March 2004
177 CVEs published, 8.0× February 2004 and +28% on March 2003. CISA added 0 to KEV.
2004 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2004 | January 2004: 68 CVEs | February 2004: 22 CVEs | March 2004: 177 CVEs | April 2004: 61 CVEs | May 2004: 53 CVEs | June 2004: 120 CVEs | July 2004: 121 CVEs | August 2004: 58 CVEs | September 2004: 565 CVEs | October 2004: 81 CVEs | November 2004: 53 CVEs | December 2004: 248 CVEs | 1,627+31% |
- Critical
- 4123% of the 176 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 138226 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 3 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1AppleMac OS X, Mac OS X Server, Safari122nonenew
- 2SapSap R 3, Internet Transaction Server, Sap Db100nonenew
- 3OpenBSDOpenBSD81nonenew
- 4SgiPropack, Irix70nonenew
- 5SymantecClientless VPN Gateway 4400, Gateway Security 5400, Antivirus Scan Engine70nonenew
- 6Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux70nonenew
- 7CiscoIOS, CSS11000 Content Services Switch, Access Registrar61nonenew
- 8IBMAix, Cloudscape63nonenew
- 9Red HatRed Hat Enterprise Linux, Enterprise Linux, Enterprise Linux Desktop60nonenew
- 10DellBsafe Ssl-j, Openmanage40nonenew
- 11SunCrypto Accelerator 4000, Solaris, Sunos40nonenew
- 124dWebstar30nonenew
- 13AvayaConverged Communications Server, Intuity Audix, S830030nonenew
- 14BluecoatCacheos Ca Sa, Proxysg30nonenew
- 15CheckpointVpn-1, Firewall-1, Provider-130nonenew
- 16Francisco BurziPhp-nuke30nonenew
- 17FreebsdFreebsd30nonenew
- 18HPAaa Server, Apache-based Web Server, Hp-ux30nonenew
- 19Invision Power ServicesInvision Board31nonenew
- 20NeoterisInstant Virtual Extranet30nonenew
- 21NovellEdirectory, Imanager30nonenew
- 22OpenSSLOpenSSL30nonenew
- 23QualiteamX-cart31nonenew
- 24ScoOpenserver30nonenew
- 25SecurecomputingSidewinder30nonenew
Severity
How this month's CVEs score on CVSS; 1 have no score yet. Severity is not exploitation.
- Critical41
- High42
- Medium82
- Low11
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins3717% of sector-tagged CVEs
- Operating Systems3215% of sector-tagged CVEs
- Networking Infrastructure2612% of sector-tagged CVEs
- Enterprise Software2411% of sector-tagged CVEs
- Security Products178% of sector-tagged CVEs
- Mobile Apps126% of sector-tagged CVEs
- OSS Libraries115% of sector-tagged CVEs
- Consumer Software105% of sector-tagged CVEs
- Communications94% of sector-tagged CVEs
- Cloud & SaaS94% of sector-tagged CVEs
- Not yet classified21
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 125Out-of-bounds Read | 193 | 203 | 476NULL Pointer Dereference | 20Improper Input Validation | 22Path Traversal | 401 | 59 | 667 |
|---|---|---|---|---|---|---|---|---|---|---|
| Apple | 1 | 1 | ||||||||
| Sap | ||||||||||
| OpenBSD | 1 | 2 | 1 | 1 | ||||||
| Sgi | 1 | 1 | ||||||||
| Symantec | 1 | 1 | 1 | |||||||
| Сообщество Свободного Программного Обеспечения | ||||||||||
| Cisco | 1 | 1 | 1 | |||||||
| IBM | 1 | 1 | ||||||||
| Red Hat Inc. | 1 | 1 | ||||||||
| Dell | 1 | 1 | ||||||||
| Red Hat | 1 | 1 | ||||||||
| Sun | 1 | 1 |