October 2003
76 CVEs published, −28% on September 2003 and +69% on October 2002. CISA added 0 to KEV.
2003 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2003 | January 2003: 23 CVEs | February 2003: 18 CVEs | March 2003: 138 CVEs | April 2003: 397 CVEs | May 2003: 121 CVEs | June 2003: 112 CVEs | July 2003: 92 CVEs | August 2003: 72 CVEs | September 2003: 105 CVEs | October 2003: 76 CVEs | November 2003: 47 CVEs | December 2003: 37 CVEs | 1,238−27% |
- Critical
- 68% of the 71 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 4154 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 2 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftWindows 2000, Windows Xp, Windows Nt121nonenew
- 2AppleMac OS X, Mac OS X Server110nonenew
- 3Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux81nonenew
- 4OpenSSLOpenSSL41nonenew
- 5ApacheHTTP Server, Tomcat31nonenew
- 6GnuFileutils, Cfengine30nonenew
- 7IBMDB2 Universal Database30nonenew
- 8PHPPHP32nonenew
- 9Dag Apt RepositoryMod Gzip20nonenew
- 10GnomeGdm20nonenew
- 11OracleOracle9i, Peopletools20nonenew
- 12Red HatRed Hat Enterprise Linux20nonenew
- 13SuseSuse Linux20nonenew
- 14Washington UniversityWu-ftpd20nonenew
- 15WebfsWebfs20nonenew
- 16AcmeThttpd11nonenew
- 17Charles KerrPan10nonenew
- 18DeskproDeskpro10nonenew
- 19Dug SongDsniff10nonenew
- 20FetchmailFetchmail10nonenew
- 21GhostviewGhostview10nonenew
- 22GvGv10nonenew
- 23HPHp-ux10nonenew
- 24IrcnetIrcnet Ircd10nonenew
- 25JbossJboss10nonenew
Severity
How this month's CVEs score on CVSS; 5 have no score yet. Severity is not exploitation.
- Critical6
- High31
- Medium26
- Low8
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems2733% of sector-tagged CVEs
- OSS Libraries1214% of sector-tagged CVEs
- Mobile Apps1113% of sector-tagged CVEs
- Web & CMS Plugins67% of sector-tagged CVEs
- Enterprise Software56% of sector-tagged CVEs
- Networking Infrastructure56% of sector-tagged CVEs
- Consumer Software56% of sector-tagged CVEs
- Not yet classified5
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 131Incorrect Buffer Size | 367 | 399 | 400Resource Consumption | 415Double Free | 59 | 787Out-of-bounds Write | 79XSS | 89SQL Injection |
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | 1 | 1 | 1 | 1 | ||||||
| Apple | ||||||||||
| Сообщество Свободного Программного Обеспечения | 1 | |||||||||
| OpenSSL | 1 | |||||||||
| Apache | 1 | |||||||||
| Gnu | ||||||||||
| IBM | ||||||||||
| PHP | ||||||||||
| Dag Apt Repository | ||||||||||
| Gnome | ||||||||||
| Oracle | ||||||||||
| Red Hat Inc. |