April 2003

397 CVEs published, 2.9× March 2003 and 39.7× April 2002. CISA added 0 to KEV.

2003, month by month. Point at another month to read it.

2003: CVEs published per month
Year	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec	Year total
2003	January 2003: 23 CVEs	February 2003: 18 CVEs	March 2003: 138 CVEs	April 2003: 397 CVEs	May 2003: 121 CVEs	June 2003: 112 CVEs	July 2003: 92 CVEs	August 2003: 72 CVEs	September 2003: 105 CVEs	October 2003: 76 CVEs	November 2003: 47 CVEs	December 2003: 37 CVEs	1,238−27%

Critical: 3910% of the 397 with a CVSS score
Added to CISA KEV: 01 of this month's CVEs are in KEV, listed a median 6910 days after publication
Vendors: 201332 products
Top weakness: Memory Buffer BoundsCWE-119 · 3 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

How this month's CVEs score on CVSS. Severity is not exploitation.

Vendors with at least three times their own 12-month median.

Not in the top 100 in any of the 24 months before.

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

The top weakness classes against the vendors and the sectors that carried them.

The lighter the cell, the more CVEs. Point at one to read it.

April 2003: weakness classes by vendor and by sector: By vendor
By vendor	119Memory Buffer Bounds	120Buffer Overflow	190Integer Overflow	59	131Incorrect Buffer Size
Microsoft		1	1
Red Hat Inc.					1
Sgi
Freebsd		1	1	1
Cisco	1
OpenBSD			2
Red Hat		1
Sun			1
Caldera
HP
Mozilla
Сообщество Свободного Программного Обеспечения		1	1