CVE Tools
Track your stack

March 2015

457 CVEs published, −8% on February 2015 and −16% on March 2014. CISA added 0 to KEV.

2015 month by month

2015, month by month. Point at another month to read it.
2015: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2015January 2015: 737 CVEsFebruary 2015: 496 CVEsMarch 2015: 457 CVEsApril 2015: 558 CVEsMay 2015: 417 CVEsJune 2015: 499 CVEsJuly 2015: 644 CVEsAugust 2015: 625 CVEsSeptember 2015: 499 CVEsOctober 2015: 739 CVEsNovember 2015: 368 CVEsDecember 2015: 567 CVEs6,606−18%
Critical
5913% of the 453 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
166370 products
Top weakness
XSSCWE-79 · 63 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1MicrosoftWindows Server 2012, Windows 7, Windows Server 20084320nonenew
  2. 2CiscoIOS, IOS XE, Cisco IOS412nonenew
  3. 3CanonicalUbuntu Linux, Ubuntu361nonenew
  4. 4DebianDebian Linux, Cifs-utils332nonenew
  5. 5IBMRational Quality Manager, Rational Doors Next Generation, Rational Requirements Composer332nonenew
  6. 6Red HatEnterprise Linux Workstation Supplementary, Enterprise Linux Desktop Supplementary, Enterprise Linux Server Supplementary Eus311nonenew
  7. 7AppleiPhone OS, tvOS, Safari302nonenew
  8. 8GoogleChrome, V8240nonenew
  9. 9OpensuseOpensuse240nonenew
  10. 10FedoraprojectFedora, 389 Directory Server211nonenew
  11. 11WebsenseV-series Appliances, Triton Ap Email, Triton Ap Web202nonenew
  12. 12HPOle Point of Sale Driver, Integrated Lights-out 2 Firmware, Integrated Lights-out 4 Firmware1712nonenew
  13. 13LinuxLinux Kernel141nonenew
  14. 14OpenSSLOpenSSL130nonenew
  15. 15PHPPHP130nonenew
  16. 16AdobeFlash Player1210nonenew
  17. 17PHP GroupPHP120nonenew
  18. 18OracleSolaris, Linux, Secure Backup110nonenew
  19. 19SiemensSpcanywhere, SPC5000 Firmware, Simatic Cfc80nonenew
  20. 20EmcRsa Registration Manager, Rsa Certificate Manager, Secure Remote Services70nonenew
  21. 21MybbMybb71nonenew
  22. 22OpenSSL Software FoundationOpenSSL70nonenew
  23. 23PyPIDjango, Dulwich, Mercurial70nonenew
  24. 24Schneider-electricWonderware Intouch 2014, Pelco Ds-nv, Device Type Manager60nonenew
  25. 25WiresharkWireshark60nonenew

Severity

How this month's CVEs score on CVSS; 4 have no score yet. Severity is not exploitation.

  • Critical5913%
  • High11525%
  • Medium23452%
  • Low4510%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Websense20#11
  2. OpenSSL13#14
  3. Mybb7#21
  4. OpenSSL Software Foundation7#22
  5. Aveva4#28
  6. Tcpdump4#32
  7. Webgateinc4#33
  8. Wpml4#34
  9. Ajsquare3#35
  10. Gaia-gis3#38

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-79XSS63new
  2. CWE-39944new
  3. CWE-20Improper Input Validation42new
  4. CWE-200Information Exposure40new
  5. CWE-26432new
  6. CWE-119Memory Buffer Bounds28new
  7. CWE-89SQL Injection16new
  8. CWE-352CSRF14new
  9. CWE-1712new
  10. CWE-1912new
  11. CWE-18911new
  12. CWE-94Code Injection11new
  13. CWE-3109new
  14. CWE-284Improper Access Control8new
  15. CWE-22Path Traversal6new
  16. CWE-77Command Injection6new
  17. CWE-287Improper Authentication4new
  18. CWE-190Integer Overflow3new
  19. CWE-2543new
  20. CWE-269Improper Privilege Mgmt3new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

The lighter the cell, the more CVEs. Point at one to read it.

March 2015: weakness classes by vendor and by sector: By vendor
By vendor79XSS39920Improper Input Validation200Information Exposure264119Memory Buffer Bounds89SQL Injection352CSRF1719
Microsoft6116422
Cisco2520231
Debian1183232
IBM1321642
Canonical1221221
Apple16111111
Google23422
Opensuse1241212
Red Hat2112111
Fedoraproject123621
Websense7142
HP11

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store