September 2001
490 CVEs published, 19.6× August 2001 and 10.2× September 2000. CISA added 0 to KEV.
2001 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2001 | January 2001: 232 CVEs | February 2001: 61 CVEs | March 2001: 39 CVEs | April 2001: 45 CVEs | May 2001: 292 CVEs | June 2001: 0 CVEs | July 2001: 61 CVEs | August 2001: 25 CVEs | September 2001: 490 CVEs | October 2001: 45 CVEs | November 2001: 36 CVEs | December 2001: 0 CVEs | 1,326−10% |
- Critical
- 316% of the 487 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 225359 products
- Top weakness
- Improper Input ValidationCWE-20 · 2 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftInternet Explorer, Internet Information Server, Windows Nt563nonenew
- 2SunSunos, Solaris, Solstice Adminsuite262nonenew
- 3SgiIrix, Quake 1 Server221nonenew
- 4HPHp-ux, Jetdirect, Apollo Domain OS201nonenew
- 5CiscoIOS, Resource Manager, VPN 3005 Concentrator161nonenew
- 6Red HatLinux, Red Hat Enterprise Linux152nonenew
- 7IBMAix, Tivoli Opc Tracker Agent, HTTP Server SSL Module Common131nonenew
- 8FreebsdFreebsd101nonenew
- 9MandrakesoftMandrake Linux, Mandrake Linux Corporate Server91nonenew
- 10ScoUnix, Openserver Enterprise System, Open Desktop90nonenew
- 11SlackwareSlackware Linux91nonenew
- 12DebianDebian Linux80nonenew
- 13IpswitchImail, Ws Ftp Pro81nonenew
- 14LinuxLinux Kernel80nonenew
- 15KdeKde, Kde Beta 370nonenew
- 16ApplemacOS, Appleshare Mail Server60nonenew
- 17DigitalUnix, Ultrix, Digital Openvms Axp60nonenew
- 18ApacheHTTP Server53nonenew
- 19Matt WrightFormhandler.cgi, Download.cgi, Matt Wright Guestbook51nonenew
- 20NetscapeCommunicator, Directory Server, Enterprise Server50nonenew
- 21NovellNetware, Web Server, Bordermanager51nonenew
- 22OracleHTTP Server, Web Listener, Database Assistant51nonenew
- 23ConectivaLinux40nonenew
- 24Id SoftwareQuake, Quake 2, Quake 2 Server40nonenew
- 25MacromediaShockwave Flash Plugin, Dreamweaver, Matrix Screen Saver40nonenew
Severity
How this month's CVEs score on CVSS; 3 have no score yet. Severity is not exploitation.
- Critical31
- High188
- Medium219
- Low49
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems19740% of sector-tagged CVEs
- Networking Infrastructure5812% of sector-tagged CVEs
- Enterprise Software5411% of sector-tagged CVEs
- Communications286% of sector-tagged CVEs
- Web & CMS Plugins286% of sector-tagged CVEs
- Consumer Software286% of sector-tagged CVEs
- 8 smaller sectors59
- Not yet classified36
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 20Improper Input Validation | 120Buffer Overflow | 131Incorrect Buffer Size | 200Information Exposure | 209Error Message Info Leak | 264 | 307Excessive Auth Attempts | 310 | 346 | 401 |
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | 1 | |||||||||
| Sun | ||||||||||
| Sgi | ||||||||||
| HP | ||||||||||
| Cisco | 1 | |||||||||
| IBM | ||||||||||
| Red Hat | ||||||||||
| Freebsd | ||||||||||
| Mandrakesoft | 1 | |||||||||
| Sco | ||||||||||
| Slackware | ||||||||||
| Debian | 1 |