December 2003
37 CVEs published, −21% on November 2003 and +19% on December 2002. CISA added 0 to KEV.
2003 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2003 | January 2003: 23 CVEs | February 2003: 18 CVEs | March 2003: 138 CVEs | April 2003: 397 CVEs | May 2003: 121 CVEs | June 2003: 112 CVEs | July 2003: 92 CVEs | August 2003: 72 CVEs | September 2003: 105 CVEs | October 2003: 76 CVEs | November 2003: 47 CVEs | December 2003: 37 CVEs | 1,238−27% |
- Critical
- 25% of the 37 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 3870 products
- Top weakness
- NULL Pointer DereferenceCWE-476 · 2 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1CiscoPix Firewall Software, Catalyst 6500, Catalyst 6500 Ws-svc-nam-160nonenew
- 2BroadcomUnicenter Remote Control Host, Unicenter Remote Control, Unicenter Remote Control Option30nonenew
- 3FreescriptsVisitorbook, Visitorbook Le30nonenew
- 4GnuPrivacy Guard, Screen31nonenew
- 5Red HatRed Hat Enterprise Linux, Rsync30nonenew
- 6SunSolaris, Sunos, Sun Fire30nonenew
- 7LinuxLinux Kernel20nonenew
- 8SlackwareSlackware Linux20nonenew
- 9Alexander V. LukyanovLftp10nonenew
- 10Andrew TridgellRsync10nonenew
- 11ApacheMod Python10nonenew
- 12AppleMac OS X, Mac OS X Server, Safari10nonenew
- 13Applied Watch TechnologiesApplied Watch Command Center10nonenew
- 14CaControlit, Unicenter Remote Control Option10nonenew
- 15CompaqTRU6410nonenew
- 16CvsCvs10nonenew
- 17EngardelinuxSecure Community, Secure Linux10nonenew
- 18EtherealEthereal10nonenew
- 19Ethereal GroupEthereal10nonenew
- 20FreebsdFreebsd10nonenew
- 21FreeradiusFreeradius10nonenew
- 22HPHp-ux10nonenew
- 23IBMAix10nonenew
- 24IrssiIrssi10nonenew
- 25ISCBind10nonenew
Severity
How this month's CVEs score on CVSS. Severity is not exploitation.
- Critical2
- High15
- Medium20
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems1125% of sector-tagged CVEs
- Networking Infrastructure716% of sector-tagged CVEs
- Web & CMS Plugins49% of sector-tagged CVEs
- Security Products49% of sector-tagged CVEs
- Cloud & SaaS37% of sector-tagged CVEs
- OSS Libraries37% of sector-tagged CVEs
- Consumer Software37% of sector-tagged CVEs
- Enterprise Software25% of sector-tagged CVEs
- Communications25% of sector-tagged CVEs
- Not yet classified2
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 476NULL Pointer Dereference | 20Improper Input Validation | 346 |
|---|---|---|---|
| Cisco | 1 | ||
| Broadcom | |||
| Freescripts | 1 | ||
| Gnu | |||
| Red Hat Inc. | |||
| Sun | |||
| Linux | |||
| Slackware | |||
| Alexander V. Lukyanov | |||
| Andrew Tridgell | |||
| Apache | |||
| Apple |