CVEs from 2015

7,313 normalized CVEs published or assigned in this year.

Total

7,313

critical

critical 1,306

high

high 1,666

medium

medium 3,617

low

low 554

% Critical

17.9%

% with KEV

0.6%

% with exploit

0.8%

Top vendors

adobe 6,231
ibm 5,366
mozilla 5,348
oracle 1,591
php 1,526
microsoft 1,380
cisco 1,374
f5 1,115

Top products

firefox 4,609
flash_player 3,392
php 1,526
moodle 1,087
acrobat_reader 878
acrobat 878
safari 736
internet_explorer 712

Top packages

critical high medium low unknown

0

KEV Has exploit

CVE	Severity	CVSS	Risk	Published	Description	Impact
CVE-2015-1427	unknown	—	1.5	4y ago	Improper Access Control in Elasticsearch
CVE-2015-5317	unknown	—	1.5	4y ago	Jenkins discloses project names via fingerprints