July 2004
121 CVEs published, +1% on June 2004 and +32% on July 2003. CISA added 0 to KEV.
2004 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2004 | January 2004: 68 CVEs | February 2004: 22 CVEs | March 2004: 177 CVEs | April 2004: 61 CVEs | May 2004: 53 CVEs | June 2004: 120 CVEs | July 2004: 121 CVEs | August 2004: 58 CVEs | September 2004: 565 CVEs | October 2004: 81 CVEs | November 2004: 53 CVEs | December 2004: 248 CVEs | 1,627+31% |
- Critical
- 1815% of the 121 with a CVSS score
- Added to CISA KEV
- 01 of this month's CVEs are in KEV, listed a median 6441 days after publication
- Vendors
- 81135 products
- Top weakness
- Buffer OverflowCWE-120 · 1 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftWindows 2000, Windows Nt, Internet Explorer1321new
- 2GentooLinux111nonenew
- 3LinuxLinux Kernel70nonenew
- 4Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux73nonenew
- 5AvayaDefinity One Media Server, IP600 Media Servers, Modular Messaging Message Storage Server62nonenew
- 6MandrakesoftMandrake Linux, Mandrake Linux Corporate Server, Mandrake Multi Network Firewall60nonenew
- 7MozillaBugzilla, Mozilla, Firefox61nonenew
- 8SunSolaris, Sunos, Java System Calendar Server61nonenew
- 9TrustixSecure Linux61nonenew
- 10BeaWeblogic Server50nonenew
- 11Francisco BurziPhp-nuke50nonenew
- 12Red HatEnterprise Linux, Linux Advanced Workstation, Fedora Core50nonenew
- 134dWebstar40nonenew
- 14HPHp-ux, Openview Select Access, TRU64 Unix41nonenew
- 15DebianDebian Linux30nonenew
- 16Ethereal GroupEthereal30nonenew
- 17PowerportalPowerportal30nonenew
- 18SuseSuse Linux, Suse Linux Connectivity Server, Suse Email Server30nonenew
- 19CiscoIOS, Ons 15454e Optical Transport Platform, Optical Networking Systems Software20nonenew
- 20Comersus Open TechnologiesComersus Cart20nonenew
- 21ConectivaLinux20nonenew
- 22FastreamNetfile Ftp Web Server21nonenew
- 23IBMLotus Domino, Websphere Caching Proxy Server, Websphere Edge Server Caching Proxy20nonenew
- 24Mailreader.comMailreader.com21nonenew
- 25MySQLMySQL22nonenew
Severity
How this month's CVEs score on CVSS. Severity is not exploitation.
- Critical18
- High38
- Medium57
- Low8
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems4430% of sector-tagged CVEs
- Security Products1510% of sector-tagged CVEs
- Web & CMS Plugins1410% of sector-tagged CVEs
- Networking Infrastructure1410% of sector-tagged CVEs
- Consumer Software139% of sector-tagged CVEs
- Enterprise Software128% of sector-tagged CVEs
- Communications128% of sector-tagged CVEs
- 6 smaller sectors16
- Not yet classified7
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 120Buffer Overflow | 190Integer Overflow | 306Missing Auth for Critical Function | 367 | 415Double Free | 79XSS |
|---|---|---|---|---|---|---|
| Microsoft | 1 | 1 | 1 | |||
| Gentoo | ||||||
| Linux | ||||||
| Сообщество Свободного Программного Обеспечения | ||||||
| Avaya | 1 | |||||
| Mandrakesoft | ||||||
| Mozilla | ||||||
| Sun | ||||||
| Trustix | 1 | |||||
| Bea | ||||||
| Francisco Burzi | ||||||
| Red Hat |