May 2003
121 CVEs published, −70% on April 2003 and −46% on May 2002. CISA added 0 to KEV.
2003 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2003 | January 2003: 23 CVEs | February 2003: 18 CVEs | March 2003: 138 CVEs | April 2003: 397 CVEs | May 2003: 121 CVEs | June 2003: 112 CVEs | July 2003: 92 CVEs | August 2003: 72 CVEs | September 2003: 105 CVEs | October 2003: 76 CVEs | November 2003: 47 CVEs | December 2003: 37 CVEs | 1,238−27% |
- Critical
- 108% of the 121 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 87121 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 1 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftInternet Explorer, Internet Information Services, Biztalk Server151nonenew
- 2Red HatRed Hat Enterprise Linux, Linux, Tcpdump61nonenew
- 3DebianDebian Linux50nonenew
- 4MirabilisIcq50nonenew
- 5Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux50nonenew
- 6CiscoVPN 3015 Concentrator, VPN 3000 Concentrator Series Software, VPN 3002 Hardware Client40nonenew
- 7Snowblind.netSnowblind Web Server40nonenew
- 8AppleMac OS X, 802.11n, Safari30nonenew
- 9Bvrp SoftwareSlwebmail30nonenew
- 10Colten EdwardsBitchx30nonenew
- 11QualcommEudora30nonenew
- 12Ambrosia SoftwareMaelstrom20nonenew
- 13ApacheHTTP Server20nonenew
- 14EpicEPIC420nonenew
- 15Francisco BurziPhp-nuke20nonenew
- 16HappycgiHappymall20nonenew
- 17KdeKonqueror Embedded, Kopete20nonenew
- 18LinuxLinux Kernel20nonenew
- 19MozillaMozilla20nonenew
- 20MuttMutt20nonenew
- 21OneorzeroOneorzero Helpdesk21nonenew
- 22Selom OforiBlackmoon Ftp Server20nonenew
- 23Stuart ParmenterBalsa20nonenew
- 24University of WashingtonPine, Imap-2002b, C-client20nonenew
- 25WSMP3WSMP3 Daemon, WSMP3 Web Server20nonenew
Severity
How this month's CVEs score on CVSS. Severity is not exploitation.
- Critical10
- High48
- Medium59
- Low4
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems3526% of sector-tagged CVEs
- Communications2015% of sector-tagged CVEs
- Web & CMS Plugins1914% of sector-tagged CVEs
- Networking Infrastructure107% of sector-tagged CVEs
- Enterprise Software97% of sector-tagged CVEs
- OSS Libraries64% of sector-tagged CVEs
- Consumer Software54% of sector-tagged CVEs
- 6 smaller sectors15
- Not yet classified18
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 120Buffer Overflow | 193 | 203 | 79XSS | 89SQL Injection |
|---|---|---|---|---|---|---|
| Microsoft | 1 | |||||
| Debian | 1 | |||||
| Mirabilis | ||||||
| Red Hat Inc. | 1 | |||||
| Сообщество Свободного Программного Обеспечения | ||||||
| Cisco | ||||||
| Snowblind.net | ||||||
| Apple | ||||||
| Bvrp Software | ||||||
| Colten Edwards | ||||||
| Qualcomm | ||||||
| Ambrosia Software |