December 2004
248 CVEs published, 4.7× November 2004 and 6.7× December 2003. CISA added 0 to KEV.
2004 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2004 | January 2004: 68 CVEs | February 2004: 22 CVEs | March 2004: 177 CVEs | April 2004: 61 CVEs | May 2004: 53 CVEs | June 2004: 120 CVEs | July 2004: 121 CVEs | August 2004: 58 CVEs | September 2004: 565 CVEs | October 2004: 81 CVEs | November 2004: 53 CVEs | December 2004: 248 CVEs | 1,627+31% |
- Critical
- 10141% of the 245 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 161224 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 4 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1Red HatFedora Core, Enterprise Linux, Enterprise Linux Desktop2911nonenew
- 2Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux249nonenew
- 3SuseSuse Linux173nonenew
- 4UbuntuUbuntu Linux178nonenew
- 5GentooLinux, Mirrorselect164nonenew
- 6LinuxLinux Kernel162nonenew
- 7MicrosoftWindows Nt, Windows 2003 Server, Windows 2000166nonenew
- 8TrustixSecure Linux137nonenew
- 9DebianDebian Linux, Debmake112nonenew
- 10MandrakesoftMandrake Linux, Mandrake Linux Corporate Server72nonenew
- 11ConectivaLinux63nonenew
- 12Gentoo Foundation Inc.Gentoo Linux61nonenew
- 13MplayerMplayer, Unix Mplayer66nonenew
- 14PHPPHP65nonenew
- 15Carnegie Mellon UniversityCyrus Imap Server55nonenew
- 16CiscoCns Network Registrar, Multiservice Platform 2650xm, Multiservice Platform 2651xm51nonenew
- 17Easy Software ProductsCups51nonenew
- 18Ethereal GroupEthereal50nonenew
- 19Gadu-gaduGadu-gadu Instant Messenger51nonenew
- 20OpenpkgOpenpkg55nonenew
- 21AppleSafari, Mac OS X, Quicktime Streaming Server40nonenew
- 22KdeKde, Konqueror, Kdelibs41nonenew
- 23MozillaFirefox, Mozilla, Bugzilla40nonenew
- 24SgiPropack, Irix41nonenew
- 25SugarcrmSugarcrm, Sugar Sales42nonenew
Severity
How this month's CVEs score on CVSS; 3 have no score yet. Severity is not exploitation.
- Critical101
- High40
- Medium78
- Low26
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems10636% of sector-tagged CVEs
- Consumer Software3111% of sector-tagged CVEs
- Security Products238% of sector-tagged CVEs
- Communications238% of sector-tagged CVEs
- Web & CMS Plugins176% of sector-tagged CVEs
- OSS Libraries145% of sector-tagged CVEs
- Enterprise Software145% of sector-tagged CVEs
- Networking Infrastructure145% of sector-tagged CVEs
- Not yet classified31
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 20Improper Input Validation | 787Out-of-bounds Write | 264 | 400Resource Consumption | 74Injection | 94Code Injection |
|---|---|---|---|---|---|---|---|
| Red Hat | 1 | ||||||
| Сообщество Свободного Программного Обеспечения | 1 | 1 | |||||
| Suse | |||||||
| Ubuntu | 1 | ||||||
| Gentoo | |||||||
| Linux | |||||||
| Microsoft | 1 | ||||||
| Trustix | 1 | ||||||
| Debian | |||||||
| Mandrakesoft | |||||||
| Conectiva | |||||||
| Gentoo Foundation Inc. |