April 2005
518 CVEs published, +2% on March 2005 and 8.5× April 2004. CISA added 0 to KEV.
2005 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2005 | January 2005: 175 CVEs | February 2005: 827 CVEs | March 2005: 506 CVEs | April 2005: 518 CVEs | May 2005: 861 CVEs | June 2005: 661 CVEs | July 2005: 593 CVEs | August 2005: 584 CVEs | September 2005: 316 CVEs | October 2005: 353 CVEs | November 2005: 716 CVEs | December 2005: 693 CVEs | 6,803+318% |
- Critical
- 224% of the 506 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 267431 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 3 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftWindows 2000, Windows Xp, Internet Explorer303nonenew
- 2AppleMac OS X, Mac OS X Server, Darwin Streaming Server221nonenew
- 3IBMAix, Iseries As 400, Lotus Domino Server182nonenew
- 4CiscoIOS, Aironet AP340, Catos120nonenew
- 5HordeAccounts, Application Framework, Chora110nonenew
- 6MozillaFirefox, Mozilla111nonenew
- 7Francisco BurziPhp-nuke100nonenew
- 8Phpbb GroupPhpbb, Phpbb-auction, Phpbb Plus100nonenew
- 9Red HatEnterprise Linux, Linux, Red Hat Enterprise Linux92nonenew
- 10SunSunos, Solaris, Java System Web Server90nonenew
- 11GnuGzip, Cpio, Gcc80nonenew
- 12LinuxLinux Kernel80nonenew
- 13Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux80nonenew
- 14HPHp-ux, Openview Network Node Manager, Virtualvault61nonenew
- 15OracleMySQL, Database Server, Forms60nonenew
- 16SgiIrix, Propack62nonenew
- 17SshSsh60nonenew
- 18FreebsdFreebsd51nonenew
- 19NovellLinux Desktop, Groupwise, Netware50nonenew
- 20ScoOpenserver51nonenew
- 21ApacheHTTP Server40nonenew
- 22GentooLinux, Rootkit Hunter40nonenew
- 23IatekPortalapp, Siteenable40nonenew
- 24KerioKerio Mailserver, Personal Firewall, Winroute Firewall40nonenew
- 25MailenableMailenable Enterprise, Mailenable Professional, Imapd41nonenew
Severity
How this month's CVEs score on CVSS; 12 have no score yet. Severity is not exploitation.
- Critical22
- High197
- Medium246
- Low41
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds3
- CWE-3102
- CWE-3462
- CWE-3992
- CWE-94Code Injection2
- CWE-120Buffer Overflow1
- CWE-134Format String1
- CWE-1781
- CWE-190Integer Overflow1
- CWE-200Information Exposure1
- CWE-2641
- CWE-287Improper Authentication1
- CWE-3671
- CWE-415Double Free1
- CWE-502Deserialization1
- CWE-591
- CWE-6651
- CWE-787Out-of-bounds Write1
- CWE-79XSS1
- CWE-89SQL Injection1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins11522% of sector-tagged CVEs
- Operating Systems9618% of sector-tagged CVEs
- Enterprise Software5010% of sector-tagged CVEs
- Networking Infrastructure408% of sector-tagged CVEs
- Communications336% of sector-tagged CVEs
- Consumer Software316% of sector-tagged CVEs
- Security Products255% of sector-tagged CVEs
- Mobile Apps234% of sector-tagged CVEs
- 7 smaller sectors49
- Not yet classified59
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 310 | 346 | 399 | 94Code Injection | 120Buffer Overflow | 134Format String | 178 | 190Integer Overflow | 200Information Exposure |
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | 2 | |||||||||
| Apple | 1 | |||||||||
| IBM | 1 | |||||||||
| Cisco | 1 | |||||||||
| Horde | ||||||||||
| Mozilla | 1 | |||||||||
| Francisco Burzi | ||||||||||
| Phpbb Group | ||||||||||
| Sun | ||||||||||
| Gnu | ||||||||||
| Linux | ||||||||||
| Сообщество Свободного Программного Обеспечения |