CVE Tools
Track your stack

March 2014

545 CVEs published, +22% on February 2014 and +22% on March 2013. CISA added 0 to KEV.

2014 month by month

2014, month by month. Point at another month to read it.
2014: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2014January 2014: 579 CVEsFebruary 2014: 445 CVEsMarch 2014: 545 CVEsApril 2014: 676 CVEsMay 2014: 555 CVEsJune 2014: 448 CVEsJuly 2014: 656 CVEsAugust 2014: 407 CVEsSeptember 2014: 1,156 CVEsOctober 2014: 1,418 CVEsNovember 2014: 505 CVEsDecember 2014: 618 CVEs8,008+50%
Critical
6813% of the 540 with a CVSS score
Added to CISA KEV
02 of this month's CVEs are in KEV, listed a median 3388 days after publication
Vendors
210478 products
Top weakness
XSSCWE-79 · 101 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1IBMAlgo One, Lotus Protector For Mail Security, Infosphere Information Server472nonenew
  2. 2OwncloudOwncloud Server, Owncloud350nonenew
  3. 3OpensuseOpensuse, Evergreen, Leap298nonenew
  4. 4AppleiPhone OS, tvOS, Mac OS X282nonenew
  5. 5CanonicalUbuntu Linux257nonenew
  6. 6CiscoIOS, Cisco IOS, Wireless Lan Controller Software2521new
  7. 7Red HatEnterprise Linux Server Tus, Enterprise Linux Desktop, Enterprise Linux Eus256nonenew
  8. 8GoogleChrome, Chrome OS, Android243nonenew
  9. 9MicrosoftInternet Explorer, Windows Server 2008 Service Pack 2, Windows Server 200324181new
  10. 10MozillaFirefox, Seamonkey, Thunderbird238nonenew
  11. 11SuseSuse Linux Enterprise Desktop, Suse Linux Enterprise Server, Suse Linux Enterprise Software Development Kit238nonenew
  12. 12DebianDebian Linux227nonenew
  13. 13OracleSolaris, Vm VirtualBox, HTTP Server172nonenew
  14. 14PyPIPlone, Nova, Logilab-common160nonenew
  15. 15SiemensSimatic S7-1500 Cpu Firmware, Микропрограммное Обеспечение Программируемого Логического Контроллера Siemens Simatic S7-1200, Simatic S7 Cpu 1200 Firmware150nonenew
  16. 16ApacheCordova, Couchdb, Camel130nonenew
  17. 17AdobePhonegap, Flash Player, Adobe Acrobat125nonenew
  18. 18PlonePlone120nonenew
  19. 19HPRapid Deployment Pack, Hp-ux, System Management Homepage112nonenew
  20. 20PackagistMoodle/moodle, Sabre/dav, Typo3/cms110nonenew
  21. 21Gentoo Foundation Inc.Gentoo Linux100nonenew
  22. 22GplhostDomain Technologie Control100nonenew
  23. 23MoodleMoodle100nonenew
  24. 24EmcVplex Geosynchrony, Documentum Taskspace, Rsa Authentication Manager91nonenew
  25. 25LinuxLinux Kernel92nonenew

Severity

How this month's CVEs score on CVSS; 5 have no score yet. Severity is not exploitation.

  • Critical6813%
  • High10219%
  • Medium31458%
  • Low5610%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Suse23#11
  2. Plone12#18
  3. Gplhost10#22
  4. Linux9#25
  5. Postgresql9#26
  6. Citrix7#28
  7. Puppet7#29
  8. Opensuse Project5#34
  9. Koushik Dutta4#35
  10. Linuxfoundation4#36

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-79XSS101new
  2. CWE-26474new
  3. CWE-119Memory Buffer Bounds68new
  4. CWE-20Improper Input Validation51new
  5. CWE-89SQL Injection32new
  6. CWE-22Path Traversal30new
  7. CWE-39923new
  8. CWE-352CSRF18new
  9. CWE-31013new
  10. CWE-200Information Exposure11new
  11. CWE-2559new
  12. CWE-287Improper Authentication9new
  13. CWE-1897new
  14. CWE-787Out-of-bounds Write7new
  15. CWE-94Code Injection7new
  16. CWE-416Use After Free6new
  17. CWE-78OS Command Injection5new
  18. CWE-362Race Condition4new
  19. CWE-269Improper Privilege Mgmt3new
  20. CWE-476NULL Pointer Dereference3new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

The lighter the cell, the more CVEs. Point at one to read it.

March 2014: weakness classes by vendor and by sector: By vendor
By vendor79XSS264119Memory Buffer Bounds20Improper Input Validation89SQL Injection22Path Traversal399352CSRF310200Information Exposure
IBM124343444
Owncloud12533231
Opensuse115111
Apple81051
Canonical1521
Cisco31971
Google133225
Microsoft31811
Microsoft Corp31711
Mozilla31122
Suse22111
Debian113311

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store