CVE Tools
Track your stack

June 2015

499 CVEs published, +20% on May 2015 and +11% on June 2014. CISA added 0 to KEV.

2015 month by month

2015, month by month. Point at another month to read it.
2015: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2015January 2015: 737 CVEsFebruary 2015: 496 CVEsMarch 2015: 457 CVEsApril 2015: 558 CVEsMay 2015: 417 CVEsJune 2015: 499 CVEsJuly 2015: 644 CVEsAugust 2015: 625 CVEsSeptember 2015: 499 CVEsOctober 2015: 739 CVEsNovember 2015: 368 CVEsDecember 2015: 567 CVEs6,606−18%
Critical
5110% of the 496 with a CVSS score
Added to CISA KEV
03 of this month's CVEs are in KEV, listed a median 2486 days after publication
Vendors
213454 products
Top weakness
XSSCWE-79 · 86 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1CiscoCisco IOS, IOS, Webex Meeting Center620nonenew
  2. 2MicrosoftInternet Explorer, Windows Server 2012, Windows 747242new
  3. 3IBMTivoli Storage Manager Fastback, Tivoli Directory Server, Leads434nonenew
  4. 4PackagistMoodle/moodle, Symfony/http-kernel, Symfony/symfony280nonenew
  5. 5MoodleMoodle250nonenew
  6. 6Мартин ДогиамасMoodle250nonenew
  7. 7AdobeFlash Player, Air Sdk, Air20111new
  8. 8CanonicalUbuntu, Ubuntu Linux191nonenew
  9. 9IBM Corp.Tivoli Storage Manager Fastback, Business Process Manager, Infosphere Information Server194nonenew
  10. 10Red HatEnterprise Linux Server, Enterprise Linux Desktop, Enterprise Linux Workstation1911new
  11. 11GoogleAndroid, Chrome, Google Chrome166nonenew
  12. 12AppleMac OS X, OS X, Common Unix Printing System131nonenew
  13. 13Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux130nonenew
  14. 14PHPPHP110nonenew
  15. 15PHP GroupPHP110nonenew
  16. 16OpensuseOpensuse, Evergreen1031new
  17. 17DebianDebian Linux91nonenew
  18. 18SapNetweaver Abap Application Server, Netweaver Java Application Server, Maxdb90nonenew
  19. 19SysaidSysaid90nonenew
  20. 20OracleSolaris, Linux, Glassfish Server80nonenew
  21. 21XclonerXcloner80nonenew
  22. 22ZohocorpManageengine Netflow Analyzer, Manageengine Assetexplorer, Manageengine Supportcenter Plus80nonenew
  23. 23IgreksMilkystep Light, Milkystep Professional, Milkystep Professional Oem70nonenew
  24. 24Libmspack ProjectLibmspack70nonenew
  25. 25MavenCom.ning:async-http-client, Org.apache.camel:camel-core, Org.apache.tomcat:tomcat70nonenew

Severity

How this month's CVEs score on CVSS; 3 have no score yet. Severity is not exploitation.

  • Critical5110%
  • High9018%
  • Medium29760%
  • Low5812%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Мартин Догиамас25#6
  2. Sysaid9#19
  3. Xcloner8#21
  4. Zohocorp8#22
  5. Igreks7#23
  6. Libmspack Project7#24
  7. OpenSSL6#27
  8. OpenSSL Software Foundation6#28
  9. W1.fi6#30
  10. The Linux Foundation5#35

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-79XSS86new
  2. CWE-200Information Exposure51new
  3. CWE-39949new
  4. CWE-119Memory Buffer Bounds42new
  5. CWE-352CSRF39new
  6. CWE-26437new
  7. CWE-89SQL Injection27new
  8. CWE-22Path Traversal24new
  9. CWE-20Improper Input Validation21new
  10. CWE-18911new
  11. CWE-2548new
  12. CWE-284Improper Access Control8new
  13. CWE-416Use After Free8new
  14. CWE-197new
  15. CWE-3107new
  16. CWE-176new
  17. CWE-78OS Command Injection5new
  18. CWE-2554new
  19. CWE-77Command Injection4new
  20. CWE-362Race Condition3new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

The lighter the cell, the more CVEs. Point at one to read it.

June 2015: weakness classes by vendor and by sector: By vendor
By vendor79XSS200Information Exposure399119Memory Buffer Bounds352CSRF26489SQL Injection22Path Traversal20Improper Input Validation189
Cisco7151521136
Microsoft2319412
Microsoft Corp2219412
IBM53122222
Packagist752251
Cisco Systems Inc.31063
Moodle652251
Мартин Догиамас652251
Adobe255112
Adobe Systems Inc.255112
IBM Corp.21211
Red Hat11422

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store