December 2002
31 CVEs published, −6% on November 2002. CISA added 0 to KEV.
2002 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2002 | January 2002: 3 CVEs | February 2002: 117 CVEs | March 2002: 571 CVEs | April 2002: 10 CVEs | May 2002: 223 CVEs | June 2002: 361 CVEs | July 2002: 79 CVEs | August 2002: 205 CVEs | September 2002: 21 CVEs | October 2002: 45 CVEs | November 2002: 33 CVEs | December 2002: 31 CVEs | 1,699+28% |
- Critical
- 621% of the 28 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 2740 products
- Top weakness
- Improper Input ValidationCWE-20 · 3 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftOffice Web Components, Windows 98, Internet Explorer50nonenew
- 2Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux51nonenew
- 3AppleMac OS X, Mac OS X Server42nonenew
- 4CiscoIOS44nonenew
- 5FisshSsh Client44nonenew
- 6IntersoftSecurenetterm44nonenew
- 7NetcompositeShellguard Ssh44nonenew
- 8Pragma SystemsSecureshell44nonenew
- 9PuttyPutty44nonenew
- 10WinscpWinscp44nonenew
- 11Easy Software ProductsCups21nonenew
- 12Ehud GavronTracesroute20nonenew
- 13Ethereal GroupEthereal20nonenew
- 14NullsoftWinamp20nonenew
- 15OpenldapOpenldap20nonenew
- 16SunCobalt Raq Xtr, Solaris, Sunos20nonenew
- 17BizdesignImagefolio10nonenew
- 18CyrusimapCyrus Sasl11nonenew
- 19GnuWget10nonenew
- 20Ncftp SoftwareNcftp10nonenew
- 21OpenBSDOpenBSD10nonenew
- 22OracleMySQL10nonenew
- 23Red HatRed Hat Enterprise Linux10nonenew
- 24SMB2WWWSMB2WWW10nonenew
- 25SquirrelmailSquirrelmail10nonenew
Severity
How this month's CVEs score on CVSS; 3 have no score yet. Severity is not exploitation.
- Critical6
- High9
- Medium13
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 20Improper Input Validation | 119Memory Buffer Bounds | 131Incorrect Buffer Size |
|---|---|---|---|
| Microsoft | |||
| Сообщество Свободного Программного Обеспечения | |||
| Apple | 1 | ||
| Cisco | 3 | 1 | |
| Fissh | 3 | 1 | |
| Intersoft | 3 | 1 | |
| Netcomposite | 3 | 1 | |
| Pragma Systems | 3 | 1 | |
| Putty | 3 | 1 | |
| Winscp | 3 | 1 | |
| Easy Software Products | |||
| Ehud Gavron |