Month report

January 2015

Rolled up 2026-08-09 20:45 from 370,745 CVE records

713 CVEs published, +27.8% on the same month last year. 6 rated critical, 0 listed by CISA as exploited. ge led with 3; the most common weakness class was CWE-306 (2). 4 vendors ranked for the first time.

← December 2014 All months February 2015 →

Published

713

+16.1%on the previous month

Critical / high

6 / 6

of the 15 scored

Medium / low

3 / 0

the rest of the scored bands

Added to CISA KEV

listed as exploited this month

Public exploit

123

exploit code indexed publicly

Scanner template

0% of the month

Publication to KEV

How long before CISA listed them

4 published this month and listed since — not the 0 listed during it.

Median days to listing

2684

from publication to CISA's date added

Listed within 7 days

of the 4

Listed within 30 days

of the 4

Weakness × vendor

Where the two overlap

CVEs carrying both. Each row is shaded against its own worst class.

Vendor	CWE-306	CWE-119	CWE-121	CWE-321
ge		1		1
schneider electric	1		1
arbiter systems
clorius controls
dlink
phoenix contact	1

Vendors

Ranked by distinct CVEs this month

Δ is the move against last month's rank.

Vendors ranked by distinct CVEs published in 2015-01, sorted by CVEs descending
#	Vendor					Top products
1	ge	3	1			ml810 3000 3100 series switch (2) · multilink ml800 1200 1600 2400 (2) · proficy hmi scada cimplicity (1)	·
2	schneider electric	3	3			etg3000 factorycast hmi gateway (2) · intouch access anywhere server (1)	—
3	arbiter systems	1				model 1094b gps substation clock (1)	new
4	clorius controls	1	1			a s java web client (1)	new
5	dlink	1		1	1	dir 600 (1) · dir 600 firmware (1)	new
6	phoenix contact	1	1		1	multiprog (1) · proconos (1)	new

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2015-01 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 6 ranked vendors are listed; a zero count renders as a dot.

Weaknesses

CWE classes by distinct CVEs

1CWE-30622 criticalnew
2CWE-11910 critical·
3CWE-12010 critical·
4CWE-12111 critical↓3
5CWE-12210 critical·
6CWE-20010 critical·
7CWE-2210 critical·
8CWE-32111 criticalnew
9CWE-32611 critical·
10CWE-34510 criticalnew

1CWE-35210 critical·
2CWE-40010 critical·
3CWE-79811 critical·

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.