July 2001
61 CVEs published, −61% on July 2000. CISA added 0 to KEV.
2001 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2001 | January 2001: 232 CVEs | February 2001: 61 CVEs | March 2001: 39 CVEs | April 2001: 45 CVEs | May 2001: 292 CVEs | June 2001: 0 CVEs | July 2001: 61 CVEs | August 2001: 25 CVEs | September 2001: 490 CVEs | October 2001: 45 CVEs | November 2001: 36 CVEs | December 2001: 0 CVEs | 1,326−10% |
- Critical
- 47% of the 61 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 4150 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 1 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1ScoOpenserver70nonenew
- 2LotusDomino R5 Server50nonenew
- 3OracleOracle8i, Database Server, Oracle9i41nonenew
- 4Aladdin Knowledge SystemsEsafe Gateway30nonenew
- 5HPHp-ux, Mpe, Virtualvault30nonenew
- 6LucentOrinoco, Orinoco Rg-1000, Radius31nonenew
- 7SunChilisoft, Iplanet Web Server30nonenew
- 8Alt-nMdaemon20nonenew
- 9Drummond MilesA1STATS20nonenew
- 10Eeye Digital SecuritySecurells, Secureiis20nonenew
- 11MicrosoftWindows 200020nonenew
- 12ZopeZope20nonenew
- 133com3crwe747a10nonenew
- 14AlliedtelesynAt-ar220e10nonenew
- 15Ben SpinkCrushftp Ftp Server10nonenew
- 16CarelloE-commerce10nonenew
- 17CiscoCatalyst 290010nonenew
- 18ElronIm Anti Virus, Im Message Inspector10nonenew
- 19Headlight SoftwareMygetright10nonenew
- 20Hughes TechnologiesDsl Vdns10nonenew
- 21InfodromCfingerd11nonenew
- 22IplanetCalendar Server10nonenew
- 23KdeKde10nonenew
- 24Matt WrightFormmail10nonenew
- 25MeritRadius11nonenew
Severity
How this month's CVEs score on CVSS. Severity is not exploitation.
- Critical4
- High23
- Medium29
- Low5
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems1627% of sector-tagged CVEs
- Networking Infrastructure915% of sector-tagged CVEs
- Enterprise Software915% of sector-tagged CVEs
- Security Products610% of sector-tagged CVEs
- Databases58% of sector-tagged CVEs
- Web & CMS Plugins47% of sector-tagged CVEs
- OSS Libraries35% of sector-tagged CVEs
- Communications35% of sector-tagged CVEs
- Cloud & SaaS12% of sector-tagged CVEs
- Not yet classified4
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 193 | 20Improper Input Validation |
|---|---|---|---|
| Sco | 1 | ||
| Lotus | |||
| Oracle | |||
| Aladdin Knowledge Systems | |||
| HP | |||
| Lucent | |||
| Sun | |||
| Alt-n | |||
| Drummond Miles | |||
| Eeye Digital Security | |||
| Microsoft | |||
| Zope |