October 2001
45 CVEs published, −91% on September 2001 and −84% on October 2000. CISA added 0 to KEV.
2001 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2001 | January 2001: 232 CVEs | February 2001: 61 CVEs | March 2001: 39 CVEs | April 2001: 45 CVEs | May 2001: 292 CVEs | June 2001: 0 CVEs | July 2001: 61 CVEs | August 2001: 25 CVEs | September 2001: 490 CVEs | October 2001: 45 CVEs | November 2001: 36 CVEs | December 2001: 0 CVEs | 1,326−10% |
- Critical
- 37% of the 45 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 4252 products
- Top weakness
- CWE-1782 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1CiscoCatalyst 6000 Intrusion Detection System Module, Cbos, Secure Intrusion Detection System30nonenew
- 2Internet Software SolutionsAir Messenger Lan Server30nonenew
- 3SendmailSendmail30nonenew
- 4ApacheHTTP Server21nonenew
- 5IplanetIplanet Web Server21nonenew
- 6MicrosoftInternet Explorer, Services20nonenew
- 7OmnicronOmnihttpd20nonenew
- 8Steve PoulsenGuildftpd20nonenew
- 9TrendmicroInterscan Viruswall, Interscan Webmanager20nonenew
- 10A-ftpAnonymous Ftp Server10nonenew
- 11CmfperceptionLiteserve10nonenew
- 12ComputalynxCmail10nonenew
- 13CosmicperlDirectory Pro10nonenew
- 14DebianDebian Linux10nonenew
- 15DynfxDynfx Mailserver10nonenew
- 16EngardelinuxSecure Linux10nonenew
- 17EnterasysDragon10nonenew
- 18Evolvable CorporationShambala Server10nonenew
- 19HordeImp10nonenew
- 20HPHp-ux10nonenew
- 21ImmunixImmunix10nonenew
- 22InfodromCfingerd10nonenew
- 23IssRealsecure Network Sensor, Realsecure Server Sensor10nonenew
- 24JeticoBestcrypt10nonenew
- 25KasperskyKaspersky Anti-virus11nonenew
Severity
How this month's CVEs score on CVSS. Severity is not exploitation.
- Critical3
- High19
- Medium19
- Low4
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Communications918% of sector-tagged CVEs
- Security Products816% of sector-tagged CVEs
- Operating Systems714% of sector-tagged CVEs
- Networking Infrastructure612% of sector-tagged CVEs
- Web & CMS Plugins510% of sector-tagged CVEs
- DevTools & CI24% of sector-tagged CVEs
- Cloud & SaaS24% of sector-tagged CVEs
- Consumer Software24% of sector-tagged CVEs
- Enterprise Software24% of sector-tagged CVEs
- ICS / OT / IoT12% of sector-tagged CVEs
- Not yet classified5
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 178 | 119Memory Buffer Bounds | 22Path Traversal | 264 | 284Improper Access Control |
|---|---|---|---|---|---|
| Cisco | |||||
| Internet Software Solutions | |||||
| Sendmail | |||||
| Apache | 1 | ||||
| Iplanet | |||||
| Microsoft | |||||
| Omnicron | |||||
| Steve Poulsen | |||||
| Trend Micro | |||||
| A-ftp | |||||
| Cmfperception | 1 | ||||
| Computalynx |