Month report

April 2014

Rolled up 2026-08-09 20:45 from 370,700 CVE records

665 CVEs published, +54.7% on the same month last year. 5 rated critical, 0 listed by CISA as exploited. advantech led with 10; the most common weakness class was CWE-121 (7). schneider electric climbed -3 places, the largest move. 4 vendors ranked for the first time.

← March 2014 All months May 2014 →

Published

665

+23.1%on the previous month

Critical / high

5 / 11

of the 19 scored

Medium / low

3 / 0

the rest of the scored bands

Added to CISA KEV

0

listed as exploited this month

Public exploit

73

exploit code indexed publicly

Scanner template

0

0% of the month

Publication to KEV

How long before CISA listed them

3 published this month and listed since — not the 0 listed during it.

Median days to listing

2912

from publication to CISA's date added

Listed within 7 days

0%

of the 3

Listed within 30 days

0%

of the 3

Weakness × vendor

Where the two overlap

CVEs carrying both. Each row is shaded against its own worst class.

Vendor	CWE-121	CWE-125	CWE-287	CWE-538	CWE-122	CWE-200	CWE-22
advantech	6			2
festo			2
indusoft							1
ioserver		1
progea						1
schneider electric					1
wellintech	1

Vendors

Ranked by distinct CVEs this month

Δ is the move against last month's rank.

Vendors ranked by distinct CVEs published in 2014-04, sorted by CVEs descending
#	Vendor					Top products
1	advantech	10			1	webaccess (10)	new
2	festo	2	2			cecx x c1 modular master controller with codesys (2) · cecx x m1 modular controller with codesys and softmotion (2)	·
3	indusoft	1	1	1	1	web studio (1)	new
4	ioserver	1				opc drivers (1)	new
5	progea	1				movicon (1)	new
6	schneider electric	1				opc factory server ofs (1)	↓3
7	wellintech	1	1		1	kingscada (1)	·

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2014-04 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 7 ranked vendors are listed; a zero count renders as a dot.

Weaknesses

CWE classes by distinct CVEs

1CWE-12171 critical—
2CWE-12520 critical·
3CWE-28722 critical·
4CWE-53820 criticalnew
5CWE-12210 critical↓1
6CWE-20010 critical·
7CWE-2211 critical·
8CWE-41611 critical·
9CWE-7710 critical·
10CWE-8910 critical·

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.