January 2001
232 CVEs published, 4.1× December 2000 and +27% on January 2000. CISA added 0 to KEV.
2001 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2001 | January 2001: 232 CVEs | February 2001: 61 CVEs | March 2001: 39 CVEs | April 2001: 45 CVEs | May 2001: 292 CVEs | June 2001: 0 CVEs | July 2001: 61 CVEs | August 2001: 25 CVEs | September 2001: 490 CVEs | October 2001: 45 CVEs | November 2001: 36 CVEs | December 2001: 0 CVEs | 1,326−10% |
- Critical
- 3314% of the 232 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 127173 products
- Top weakness
- CWE-592 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftWindows 2000, Internet Information Server, Internet Information Services242nonenew
- 2OpenBSDOpenBSD, Openssh101nonenew
- 3CheckpointFirewall-180nonenew
- 4FreebsdFreebsd80nonenew
- 5Red HatLinux, Red Hat Enterprise Linux83nonenew
- 6SuseSuse Linux83nonenew
- 7HPHp-ux, Openview Network Node Manager, TRU6470nonenew
- 8MandrakesoftMandrake Linux73nonenew
- 9NetscapeIplanet Ical, Messaging Server, Communicator73nonenew
- 10Recourse TechnologiesMantrap70nonenew
- 11CiscoSecure Access Control Server, Pix Firewall Software, IOS62nonenew
- 12GnuGlibc, Ed, Cfengine61nonenew
- 13IBMAix, AS400 Firewall, Websphere Application Server62nonenew
- 14DebianDebian Linux, Elvis Tiny51nonenew
- 15ApacheHTTP Server, Tomcat40nonenew
- 16SambaSamba40nonenew
- 17SunSunos, Solaris, Hotjava Browser41nonenew
- 18Cgi-worldPoll It, Poll It Pro31nonenew
- 19Craig DansieDansie Shopping Cart31nonenew
- 20MacromediaJrun30nonenew
- 21TrustixSecure Linux32nonenew
- 22Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux30nonenew
- 23Aladdin EnterprisesGhostscript20nonenew
- 24AolAim, Instant Messenger20nonenew
- 25CalderaOpenlinux, Openlinux Ebuilder, Openlinux Eserver22nonenew
Severity
How this month's CVEs score on CVSS. Severity is not exploitation.
- Critical33
- High68
- Medium109
- Low22
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems7933% of sector-tagged CVEs
- Security Products2611% of sector-tagged CVEs
- Web & CMS Plugins229% of sector-tagged CVEs
- Networking Infrastructure208% of sector-tagged CVEs
- Consumer Software208% of sector-tagged CVEs
- Enterprise Software167% of sector-tagged CVEs
- Communications167% of sector-tagged CVEs
- OSS Libraries104% of sector-tagged CVEs
- Not yet classified22
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 59 | 120Buffer Overflow | 178 | 264 | 362Race Condition | 522Insufficiently Protected Credentials | 798Hard-coded Credentials |
|---|---|---|---|---|---|---|---|
| Microsoft | 1 | ||||||
| OpenBSD | |||||||
| Checkpoint | |||||||
| Freebsd | |||||||
| Suse | 1 | ||||||
| HP | 1 | ||||||
| Mandrakesoft | 1 | ||||||
| Netscape | |||||||
| Recourse Technologies | |||||||
| Red Hat | 1 | ||||||
| Cisco | |||||||
| Gnu |