CVE Intelligence
Skip to main content

Month report

September 2014

Rolled up 2026-08-09 20:45 from 370,825 CVE records

1,146 CVEs published, +152.4% on the same month last year. 2 rated critical, 0 listed by CISA as exploited. schneider electric led with 4; the most common weakness class was CWE-78 (3). 1 vendor ranked for the first time.

← August 2014All monthsOctober 2014 →

Published

1,146

+185.8%on the previous month

Critical / high

2 / 5

of the 14 scored

Medium / low

7 / 0

the rest of the scored bands

Added to CISA KEV

0

listed as exploited this month

Public exploit

52

exploit code indexed publicly

Scanner template

0

0% of the month

Publication to KEV

How long before CISA listed them

4 published this month and listed since — not the 0 listed during it.

Median days to listing

2692.5

from publication to CISA's date added

Listed within 7 days

0%

of the 4

Listed within 30 days

0%

of the 4

Weakness × vendor

Where the two overlap

CVEs carrying both. Each row is shaded against its own worst class.
VendorCWE-78CWE-121CWE-287CWE-310CWE-311CWE-494CWE-526CWE-73
schneider electric111
ecava11
sensys networks11

Vendors

Ranked by distinct CVEs this month

Δ is the move against last month's rank.
Vendors ranked by distinct CVEs published in 2014-09, sorted by CVEs descending
#VendorTop products
1schneider electric4clearscada (3) · scada expert clearscada (3) · vampset (1)—
2ecava3integraxor scada server (3)·
3sensys networks2vsn240 f (2) · vsn240 t (2)new

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2014-09 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 3 ranked vendors are listed; a zero count renders as a dot.

Weaknesses

CWE classes by distinct CVEs

  • 1CWE-7832 critical·
  • 2CWE-12110 critical↑1
  • 3CWE-28710 critical·
  • 4CWE-31010 criticalnew
  • 5CWE-31110 critical·
  • 6CWE-49410 critical·
  • 7CWE-52610 criticalnew
  • 8CWE-7310 criticalnew
  • 9CWE-78710 critical·
  • 10CWE-7910 critical↓5
  • 1CWE-8910 critical↓5

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.