October 2000
284 CVEs published, 5.9× September 2000. CISA added 0 to KEV.
2000 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2000 | January 2000: 182 CVEs | February 2000: 407 CVEs | March 2000: 70 CVEs | April 2000: 112 CVEs | May 2000: 12 CVEs | June 2000: 74 CVEs | July 2000: 155 CVEs | August 2000: 15 CVEs | September 2000: 48 CVEs | October 2000: 284 CVEs | November 2000: 53 CVEs | December 2000: 56 CVEs | 1,468+37% |
- Critical
- 4014% of the 283 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 156226 products
- Top weakness
- CWE-1782 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftWindows 2000, Internet Explorer, Internet Information Services260nonenew
- 2Red HatLinux, Linux Powertools, Red Hat Enterprise Linux132nonenew
- 3DebianDebian Linux102nonenew
- 4FreebsdFreebsd91nonenew
- 5HPHp-ux, Openview Network Node Manager, Openview Omniback Ii92nonenew
- 6BeaWeblogic Server73nonenew
- 7IBMWebsphere Application Server, Net.data, OS2 Ftp Server71nonenew
- 8NetscapeCommunicator, Navigator, Enterprise Server60nonenew
- 9SunCobalt Raq 3i, Cobalt Raq 2, Java61nonenew
- 10CalderaOpenlinux, Openlinux Eserver, Openlinux Desktop51nonenew
- 11CheckpointFirewall-150nonenew
- 12MandrakesoftMandrake Linux50nonenew
- 13NetbsdNetbsd50nonenew
- 14NovellBordermanager, Netware, Groupwise50nonenew
- 15SymantecNorton Antivirus, Pcanywhere50nonenew
- 16ISCInn, Dhcp Client, Bind41nonenew
- 17MitKerberos 5, Kerberos41nonenew
- 18NetwinDmailweb, Cwmail, Netauth41nonenew
- 19Network AssociatesNet Tools Pki Server, Webshield40nonenew
- 20OpenBSDOpenBSD, Openssh41nonenew
- 21ScoUnixware, Openserver40nonenew
- 22CiscoIOS, Gigabit Switch Router 12012, Pix Firewall30nonenew
- 23ConectivaLinux31nonenew
- 24Eric AllmanSendmail30nonenew
- 25IntelExpress 550f, Express 510t, Express 520t30nonenew
Severity
How this month's CVEs score on CVSS; 1 have no score yet. Severity is not exploitation.
- Critical40
- High80
- Medium137
- Low26
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems9733% of sector-tagged CVEs
- Enterprise Software3612% of sector-tagged CVEs
- Networking Infrastructure3010% of sector-tagged CVEs
- Communications289% of sector-tagged CVEs
- Security Products227% of sector-tagged CVEs
- Consumer Software155% of sector-tagged CVEs
- 7 smaller sectors30
- Not yet classified38
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 178 | 120Buffer Overflow | 200Information Exposure | 459 | 667 |
|---|---|---|---|---|---|
| Microsoft | |||||
| Red Hat | |||||
| Debian | |||||
| Freebsd | |||||
| HP | |||||
| Bea | 1 | ||||
| IBM | 1 | ||||
| Netscape | |||||
| Sun | |||||
| Caldera | |||||
| Checkpoint | |||||
| Mandrakesoft |