Month report

October 2014

Rolled up 2026-08-09 20:45 from 370,877 CVE records

1,413 CVEs published, +142.4% on the same month last year. 2 rated critical, 0 listed by CISA as exploited. fox it led with 1; the most common weakness class was CWE-94 (2). schneider electric climbed -2 places, the largest move. 1 vendor ranked for the first time.

← September 2014 All months November 2014 →

Published

1,413

+23.3%on the previous month

Critical / high

2 / 6

of the 10 scored

Medium / low

1 / 1

the rest of the scored bands

Added to CISA KEV

listed as exploited this month

Public exploit

exploit code indexed publicly

Scanner template

0% of the month

Publication to KEV

How long before CISA listed them

6 published this month and listed since — not the 0 listed during it.

Median days to listing

2742

from publication to CISA's date added

Listed within 7 days

of the 6

Listed within 30 days

of the 6

Weakness × vendor

Where the two overlap

CVEs carrying both. Each row is shaded against its own worst class.

Vendor	CWE-20	CWE-352
fox it		1
rockwell automation	1
schneider electric

Vendors

Ranked by distinct CVEs this month

Δ is the move against last month's rank.

Vendors ranked by distinct CVEs published in 2014-10, sorted by CVEs descending
#	Vendor			Top products
1	fox it	1		datadiode appliance (1)	new
2	rockwell automation	1		allen bradley micrologix 1400 (1)	·
3	schneider electric	1	1	ethernet modules for m340 quantum and premium plc ranges (1)	↓2

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2014-10 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 3 ranked vendors are listed; a zero count renders as a dot.

Weaknesses

CWE classes by distinct CVEs

1CWE-9421 critical·
2CWE-2010 critical·
3CWE-32910 critical·
4CWE-35210 critical·

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.