February 2005
827 CVEs published, 4.7× January 2005 and 37.6× February 2004. CISA added 0 to KEV.
2005 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2005 | January 2005: 175 CVEs | February 2005: 827 CVEs | March 2005: 506 CVEs | April 2005: 518 CVEs | May 2005: 861 CVEs | June 2005: 661 CVEs | July 2005: 593 CVEs | August 2005: 584 CVEs | September 2005: 316 CVEs | October 2005: 353 CVEs | November 2005: 716 CVEs | December 2005: 693 CVEs | 6,803+318% |
- Critical
- 283% of the 821 with a CVSS score
- Added to CISA KEV
- 01 of this month's CVEs are in KEV, listed a median 6669 days after publication
- Vendors
- 399581 products
- Top weakness
- Improper Input ValidationCWE-20 · 7 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1SunSolaris, Sunos, Jre442nonenew
- 2MozillaMozilla, Firefox, Thunderbird290nonenew
- 3MicrosoftWindows 2000, Windows Xp, Ie251nonenew
- 4Red HatEnterprise Linux, Enterprise Linux Desktop, Fedora Core150nonenew
- 5CiscoIOS, Optical Networking Systems Software, Secure Access Control Server1401new
- 6Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux130nonenew
- 7IBMAix, DB2 Universal Database, DS4100121nonenew
- 8LinuxLinux Kernel120nonenew
- 9Gentoo Foundation Inc.Gentoo Linux113nonenew
- 10OperaOpera Browser100nonenew
- 11IcewarpWeb Mail90nonenew
- 12MerakMail Server90nonenew
- 13SuseSuse Linux, Suse Cvsup90nonenew
- 14GentooLinux, Webmin80nonenew
- 15GnuCfengine, Glibc, Wget81nonenew
- 16KdeKde, Konqueror, Koffice81nonenew
- 17Saleslogix CorporationSaleslogix80nonenew
- 18Best SoftwareSaleslogix70nonenew
- 19DebianDebian Linux, Toolchain-source, Bsmtpd70nonenew
- 203com3cdaemon, 3cradsl72, 3cserver60nonenew
- 21AppleMac OS X, Safari, Mac OS X Server60nonenew
- 22AwstatsAwstats60nonenew
- 23HPHp-ux, Process Resource Manager, Storageworks Command View60nonenew
- 24MandrakesoftMandrake Linux, Mandrake Linux Corporate Server60nonenew
- 25RealnetworksRealone Player, Realplayer, Helix Player60nonenew
Severity
How this month's CVEs score on CVSS; 6 have no score yet. Severity is not exploitation.
- Critical28
- High248
- Medium459
- Low86
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-20Improper Input Validation7
- CWE-79XSS6
- CWE-119Memory Buffer Bounds5
- CWE-94Code Injection4
- CWE-22Path Traversal3
- CWE-2643
- CWE-89SQL Injection3
- CWE-2032
- CWE-592
- CWE-1291
- CWE-131Incorrect Buffer Size1
- CWE-134Format String1
- CWE-161
- CWE-1781
- CWE-1911
- CWE-2121
- CWE-326Inadequate Encryption1
- CWE-352CSRF1
- CWE-400Resource Consumption1
- CWE-4271
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins17522% of sector-tagged CVEs
- Operating Systems14818% of sector-tagged CVEs
- Consumer Software9111% of sector-tagged CVEs
- Enterprise Software769% of sector-tagged CVEs
- Networking Infrastructure688% of sector-tagged CVEs
- Communications648% of sector-tagged CVEs
- 9 smaller sectors112
- Not yet classified79
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 20Improper Input Validation | 79XSS | 119Memory Buffer Bounds | 94Code Injection | 22Path Traversal | 264 | 89SQL Injection | 203 | 59 | 129 |
|---|---|---|---|---|---|---|---|---|---|---|
| Sun | 2 | |||||||||
| Mozilla | 1 | |||||||||
| Microsoft | 1 | |||||||||
| Cisco | ||||||||||
| Red Hat | ||||||||||
| Сообщество Свободного Программного Обеспечения | 2 | 2 | 1 | |||||||
| IBM | ||||||||||
| Linux | 1 | 2 | ||||||||
| Gentoo Foundation Inc. | ||||||||||
| Opera | ||||||||||
| Icewarp | ||||||||||
| Merak |