CVE Intelligence
Skip to main content

Month report

May 2016

Rolled up 2026-08-09 20:45 from 370,700 CVE records

612 CVEs published, +49.3% on the same month last year. 1 rated critical, 0 listed by CISA as exploited. canonical led with 1; the most common weakness class was CWE-674 (2). 4 vendors ranked for the first time.

← April 2016All monthsJune 2016 →

Published

612

-6.3%on the previous month

Critical / high

1 / 7

of the 12 scored

Medium / low

4 / 0

the rest of the scored bands

Added to CISA KEV

0

listed as exploited this month

Public exploit

67

exploit code indexed publicly

Scanner template

0

0% of the month

Publication to KEV

How long before CISA listed them

7 published this month and listed since — not the 0 listed during it.

Median days to listing

2008

from publication to CISA's date added

Listed within 7 days

0%

of the 7

Listed within 30 days

0%

of the 7

Weakness × vendor

Where the two overlap

CVEs carrying both. Each row is shaded against its own worst class.
VendorCWE-674CWE-122CWE-1262CWE-20CWE-306CWE-552CWE-787CWE-918
canonical1
debian1
imagemagick1
opensuse1
suse1

Vendors

Ranked by distinct CVEs this month

Δ is the move against last month's rank.
Vendors ranked by distinct CVEs published in 2016-05, sorted by CVEs descending
#VendorTop products
1canonical111debian linux (1) · imagemagick (1) · leap (1)·
2debian111debian linux (1) · imagemagick (1) · leap (1)new
3imagemagick111debian linux (1) · imagemagick (1) · leap (1)new
4opensuse111debian linux (1) · imagemagick (1) · leap (1)new
5suse111debian linux (1) · imagemagick (1) · leap (1)new

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2016-05 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 5 ranked vendors are listed; a zero count renders as a dot.

Weaknesses

CWE classes by distinct CVEs

  • 1CWE-67420 critical·
  • 2CWE-12210 critical·
  • 3CWE-126210 criticalnew
  • 4CWE-2010 critical·
  • 5CWE-30611 critical·
  • 6CWE-55210 criticalnew
  • 7CWE-78710 critical·
  • 8CWE-91810 criticalnew

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.