWE-352CSRF31new
  6. CWE-39931new
  7. CWE-200Information Exposure23new
  8. CWE-20Improper Input Validation22new
  9. CWE-22Path Traversal12new
  10. CWE-31010new
  11. CWE-287Improper Authentication9new
  12. CWE-1898new
  13. CWE-2556new
  14. CWE-94Code Injection6new
  15. CWE-134Format String3new
  16. CWE-295Improper Certificate Validation2new
  17. CWE-426Untrusted Search Path2new
  18. CWE-190Integer Overflow1new
  19. CWE-362Race Condition1new
  20. CWE-416Use After Free1new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

The lighter the cell, the more CVEs. Point at one to read it.

September 2012: weakness classes by vendor and by sector: By vendor
By vendor79XSS119Memory Buffer Bounds26489SQL Injection352CSRF399200Information Exposure20Improper Input Validation22Path Traversal310
Apple112113614
Google5847232
Ffmpeg11
Cisco311114
IBM311312121
Libav1
Opensuse1642
Packagist522
Joomla4121
HP21
Owncloud4131
Silverstripe223111

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store