CVE Tools
Track your stack

September 2013

475 CVEs published, +32% on August 2013 and −27% on September 2012. CISA added 0 to KEV.

2013 month by month

2013, month by month. Point at another month to read it.
2013: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2013January 2013: 443 CVEsFebruary 2013: 410 CVEsMarch 2013: 446 CVEsApril 2013: 434 CVEsMay 2013: 358 CVEsJune 2013: 370 CVEsJuly 2013: 500 CVEsAugust 2013: 360 CVEsSeptember 2013: 475 CVEsOctober 2013: 634 CVEsNovember 2013: 399 CVEsDecember 2013: 495 CVEs5,324−1%
Critical
9120% of the 454 with a CVSS score
Added to CISA KEV
02 of this month's CVEs are in KEV, listed a median 3730.5 days after publication
Vendors
124502 products
Top weakness
Memory Buffer BoundsCWE-119 · 120 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1CiscoUnified Computing System, IOS, IOS XE626nonenew
  2. 2AppleiPhone OS, Mac OS X, Itunes542nonenew
  3. 3MicrosoftWord, Word Viewer, Internet Explorer48301new
  4. 4Red HatLibvirt, Red Hat Enterprise Linux, Openstack261nonenew
  5. 5IBMRational Requirements Composer, Spss Analytical Decision Management, Data Studio Web Console242nonenew
  6. 6MozillaFirefox, Seamonkey, Thunderbird199nonenew
  7. 7LinuxLinux Kernel170nonenew
  8. 8Open-xchangeOpen-xchange Server, Open-xchange Appsuite170nonenew
  9. 9AdobeAcrobat, Acrobat Reader, Flash Player1515nonenew
  10. 10PyPINova, Ansible, Cinder140nonenew
  11. 11HPProcurve Manager, Identity Driven Manager, Icewall Sso Agent Option1241new
  12. 12TrivantisCoursemill Learning Management System101nonenew
  13. 13CitrixCloudportal Services Manager, Xenclient Xt98nonenew
  14. 14CanonicalUbuntu Linux70nonenew
  15. 15MavenOrg.apache.struts:struts2-core, Org.owasp.esapi:esapi, Org.apache.struts:struts2-rest-plugin71nonenew
  16. 16OpenstackCompute, Cinder, Keystone70nonenew
  17. 17DebianDebian Linux, Phpbb3, TXT2MAN60nonenew
  18. 18Gentoo Foundation Inc.Gentoo Linux60nonenew
  19. 19WiresharkWireshark60nonenew
  20. 20DahuasecurityDVR0404HD-A, DVR0404HD-L, DVR0404HD-S53nonenew
  21. 21WordPressWordPress50nonenew
  22. 22Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Linux50nonenew
  23. 23EucalyptusEucalyptus, Eustore40nonenew
  24. 24FreebsdFreebsd40nonenew
  25. 25MoodleMoodle40nonenew

Severity

How this month's CVEs score on CVSS; 21 have no score yet. Severity is not exploitation.

  • Critical9120%
  • High5612%
  • Medium26859%
  • Low399%

Breakouts

Vendors with at least three times their own 12-month median.

  1. Microsoft485.3×
  2. Mozilla194.8×
  3. PyPI143.5×

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Open-xchange17#8
  2. Trivantis10#12
  3. Citrix9#13
  4. Dahuasecurity5#20
  5. Eucalyptus4#23
  6. Graphite Project3#29
  7. Libtiff3#30
  8. Supermicro3#32
  9. Click2sell2#35
  10. Indianic2#43

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-119Memory Buffer Bounds120new
  2. CWE-20Improper Input Validation69new
  3. CWE-26459new
  4. CWE-79XSS54new
  5. CWE-200Information Exposure17new
  6. CWE-39917new
  7. CWE-31012new
  8. CWE-25511new
  9. CWE-287Improper Authentication10new
  10. CWE-94Code Injection10new
  11. CWE-1899new
  12. CWE-352CSRF9new
  13. CWE-22Path Traversal8new
  14. CWE-89SQL Injection8new
  15. CWE-594new
  16. CWE-362Race Condition3new
  17. CWE-78OS Command Injection3new
  18. CWE-161new
  19. CWE-284Improper Access Control1new
  20. CWE-416Use After Free1new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

The lighter the cell, the more CVEs. Point at one to read it.

September 2013: weakness classes by vendor and by sector: By vendor
By vendor119Memory Buffer Bounds20Improper Input Validation26479XSS200Information Exposure399310255287Improper Authentication94Code Injection
Cisco9225732324
Apple2061543
Microsoft35412221
IBM234412221
Red Hat4242131
Mozilla1022113
Linux84121
Open-xchange11421312
Adobe121
PyPI1151112
HP2112
Trivantis214

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store