December 2000
56 CVEs published, +6% on November 2000. CISA added 0 to KEV.
2000 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2000 | January 2000: 182 CVEs | February 2000: 407 CVEs | March 2000: 70 CVEs | April 2000: 112 CVEs | May 2000: 12 CVEs | June 2000: 74 CVEs | July 2000: 155 CVEs | August 2000: 15 CVEs | September 2000: 48 CVEs | October 2000: 284 CVEs | November 2000: 53 CVEs | December 2000: 56 CVEs | 1,468+37% |
- Critical
- 35% of the 56 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 4055 products
- Top weakness
- CWE-2031 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftData Engine, SQL Server, Internet Information Server120nonenew
- 2Network AssociatesSniffer Agent, Webshield Smtp61nonenew
- 3IBMLotus Notes, HTTP Server, Net.data40nonenew
- 4HPHp-ux31nonenew
- 5Joe KlossRobinhood20nonenew
- 6Max FeoktistovSmall HTTP Server20nonenew
- 7Red HatLinux, Red Hat Enterprise Linux20nonenew
- 824link24link10nonenew
- 9AbisoftBaxter10nonenew
- 10AdcycleAdcycle10nonenew
- 11Alex Heiphetz GroupEzshopper10nonenew
- 12AolInstant Messenger10nonenew
- 13BB4Big Brother Network Monitor10nonenew
- 14BeBeos10nonenew
- 15BsdiBsd OS10nonenew
- 16CalderaOpenlinux Edesktop, Openlinux, Openlinux Eserver10nonenew
- 17ConectivaLinux10nonenew
- 18Fanuc Corp.Fanuc10nonenew
- 19Flicks SoftwareAuthentix10nonenew
- 20ImmunixImmunix10nonenew
- 21I-softQuikstore10nonenew
- 22Itserv IncorporatedRidewaypn10nonenew
- 23Jan HubickaKoules10nonenew
- 24Kenny CarruthersPostmaster10nonenew
- 25MandrakesoftMandrake Linux10nonenew
Severity
How this month's CVEs score on CVSS. Severity is not exploitation.
- Critical3
- High18
- Medium32
- Low3
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems1730% of sector-tagged CVEs
- Enterprise Software814% of sector-tagged CVEs
- Networking Infrastructure814% of sector-tagged CVEs
- Communications59% of sector-tagged CVEs
- Security Products47% of sector-tagged CVEs
- Web & CMS Plugins35% of sector-tagged CVEs
- OSS Libraries24% of sector-tagged CVEs
- Consumer Software24% of sector-tagged CVEs
- Not yet classified8
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 203 |
|---|---|
| Microsoft | |
| Network Associates | |
| IBM | 1 |
| HP | |
| Joe Kloss | |
| Max Feoktistov | |
| Red Hat | |
| 24link | |
| Abisoft | |
| Adcycle | |
| Alex Heiphetz Group | |
| Aol |