CVE Tools
Track your stack

May 2002

223 CVEs published, 22.3× April 2002 and −24% on May 2001. CISA added 0 to KEV.

2002 month by month

2002, month by month. Point at another month to read it.
2002: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2002January 2002: 3 CVEsFebruary 2002: 117 CVEsMarch 2002: 571 CVEsApril 2002: 10 CVEsMay 2002: 223 CVEsJune 2002: 361 CVEsJuly 2002: 79 CVEsAugust 2002: 205 CVEsSeptember 2002: 21 CVEsOctober 2002: 45 CVEsNovember 2002: 33 CVEsDecember 2002: 31 CVEs1,699+28%
Critical
94% of the 222 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
140180 products
Top weakness
Buffer OverflowCWE-120 · 1 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1MicrosoftInternet Explorer, Windows 2000, Outlook Express140nonenew
  2. 2IBMLotus Domino R5, Aix, Secureway Directory80nonenew
  3. 3IpswitchImail80nonenew
  4. 4SunCobalt Raq 2, Cobalt Raq 3i, Cobalt Raq 480nonenew
  5. 5HPHp-ux, Vvos, Procurve Switch 4000m51nonenew
  6. 6AvayaArgent Office41nonenew
  7. 7Beck Ipc GmbhIpc At Chip Embedded-webserver, Ipc At Chip Telnetd Server40nonenew
  8. 8NovellGroupwise, Groupwise Webaccess, Netware40nonenew
  9. 9OracleMySQL, Internet Directory40nonenew
  10. 10Red HatRed Hat Enterprise Linux40nonenew
  11. 11Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux40nonenew
  12. 12Alcatel-lucentOmnipcx30nonenew
  13. 13ApacheHTTP Server30nonenew
  14. 14Instantservers Inc.Miniportal30nonenew
  15. 15NombasScriptease Webserver30nonenew
  16. 16NullsoftShoutcast Server, Winamp30nonenew
  17. 17Opera SoftwareOpera Web Browser30nonenew
  18. 18VwebserverVwebserver30nonenew
  19. 19WliangWmtv30nonenew
  20. 20XtellXtell30nonenew
  21. 21YahooMessenger30nonenew
  22. 22AclogicCesarftp20nonenew
  23. 23ADD2ITMailman Free20nonenew
  24. 24ArescomNetdsl21nonenew
  25. 25Avengers News SystemAvengers News System20nonenew

Severity

How this month's CVEs score on CVSS; 1 have no score yet. Severity is not exploitation.

  • Critical94%
  • High10246%
  • Medium9241%
  • Low199%

Breakouts

Vendors with at least three times their own 12-month median.

  1. IBM88.0×
  2. Microsoft147.0×
  3. Red Hat44.0×

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Avaya4#6
  2. Beck Ipc Gmbh4#7
  3. Сообщество Свободного Программного Обеспечения4#11
  4. Alcatel-lucent3#12
  5. Instantservers Inc.3#14
  6. Nombas3#15
  7. Nullsoft3#16
  8. Opera Software3#17
  9. Vwebserver3#18
  10. Wliang3#19

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-120Buffer Overflow1new
  2. CWE-1781new
  3. CWE-2031new
  4. CWE-307Excessive Auth Attempts1new
  5. CWE-79XSS1new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store