June 2004
120 CVEs published, 2.3× May 2004 and +7% on June 2003. CISA added 0 to KEV.
2004 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2004 | January 2004: 68 CVEs | February 2004: 22 CVEs | March 2004: 177 CVEs | April 2004: 61 CVEs | May 2004: 53 CVEs | June 2004: 120 CVEs | July 2004: 121 CVEs | August 2004: 58 CVEs | September 2004: 565 CVEs | October 2004: 81 CVEs | November 2004: 53 CVEs | December 2004: 248 CVEs | 1,627+31% |
- Critical
- 3328% of the 116 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 96191 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 1 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1SgiPropack, Irix167nonenew
- 2GentooLinux124nonenew
- 3AppleMac OS X, Mac OS X Server92nonenew
- 4MicrosoftOutlook, Windows 2000, Internet Explorer92nonenew
- 5Red HatFedora Core, Enterprise Linux, Red Hat Enterprise Linux83nonenew
- 6Gentoo Foundation Inc.Gentoo Linux61nonenew
- 7GnuAspell, Gnats, Gzip62nonenew
- 8IBMAix, HTTP Server, Acprunner63nonenew
- 9OpenBSDOpenBSD, Openssh64nonenew
- 10SuseSuse Linux, Suse Linux Admin-cd For Firewall, Suse Email Server62nonenew
- 11DebianDebian Linux52nonenew
- 12MandrakesoftMandrake Linux, Mandrake Linux Corporate Server, Mandrake Multi Network Firewall52nonenew
- 13MozillaBugzilla52nonenew
- 14OpenpkgOpenpkg54nonenew
- 15CvsCvs43nonenew
- 16Ethereal GroupEthereal41nonenew
- 17LinuxLinux Kernel40nonenew
- 18Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux41nonenew
- 19AvayaS8700, S8500, S830030nonenew
- 20ConectivaLinux30nonenew
- 21FreebsdFreebsd30nonenew
- 22InfobloxDns One Appliance32nonenew
- 23SquirrelmailSquirrelmail31nonenew
- 24ApacheHTTP Server21nonenew
- 25CiscoCatalyst 6000 Ws-svc-nam-1, Catalyst 6000 Ws-svc-nam-2, Catalyst 6000 Ws-x6380-nam20nonenew
Severity
How this month's CVEs score on CVSS; 4 have no score yet. Severity is not exploitation.
- Critical33
- High28
- Medium46
- Low9
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems6036% of sector-tagged CVEs
- Enterprise Software138% of sector-tagged CVEs
- DevTools & CI138% of sector-tagged CVEs
- Networking Infrastructure127% of sector-tagged CVEs
- Security Products106% of sector-tagged CVEs
- Mobile Apps95% of sector-tagged CVEs
- Consumer Software95% of sector-tagged CVEs
- Communications95% of sector-tagged CVEs
- OSS Libraries85% of sector-tagged CVEs
- Not yet classified15
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 120Buffer Overflow | 16 | 22Path Traversal | 88 |
|---|---|---|---|---|---|
| Sgi | 1 | ||||
| Gentoo | 1 | ||||
| Apple | |||||
| Microsoft | |||||
| Red Hat | |||||
| Gentoo Foundation Inc. | |||||
| Gnu | |||||
| IBM | 1 | ||||
| OpenBSD | 1 | 1 | |||
| Suse | |||||
| Debian | 1 | ||||
| Mandrakesoft |