September 1999
321 CVEs published. CISA added 0 to KEV.
1999 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1999 | September 1999: 321 CVEs | October 1999: 0 CVEs | November 1999: 0 CVEs | December 1999: 0 CVEs | 321 |
- Critical
- 3411% of the 317 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 112199 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 5 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1SunSunos, Solaris, Nfs689nonenew
- 2IBMAix, Sng4710nonenew
- 3MicrosoftWindows Nt, Internet Information Server, Windows 2000391nonenew
- 4SgiIrix, License Oeo, Freeware365nonenew
- 5HPHp-ux, Vvos, Openmail325nonenew
- 6FreebsdFreebsd222nonenew
- 7BsdiBsd OS207nonenew
- 8NetbsdNetbsd, Umapfs182nonenew
- 9Red HatLinux176nonenew
- 10ScoOpenserver, Open Desktop, Unixware132nonenew
- 11CiscoIOS, Pix Firewall Software, Catalyst 5xxx Supervisor Software120nonenew
- 12NetscapeEnterprise Server, Communicator, Fasttrack Server122nonenew
- 13OpenBSDOpenBSD100nonenew
- 14CalderaOpenlinux, Network Desktop96nonenew
- 15DebianDebian Linux, Netkit93nonenew
- 16NecAsl Ux 4800, Ews-ux V, Up-ux V94nonenew
- 17DigitalOsf 1, Ultrix, Unix82nonenew
- 18Eric AllmanSendmail, Vacation84nonenew
- 19LinuxLinux Kernel80nonenew
- 20GnuInet, Fingerd, Finger Service70nonenew
- 21ISCBind, Inn73nonenew
- 22ApacheHTTP Server61nonenew
- 23Data GeneralDg Ux61nonenew
- 24SlackwareSlackware Linux62nonenew
- 25Washington UniversityWu-ftpd52nonenew
Severity
How this month's CVEs score on CVSS; 4 have no score yet. Severity is not exploitation.
- Critical34
- High141
- Medium121
- Low21
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds5
- CWE-200Information Exposure4
- CWE-120Buffer Overflow3
- CWE-125Out-of-bounds Read3
- CWE-2643
- CWE-78OS Command Injection2
- CWE-10671
- CWE-171
- CWE-1781
- CWE-20Improper Input Validation1
- CWE-269Improper Privilege Mgmt1
- CWE-287Improper Authentication1
- CWE-2901
- CWE-327Broken Crypto Algorithm1
- CWE-3641
- CWE-400Resource Consumption1
- CWE-434Unrestricted File Upload1
- CWE-476NULL Pointer Dereference1
- CWE-522Insufficiently Protected Credentials1
- CWE-77Command Injection1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 200Information Exposure | 120Buffer Overflow | 125Out-of-bounds Read | 264 | 78OS Command Injection | 1067 | 17 | 178 | 20Improper Input Validation |
|---|---|---|---|---|---|---|---|---|---|---|
| Sun | 1 | 2 | 1 | 1 | ||||||
| IBM | 2 | 1 | 1 | |||||||
| Microsoft | 2 | 3 | 1 | 3 | 1 | |||||
| Sgi | 1 | 1 | 1 | 2 | ||||||
| HP | 2 | 1 | ||||||||
| Freebsd | 1 | 1 | ||||||||
| Bsdi | 1 | 2 | 1 | 1 | ||||||
| Netbsd | 1 | 1 | ||||||||
| Red Hat | 1 | 1 | 1 | |||||||
| Sco | 1 | |||||||||
| Cisco | ||||||||||
| Netscape | 1 | 1 |