CVE Tools
Track your stack

November 2005

716 CVEs published, 2.0× October 2005 and 13.5× November 2004. CISA added 0 to KEV.

2005 month by month

2005, month by month. Point at another month to read it.
2005: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2005January 2005: 175 CVEsFebruary 2005: 827 CVEsMarch 2005: 506 CVEsApril 2005: 518 CVEsMay 2005: 861 CVEsJune 2005: 661 CVEsJuly 2005: 593 CVEsAugust 2005: 584 CVEsSeptember 2005: 316 CVEsOctober 2005: 353 CVEsNovember 2005: 716 CVEsDecember 2005: 693 CVEs6,803+318%
Critical
578% of the 702 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
374577 products
Top weakness
SQL InjectionCWE-89 · 13 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1OracleApplication Server, Database Server, Peoplesoft Enterprise2523nonenew
  2. 2Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux191nonenew
  3. 3LinuxLinux Kernel150nonenew
  4. 4CiscoPix Firewall Software, IOS, Adaptive Security Appliance Software121nonenew
  5. 5MicrosoftWindows Xp, Windows 2000, Windows 2003 Server121nonenew
  6. 6SunJre, Jdk, Solaris120nonenew
  7. 7AppleMac OS X Server, Mac OS X, Quicktime110nonenew
  8. 8IBMAix, DB2 Content Manager, Websphere Application Server110nonenew
  9. 9Phpbb GroupPhpbb91nonenew
  10. 10GoogleMini Search Appliance, Search Appliance, Talk80nonenew
  11. 11PHPPHP, Phpsquidpass80nonenew
  12. 12ExponentExponent71nonenew
  13. 13NovellIchain, Zenworks Servers, Client Firewall70nonenew
  14. 14PhpgroupwarePhpgroupware70nonenew
  15. 15VtigerVtiger Crm70nonenew
  16. 16AlstrasoftAffiliate Network Pro, Template Seller60nonenew
  17. 17HPHp-ux, TRU64, Advanced Server 900060nonenew
  18. 18Id SoftwareQuake Ii Server, Quake Ii Server Linux, Quake Ii Server Windows60nonenew
  19. 19SambarSambar Server60nonenew
  20. 20Gadu-gaduGadu-gadu Instant Messenger50nonenew
  21. 21GnuGnump3d, Mailman50nonenew
  22. 22HitachiIP5000 Voip Wifi Phone50nonenew
  23. 23Invision Power ServicesInvision Board, Invision Gallery50nonenew
  24. 24MacromediaFlash Player, Jrun, Flash Communication Server50nonenew
  25. 25Novell Inc.Suse Linux Enterprise, Opensuse50nonenew

Severity

How this month's CVEs score on CVSS; 14 have no score yet. Severity is not exploitation.

  • Critical578%
  • High26337%
  • Medium34349%
  • Low396%

Breakouts

Vendors with at least three times their own 12-month median.

  1. Sun1212.0×
  2. Phpbb Group99.0×
  3. HP66.0×
  4. Macromedia55.0×
  5. IBM114.4×
  6. Realnetworks44.0×
  7. Cisco124.0×
  8. Oracle253.1×
  9. Apache33.0×
  10. Gnome33.0×

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Google8#10
  2. Exponent7#12
  3. Vtiger7#15
  4. Alstrasoft6#16
  5. Id Software6#18
  6. Sambar6#19
  7. Smartertools5#26
  8. Cerulean Studios4#28
  9. Chipmunk Scripts4#29
  10. Revize CMS4#33

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-89SQL Injection13new
  2. CWE-119Memory Buffer Bounds12new
  3. CWE-94Code Injection10new
  4. CWE-3998new
  5. CWE-79XSS8new
  6. CWE-200Information Exposure7new
  7. CWE-20Improper Input Validation5new
  8. CWE-22Path Traversal5new
  9. CWE-2644new
  10. CWE-1892new
  11. CWE-74Injection2new
  12. CWE-798Hard-coded Credentials2new
  13. CWE-190Integer Overflow1new
  14. CWE-352CSRF1new
  15. CWE-522Insufficiently Protected Credentials1new
  16. CWE-591new
  17. CWE-6671new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store