May 2001
292 CVEs published, 6.5× April 2001 and 24.3× May 2000. CISA added 0 to KEV.
2001 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2001 | January 2001: 232 CVEs | February 2001: 61 CVEs | March 2001: 39 CVEs | April 2001: 45 CVEs | May 2001: 292 CVEs | June 2001: 0 CVEs | July 2001: 61 CVEs | August 2001: 25 CVEs | September 2001: 490 CVEs | October 2001: 45 CVEs | November 2001: 36 CVEs | December 2001: 0 CVEs | 1,326−10% |
- Critical
- 4515% of the 292 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 156230 products
- Top weakness
- Buffer OverflowCWE-120 · 2 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftInternet Explorer, Windows 2000, Windows Nt342nonenew
- 2Red HatLinux, Red Hat Enterprise Linux, Tmpwatch272nonenew
- 3MandrakesoftMandrake Linux, Mandrake Linux Corporate Server170nonenew
- 4DebianDebian Linux151nonenew
- 5FreebsdFreebsd, Ja-xklock131nonenew
- 6SunSunos, Solaris, Javaserver Web Dev Kit130nonenew
- 7IBMAix, Net.commerce, Net.commerce Hosting Server120nonenew
- 8HPHp-ux, Mpe Ix, Omniback Ii113nonenew
- 9ImmunixImmunix110nonenew
- 10CiscoBroadband Operating System, Cisco 6xx Routers, IOS80nonenew
- 11OpenBSDOpenBSD, Openssh84nonenew
- 12NetbsdNetbsd62nonenew
- 13OracleOracle8i, Application Server, Solaris62nonenew
- 14ScoUnixware, Openserver, Open Desktop63nonenew
- 15AllaireColdfusion Server, Forums, Spectra51nonenew
- 16NetscapeFasttrack Server, Enterprise Server, Smartdownload52nonenew
- 17GnuPrivacy Guard, Groff, Mailman41nonenew
- 18ISCBind43nonenew
- 19KthKth Kerberos40nonenew
- 20SuseSuse Linux40nonenew
- 21ConectivaLinux30nonenew
- 22DigitalUnix30nonenew
- 23LotusDomino Mail Server, Domino R5 Client, Domino R5 Server31nonenew
- 24SgiIrix33nonenew
- 25SiemensReliant Unix, Hinet Lp31nonenew
Severity
How this month's CVEs score on CVSS. Severity is not exploitation.
- Critical45
- High90
- Medium112
- Low45
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems12238% of sector-tagged CVEs
- Enterprise Software3912% of sector-tagged CVEs
- Networking Infrastructure3611% of sector-tagged CVEs
- Security Products268% of sector-tagged CVEs
- Consumer Software186% of sector-tagged CVEs
- Web & CMS Plugins175% of sector-tagged CVEs
- 7 smaller sectors39
- Not yet classified22
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 120Buffer Overflow | 131Incorrect Buffer Size | 200Information Exposure | 119Memory Buffer Bounds | 22Path Traversal | 281 | 307Excessive Auth Attempts | 399 | 732Incorrect Permissions | 88 |
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | 1 | 1 | 1 | 1 | ||||||
| Red Hat | ||||||||||
| Mandrakesoft | ||||||||||
| Debian | 1 | |||||||||
| Red Hat Inc. | ||||||||||
| Freebsd | ||||||||||
| Sun | ||||||||||
| IBM | ||||||||||
| HP | 2 | |||||||||
| Immunix | ||||||||||
| Cisco | 1 | 1 | ||||||||
| OpenBSD |