September 2004
565 CVEs published, 9.7× August 2004 and 5.4× September 2003. CISA added 0 to KEV.
2004 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2004 | January 2004: 68 CVEs | February 2004: 22 CVEs | March 2004: 177 CVEs | April 2004: 61 CVEs | May 2004: 53 CVEs | June 2004: 120 CVEs | July 2004: 121 CVEs | August 2004: 58 CVEs | September 2004: 565 CVEs | October 2004: 81 CVEs | November 2004: 53 CVEs | December 2004: 248 CVEs | 1,627+31% |
- Critical
- 417% of the 563 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 243455 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 5 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftWindows Xp, Windows 2000, Internet Explorer734nonenew
- 2Red HatRed Hat Enterprise Linux, Enterprise Linux Desktop, Enterprise Linux707nonenew
- 3Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux303nonenew
- 4AppleMac OS X, Darwin Streaming Server, Mac OS X Server262nonenew
- 5CiscoVPN 3000 Concentrator Series Software, VPN Client, VPN 3002 Hardware Client240nonenew
- 6ApacheHTTP Server, Tomcat, Mod Python231nonenew
- 7SunSolaris, Sunos, Java Desktop System212nonenew
- 8MozillaMozilla, Thunderbird, Bugzilla193nonenew
- 9SgiIrix, Propack, Freeware171nonenew
- 10IBMAix, Lotus Domino, Lotus Notes Client121nonenew
- 11LinuxLinux Kernel120nonenew
- 12OpenBSDOpenBSD, Openssh120nonenew
- 13SuseSuse Linux122nonenew
- 14OracleMySQL, Oracle9i, Oracle8i112nonenew
- 15ConectivaLinux104nonenew
- 16DebianDebian Linux, Fsp, Netkit101nonenew
- 17FreebsdFreebsd100nonenew
- 18HPHp-ux, Secure OS, Secure Web Server For TRU64102nonenew
- 19KdeKde, Konqueror90nonenew
- 20MandrakesoftMandrake Linux, Mandrake Linux Corporate Server90nonenew
- 21Xfree86 ProjectX11R691nonenew
- 22F-secureInternet Gatekeeper, F-secure Anti-virus, F-secure Content Scanner Server80nonenew
- 23ClearswiftMailsweeper70nonenew
- 24GnuGlibc, Radius, Libtool70nonenew
- 25ISCBind, Dhcpd, Inn70nonenew
Severity
How this month's CVEs score on CVSS; 2 have no score yet. Severity is not exploitation.
- Critical41
- High253
- Medium228
- Low41
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems27839% of sector-tagged CVEs
- Networking Infrastructure639% of sector-tagged CVEs
- Security Products537% of sector-tagged CVEs
- Enterprise Software507% of sector-tagged CVEs
- Consumer Software507% of sector-tagged CVEs
- Web & CMS Plugins477% of sector-tagged CVEs
- Communications436% of sector-tagged CVEs
- OSS Libraries385% of sector-tagged CVEs
- Mobile Apps274% of sector-tagged CVEs
- Not yet classified34
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 415Double Free | 120Buffer Overflow | 193 | 264 | 20Improper Input Validation | 835Infinite Loop | 88 | 131Incorrect Buffer Size | 190Integer Overflow |
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | 1 | 1 | 1 | 1 | ||||||
| Red Hat Inc. | 2 | |||||||||
| Сообщество Свободного Программного Обеспечения | 1 | 1 | ||||||||
| Apple | ||||||||||
| Cisco | 1 | |||||||||
| Apache | 1 | 1 | ||||||||
| Red Hat | 2 | |||||||||
| Sun | 1 | |||||||||
| Mozilla | 1 | |||||||||
| Sgi | ||||||||||
| IBM | ||||||||||
| Linux | 1 |