June 2005
661 CVEs published, −23% on May 2005 and 5.5× June 2004. CISA added 0 to KEV.
2005 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2005 | January 2005: 175 CVEs | February 2005: 827 CVEs | March 2005: 506 CVEs | April 2005: 518 CVEs | May 2005: 861 CVEs | June 2005: 661 CVEs | July 2005: 593 CVEs | August 2005: 584 CVEs | September 2005: 316 CVEs | October 2005: 353 CVEs | November 2005: 716 CVEs | December 2005: 693 CVEs | 6,803+318% |
- Critical
- 274% of the 651 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 354536 products
- Top weakness
- Inadequate EncryptionCWE-326 · 7 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftInternet Explorer, Windows 2000, Windows Xp612nonenew
- 2SunSunos, Solaris, J2SE160nonenew
- 3AppleMac OS X Server, Mac OS X, Afp Server140nonenew
- 4HPHp-ux, Radia Client, Virtualvault111nonenew
- 5IBMAix, Websphere Application Server, OS 400103nonenew
- 6SymantecNorton Antivirus, Norton Personal Firewall, Norton Internet Security100nonenew
- 7PHP ArenaPafiledb, Pafaq90nonenew
- 8LinuxLinux Kernel80nonenew
- 9OracleMySQL, Application Server, E-business Suite80nonenew
- 10Red HatRed Hat Enterprise Linux, Sysreport, Linux80nonenew
- 11NovellNetmail, Linux Desktop, Netware70nonenew
- 12FreebsdFreebsd60nonenew
- 13Symantec VeritasBackup Exec, Cluster Server61nonenew
- 14YapigYapig60nonenew
- 15ApacheHTTP Server, Tomcat, Spamassassin50nonenew
- 16Clam Anti-virusClamav50nonenew
- 17DuwareDuamazon Pro, Duclassmate, Duforum50nonenew
- 18FlatnukeFlatnuke50nonenew
- 19Invision Power ServicesInvision Board, Invision Community Blog, Invision Gallery50nonenew
- 20PhprojektPhprojekt50nonenew
- 21UbbcentralUbb.threads50nonenew
- 22Ultimate PHP BoardUltimate PHP Board50nonenew
- 23XeroxDocutech 6115, Docutech 6110, Document Centre 24050nonenew
- 24Asp-nukeAsp-nuke40nonenew
- 25BasilixBasilix Webmail40nonenew
Severity
How this month's CVEs score on CVSS; 10 have no score yet. Severity is not exploitation.
- Critical27
- High204
- Medium350
- Low70
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-326Inadequate Encryption7
- CWE-94Code Injection7
- CWE-79XSS6
- CWE-1934
- CWE-2644
- CWE-312Cleartext Storage4
- CWE-6674
- CWE-20Improper Input Validation3
- CWE-200Information Exposure3
- CWE-276Incorrect Default Permissions3
- CWE-3993
- CWE-4253
- CWE-434Unrestricted File Upload3
- CWE-593
- CWE-22Path Traversal2
- CWE-319Cleartext Transmission2
- CWE-347Improper Crypto Signature2
- CWE-352CSRF2
- CWE-400Resource Consumption2
- CWE-444HTTP Request Smuggling2
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins15726% of sector-tagged CVEs
- Operating Systems11919% of sector-tagged CVEs
- Enterprise Software539% of sector-tagged CVEs
- Communications528% of sector-tagged CVEs
- Networking Infrastructure427% of sector-tagged CVEs
- Security Products396% of sector-tagged CVEs
- Consumer Software234% of sector-tagged CVEs
- 7 smaller sectors62
- Not yet classified66
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 326Inadequate Encryption | 94Code Injection | 79XSS | 193 | 264 | 312Cleartext Storage | 667 | 20Improper Input Validation | 200Information Exposure | 276Incorrect Default Permissions |
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | 1 | 2 | 1 | 2 | 1 | |||||
| Sun | 1 | 2 | ||||||||
| Apple | ||||||||||
| HP | ||||||||||
| IBM | ||||||||||
| Symantec | ||||||||||
| PHP Arena | ||||||||||
| Linux | ||||||||||
| Oracle | ||||||||||
| Novell | ||||||||||
| Freebsd | 1 | |||||||||
| Symantec Veritas |