CVE Tools
Track your stack

December 2012

270 CVEs published, −39% on November 2012 and −22% on December 2011. CISA added 0 to KEV.

2012 month by month

2012, month by month. Point at another month to read it.
2012: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2012January 2012: 316 CVEsFebruary 2012: 349 CVEsMarch 2012: 405 CVEsApril 2012: 228 CVEsMay 2012: 434 CVEsJune 2012: 413 CVEsJuly 2012: 536 CVEsAugust 2012: 741 CVEsSeptember 2012: 655 CVEsOctober 2012: 559 CVEsNovember 2012: 445 CVEsDecember 2012: 270 CVEs5,351+28%
Critical
4216% of the 255 with a CVSS score
Added to CISA KEV
02 of this month's CVEs are in KEV, listed a median 3808 days after publication
Vendors
135280 products
Top weakness
XSSCWE-79 · 34 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1IBMSecurity Appscan, Rational Clearquest, Rational Policy Tester182nonenew
  2. 2MicrosoftWindows Server 2008, Internet Explorer, Windows 71172new
  3. 3WiresharkWireshark110nonenew
  4. 4XenXen110nonenew
  5. 5GoogleChrome, Android, Chrome OS108nonenew
  6. 6OpensuseOpensuse98nonenew
  7. 7OracleMySQL, Essbase Server, Glassfish Web Space Server10.092nonenew
  8. 8AdobeAir, Air Sdk, Flash Player86nonenew
  9. 9LinuxLinux Kernel70nonenew
  10. 10MavenOrg.springframework.security:spring-security-core, Org.apache.tomcat:tomcat, Org.jboss.ironjacamar:ironjacamar-jdbc70nonenew
  11. 11MicrofocusEdirectory, Privileged User Manager72nonenew
  12. 12VMwareSpringsource Spring Security, Vcenter Server Appliance, Hyperic Hq70nonenew
  13. 13HPOpenvms, Color Laserjet CM60XX, Color Laserjet CP352562nonenew
  14. 14Layton TechnologyHelpbox50nonenew
  15. 15MariaDBMariaDB50nonenew
  16. 16OwncloudOwncloud Server, Owncloud50nonenew
  17. 17SamsungKies Air, Samsungdive, Galaxy Note 251nonenew
  18. 18CanonicalUbuntu Linux41nonenew
  19. 19Cisco7500 Wireless Lan Controller, 8500 Wireless Lan Controller, Wireless Lan Controller Software40nonenew
  20. 20Openconstructor ProjectOpenconstructor40nonenew
  21. 21OpenstackFolsom, Grizzly, Essex40nonenew
  22. 22Red HatRed Hat Openstack Platform 18.0, Red Hat Enterprise Linux, Enterprise Linux Desktop40nonenew
  23. 23SymantecEndpoint Protection, Enterprise Security Manager, Messaging Gateway40nonenew
  24. 24ApacheTomcat30nonenew
  25. 25CaIdentityminder, Xcom Data Transport33nonenew

Severity

How this month's CVEs score on CVSS; 15 have no score yet. Severity is not exploitation.

  • Critical4216%
  • High2911%
  • Medium14155%
  • Low4317%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Xen11#4
  2. Microfocus7#11
  3. Layton Technology5#14
  4. MariaDB5#15
  5. Owncloud5#16
  6. Samsung5#17
  7. Openconstructor Project4#20
  8. Openstack4#21
  9. Carlos Carvalhar3#26
  10. Forescout3#29

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-79XSS34new
  2. CWE-26428new
  3. CWE-200Information Exposure22new
  4. CWE-119Memory Buffer Bounds18new
  5. CWE-20Improper Input Validation18new
  6. CWE-94Code Injection11new
  7. CWE-18910new
  8. CWE-22Path Traversal9new
  9. CWE-352CSRF9new
  10. CWE-2558new
  11. CWE-287Improper Authentication7new
  12. CWE-3997new
  13. CWE-89SQL Injection7new
  14. CWE-166new
  15. CWE-3105new
  16. CWE-416Use After Free5new
  17. CWE-787Out-of-bounds Write3new
  18. CWE-362Race Condition2new
  19. CWE-190Integer Overflow1new
  20. CWE-3311new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

The lighter the cell, the more CVEs. Point at one to read it.

December 2012: weakness classes by vendor and by sector: By vendor
By vendor79XSS264200Information Exposure119Memory Buffer Bounds20Improper Input Validation94Code Injection18922Path Traversal352CSRF255
IBM232122
Microsoft115
Wireshark128
Xen111
Google211
Opensuse11
Oracle131
Adobe141
Linux11
Maven2111
Microfocus1111
VMware312

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store