October 2004
81 CVEs published, −86% on September 2004 and +7% on October 2003. CISA added 0 to KEV.
2004 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2004 | January 2004: 68 CVEs | February 2004: 22 CVEs | March 2004: 177 CVEs | April 2004: 61 CVEs | May 2004: 53 CVEs | June 2004: 120 CVEs | July 2004: 121 CVEs | August 2004: 58 CVEs | September 2004: 565 CVEs | October 2004: 81 CVEs | November 2004: 53 CVEs | December 2004: 248 CVEs | 1,627+31% |
- Critical
- 2127% of the 79 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 5284 products
- Top weakness
- Out-of-bounds WriteCWE-787 · 2 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftWindows Xp, Windows 2000, Ie2211nonenew
- 2Red HatEnterprise Linux, Fedora Core, Enterprise Linux Desktop144nonenew
- 3AppleMac OS X Server, Mac OS X, Quicktime112nonenew
- 4GentooLinux94nonenew
- 5SuseSuse Linux94nonenew
- 6TrustixSecure Linux92nonenew
- 7UbuntuUbuntu Linux94nonenew
- 8MandrakesoftMandrake Linux, Mandrake Linux Corporate Server, Mandrake Multi Network Firewall70nonenew
- 9DebianDebian Linux64nonenew
- 10Easy Software ProductsCups63nonenew
- 11Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Gettext60nonenew
- 12GnuGettext, Glibc, Groff40nonenew
- 13KdeKde, Koffice, Kpdf42nonenew
- 14LibtiffLibtiff41nonenew
- 15LinuxLinux Kernel40nonenew
- 16OpenpkgOpenpkg41nonenew
- 17OracleMySQL41nonenew
- 18FreeradiusFreeradius30nonenew
- 19ScoOpenserver30nonenew
- 20ApacheHTTP Server20nonenew
- 21GnomeGpdf22nonenew
- 22HPHp-ux20nonenew
- 23MySQLMySQL20nonenew
- 24PdflibPdf Library20nonenew
- 25PdftohtmlPdftohtml22nonenew
Severity
How this month's CVEs score on CVSS; 2 have no score yet. Severity is not exploitation.
- Critical21
- High20
- Medium20
- Low18
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 787Out-of-bounds Write | 119Memory Buffer Bounds | 131Incorrect Buffer Size | 191 | 20Improper Input Validation | 22Path Traversal | 369 | 399 | 59 |
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | 2 | 1 | 1 | ||||||
| Red Hat | 1 | ||||||||
| Apple | |||||||||
| Gentoo | 1 | ||||||||
| Suse | 1 | ||||||||
| Trustix | 1 | 1 | |||||||
| Ubuntu | 1 | ||||||||
| Mandrakesoft | |||||||||
| Debian | 1 | ||||||||
| Easy Software Products | |||||||||
| Сообщество Свободного Программного Обеспечения | |||||||||
| Gnu |