Month report

August 2014

Rolled up 2026-08-09 20:45 from 370,877 CVE records

401 CVEs published, +12.3% on the same month last year. 0 rated critical, 0 listed by CISA as exploited. schneider electric led with 5; the most common weakness class was CWE-20 (4). 2 vendors ranked for the first time.

← July 2014 All months September 2014 →

Published

401

-38.6%on the previous month

Critical / high

0 / 8

of the 12 scored

Medium / low

2 / 2

the rest of the scored bands

Added to CISA KEV

listed as exploited this month

Public exploit

exploit code indexed publicly

Scanner template

0% of the month

Publication to KEV

How long before CISA listed them

3 published this month and listed since — not the 0 listed during it.

Median days to listing

2843

from publication to CISA's date added

Listed within 7 days

of the 3

Listed within 30 days

of the 3

Weakness × vendor

Where the two overlap

CVEs carrying both. Each row is shaded against its own worst class.

Vendor	CWE-20	CWE-326	CWE-79	CWE-89
schneider electric	1	2	1	1
cg automation	2
subnet	1

Vendors

Ranked by distinct CVEs this month

Δ is the move against last month's rank.

Vendors ranked by distinct CVEs published in 2014-08, sorted by CVEs descending
#	Vendor		Top products
1	schneider electric	5	wonderware information server portal (5)	·
2	cg automation	2	epaq 9410 substation gateway (2)	new
3	subnet	1	substation server 2 telegyr 8979 master protocol (1)	new

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2014-08 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 3 ranked vendors are listed; a zero count renders as a dot.

Weaknesses

CWE classes by distinct CVEs

1CWE-2040 critical—
2CWE-32620 critical·
3CWE-12110 critical↑1
4CWE-42810 critical·
5CWE-7910 critical↑10
6CWE-8910 critical·

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.