CVE Tools
Track your stack

October 2005

353 CVEs published, +12% on September 2005 and 4.4× October 2004. CISA added 0 to KEV.

2005 month by month

2005, month by month. Point at another month to read it.
2005: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2005January 2005: 175 CVEsFebruary 2005: 827 CVEsMarch 2005: 506 CVEsApril 2005: 518 CVEsMay 2005: 861 CVEsJune 2005: 661 CVEsJuly 2005: 593 CVEsAugust 2005: 584 CVEsSeptember 2005: 316 CVEsOctober 2005: 353 CVEsNovember 2005: 716 CVEsDecember 2005: 693 CVEs6,803+318%
Critical
165% of the 342 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
196258 products
Top weakness
Memory Buffer BoundsCWE-119 · 6 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1MicrosoftWindows 2000, Windows Xp, Windows 2003 Server231nonenew
  2. 2LinuxLinux Kernel150nonenew
  3. 3Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux111nonenew
  4. 4Ethereal GroupEthereal101nonenew
  5. 5AppleMac OS X, Mac OS X Server, Quicktime90nonenew
  6. 6DebianDebian Linux61nonenew
  7. 7OracleHtml Db, Database Server, Forms60nonenew
  8. 8SuseSuse Linux60nonenew
  9. 9MantisMantis50nonenew
  10. 10SymantecAntivirus Scan Engine, Norton Antivirus, Discovery51nonenew
  11. 11Geeos TeamGattaca Server 200340nonenew
  12. 12GnuCfengine, Gnutls, Gnump3d40nonenew
  13. 13HitachiGroupmax World Wide Web Desktop, Groupmax World Wide Web, Web Page Generator Enterprise40nonenew
  14. 14IBMInformix Dynamic Server, Aix, Informix Extended Parallel Server40nonenew
  15. 15NovellGroupwise, Netmail, Suse Linux40nonenew
  16. 16Php-fusionPHP Fusion40nonenew
  17. 17BroadcomEtrust Antivirus, Etrust Antivirus Iris Engine, Igateway30nonenew
  18. 18Codeworx TechnologiesDcp-portal30nonenew
  19. 19IcewarpWeb Mail30nonenew
  20. 20Kaspersky LabKaspersky Anti-virus, Kaspersky Anti-virus Personal, Kaspersky Anti-virus Personal Pro31nonenew
  21. 21MediawikiMediawiki30nonenew
  22. 22MerakMail Server30nonenew
  23. 23PhpmyadminPhpmyadmin30nonenew
  24. 24Red HatEnterprise Linux Desktop, Enterprise Linux Workstation, Enterprise Linux30nonenew
  25. 25StorebackupStorebackup30nonenew

Severity

How this month's CVEs score on CVSS; 11 have no score yet. Severity is not exploitation.

  • Critical165%
  • High9728%
  • Medium19156%
  • Low3811%

Breakouts

Vendors with at least three times their own 12-month median.

  1. Symantec55.0×

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Mantis5#9
  2. Geeos Team4#11
  3. Php-fusion4#16
  4. Codeworx Technologies3#18
  5. Icewarp3#19
  6. Mediawiki3#21
  7. Merak3#22
  8. Storebackup3#25
  9. Techno Dreams3#26
  10. Versatilebulletinboard3#27

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-119Memory Buffer Bounds6new
  2. CWE-2645new
  3. CWE-20Improper Input Validation3new
  4. CWE-200Information Exposure2new
  5. CWE-3992new
  6. CWE-4012new
  7. CWE-79XSS2new
  8. CWE-89SQL Injection2new
  9. CWE-120Buffer Overflow1new
  10. CWE-131Incorrect Buffer Size1new
  11. CWE-134Format String1new
  12. CWE-1891new
  13. CWE-2551new
  14. CWE-295Improper Certificate Validation1new
  15. CWE-319Cleartext Transmission1new
  16. CWE-362Race Condition1new
  17. CWE-434Unrestricted File Upload1new
  18. CWE-476NULL Pointer Dereference1new
  19. CWE-591new
  20. CWE-770Allocation Without Limits1new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store