August 2005
584 CVEs published, −2% on July 2005 and 10.1× August 2004. CISA added 0 to KEV.
2005 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2005 | January 2005: 175 CVEs | February 2005: 827 CVEs | March 2005: 506 CVEs | April 2005: 518 CVEs | May 2005: 861 CVEs | June 2005: 661 CVEs | July 2005: 593 CVEs | August 2005: 584 CVEs | September 2005: 316 CVEs | October 2005: 353 CVEs | November 2005: 716 CVEs | December 2005: 693 CVEs | 6,803+318% |
- Critical
- 305% of the 577 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 315518 products
- Top weakness
- Code InjectionCWE-94 · 3 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1AppleMac OS X, Mac OS X Server, Safari271nonenew
- 2MicrosoftWindows Xp, Internet Explorer, Windows 2003 Server242nonenew
- 3Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux190nonenew
- 4LinuxLinux Kernel120nonenew
- 5NovellNetware, Open Enterprise Server, Groupwise111nonenew
- 6BeaWeblogic Server100nonenew
- 7SunSunos, Solstice Backup, Storedge Enterprise Backup Software101nonenew
- 8IBMLotus Domino, Aix, Informix Dynamic Server91nonenew
- 9BroadcomUnicenter Tng, Advantage Data Transport, Adviseit82nonenew
- 10DebianDebian Linux, Apt-cacher80nonenew
- 11Ethereal GroupEthereal80nonenew
- 12OracleMySQL, Database Server, Jre60nonenew
- 13CaUnicenter Management, Unicenter Software Delivery, Unicenter Tng52nonenew
- 14EmcLegato Networker, Navisphere Manager50nonenew
- 15Francisco BurziPhp-nuke50nonenew
- 16GnuGnubiff, Data Display Debugger, Tar51nonenew
- 17MacromediaColdfusion, Coldfusion Fusebox, Contribute50nonenew
- 18ApacheHTTP Server40nonenew
- 19CiscoIps Sensor Software, Network Admission Control Manager and Server System Software, IOS XR40nonenew
- 20Ecw-shopEcw-shop40nonenew
- 21FlatnukeFlatnuke40nonenew
- 22Gallery ProjectGallery40nonenew
- 23Gravity Board X Development TeamGravity Board X40nonenew
- 24HPLaserjet 9500, Laserjet 9500 Mpf, Proliant DL58540nonenew
- 25OpenvpnOpenvpn40nonenew
Severity
How this month's CVEs score on CVSS; 7 have no score yet. Severity is not exploitation.
- Critical30
- High182
- Medium298
- Low67
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-94Code Injection3
- CWE-119Memory Buffer Bounds2
- CWE-3992
- CWE-120Buffer Overflow1
- CWE-131Incorrect Buffer Size1
- CWE-134Format String1
- CWE-1781
- CWE-1931
- CWE-20Improper Input Validation1
- CWE-200Information Exposure1
- CWE-2031
- CWE-2551
- CWE-2641
- CWE-295Improper Certificate Validation1
- CWE-312Cleartext Storage1
- CWE-470Unsafe Reflection1
- CWE-476NULL Pointer Dereference1
- CWE-591
- CWE-6671
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins13925% of sector-tagged CVEs
- Operating Systems9316% of sector-tagged CVEs
- Enterprise Software488% of sector-tagged CVEs
- Networking Infrastructure438% of sector-tagged CVEs
- Communications387% of sector-tagged CVEs
- Security Products387% of sector-tagged CVEs
- Consumer Software336% of sector-tagged CVEs
- Mobile Apps285% of sector-tagged CVEs
- 6 smaller sectors53
- Not yet classified53
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 94Code Injection | 119Memory Buffer Bounds | 399 | 120Buffer Overflow | 131Incorrect Buffer Size | 134Format String | 178 | 193 | 20Improper Input Validation | 200Information Exposure |
|---|---|---|---|---|---|---|---|---|---|---|
| Apple | ||||||||||
| Microsoft | 1 | |||||||||
| Сообщество Свободного Программного Обеспечения | 1 | |||||||||
| Linux | 2 | |||||||||
| Novell | 1 | 1 | ||||||||
| Bea | 1 | |||||||||
| Sun | ||||||||||
| IBM | ||||||||||
| Broadcom | ||||||||||
| Debian | 2 | 1 | ||||||||
| Ethereal Group | ||||||||||
| Oracle |