Month report
December 2012
Rolled up 2026-08-09 20:45 from 370,700 CVE records
255 CVEs published, -25% on the same month last year. 2 rated critical, 0 listed by CISA as exploited. carlo gavazzi automation led with 2; the most common weakness class was CWE-416 (2). microsoft climbed -2 places, the largest move. 5 vendors ranked for the first time.
Published
255
Critical / high
2 / 5
Medium / low
2 / 0
Added to CISA KEV
0
Public exploit
37
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
3808
Listed within 7 days
0%
Listed within 30 days
0%
Weakness × vendor
Where the two overlap
| Vendor | CWE-416 | CWE-331 | CWE-592 | CWE-639 | CWE-787 | CWE-798 | CWE-89 |
|---|---|---|---|---|---|---|---|
| carlo gavazzi automation | 1 | 1 | |||||
| centreon | |||||||
| i gen solutions | 1 | ||||||
| microsoft | 1 | ||||||
| post oak traffic systems | 1 | ||||||
| redhat | 1 | ||||||
| tropos |
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | carlo gavazzi automation | 2 | 1 | eos box (2) | new | |||
| 2 | centreon | 1 | 1 | centreon (1) · centreon web (1) | new | |||
| 3 | i gen solutions | 1 | oplynx (1) | new | ||||
| 4 | microsoft | 1 | 1 | 1 | ie (1) | ↓2 | ||
| 5 | post oak traffic systems | 1 | awam bluetooth reader traffic system (1) | new | ||||
| 6 | redhat | 1 | red hat openstack platform 13 queens (1) · red hat openstack platform 16 2 (1) · red hat openstack platform 17 1 (1) | · | ||||
| 7 | tropos | 1 | mesh os (1) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2012-12 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 7 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-41621 critical↑2
- 2CWE-33110 criticalnew
- 3CWE-59210 criticalnew
- 4CWE-63910 criticalnew
- 5CWE-78710 critical·
- 6CWE-79811 criticalnew
- 7CWE-8910 critical↓2
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.