April 2004
61 CVEs published, −66% on March 2004 and −85% on April 2003. CISA added 0 to KEV.
2004 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2004 | January 2004: 68 CVEs | February 2004: 22 CVEs | March 2004: 177 CVEs | April 2004: 61 CVEs | May 2004: 53 CVEs | June 2004: 120 CVEs | July 2004: 121 CVEs | August 2004: 58 CVEs | September 2004: 565 CVEs | October 2004: 81 CVEs | November 2004: 53 CVEs | December 2004: 248 CVEs | 1,627+31% |
- Critical
- 711% of the 61 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 3756 products
- Top weakness
- Out-of-bounds ReadCWE-125 · 2 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftWindows 2000, Windows Xp, Windows Nt212nonenew
- 2Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux91nonenew
- 3LinuxLinux Kernel70nonenew
- 4Gentoo Foundation Inc.Gentoo Linux50nonenew
- 5OracleMySQL, E-business Suite, Application Server Web Cache31nonenew
- 6AppleMac OS X20nonenew
- 7CvsCvs20nonenew
- 8DebianDebian Linux21nonenew
- 9KameRacoon20nonenew
- 10RealnetworksHelix Universal Server, Realone Player, Realplayer20nonenew
- 11SsmtpSsmtp20nonenew
- 12TcpdumpTcpdump20nonenew
- 13ActivestateActiveperl11nonenew
- 14Andrew TridgellRsync10nonenew
- 15CiscoHosting Solution Engine, Wireless Lan Solution Engine11nonenew
- 16FreebsdFreebsd10nonenew
- 17FteFte Text Editor11nonenew
- 18GentooLinux11nonenew
- 19GnuMailman10nonenew
- 20Interchange Development GroupInterchange10nonenew
- 21KthHeimdal10nonenew
- 22Larry WallPerl11nonenew
- 23MacromediaColdfusion10nonenew
- 24MandrakesoftMandrake Linux11nonenew
- 25McafeeEpolicy Orchestrator10nonenew
Severity
How this month's CVEs score on CVSS. Severity is not exploitation.
- Critical7
- High20
- Medium22
- Low12
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 125Out-of-bounds Read | 476NULL Pointer Dereference | 119Memory Buffer Bounds | 134Format String | 191 | 401 | 88 | 89SQL Injection |
|---|---|---|---|---|---|---|---|---|
| Microsoft | 1 | 1 | 1 | |||||
| Сообщество Свободного Программного Обеспечения | ||||||||
| Linux | 1 | |||||||
| Gentoo Foundation Inc. | 1 | |||||||
| Oracle | ||||||||
| Apple | ||||||||
| Cvs | ||||||||
| Debian | 1 | |||||||
| Kame | ||||||||
| Realnetworks | 1 | |||||||
| Ssmtp | ||||||||
| Tcpdump | 2 | 1 |