December 2005
693 CVEs published, −3% on November 2005 and 2.8× December 2004. CISA added 0 to KEV.
2005 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2005 | January 2005: 175 CVEs | February 2005: 827 CVEs | March 2005: 506 CVEs | April 2005: 518 CVEs | May 2005: 861 CVEs | June 2005: 661 CVEs | July 2005: 593 CVEs | August 2005: 584 CVEs | September 2005: 316 CVEs | October 2005: 353 CVEs | November 2005: 716 CVEs | December 2005: 693 CVEs | 6,803+318% |
- Critical
- 223% of the 681 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 422631 products
- Top weakness
- SQL InjectionCWE-89 · 25 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftIe, Windows 2003 Server, Internet Explorer120nonenew
- 2AppleMac OS X Server, Mac OS X, Itunes90nonenew
- 3Gentoo Foundation Inc.Gentoo Linux90nonenew
- 4Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux80nonenew
- 5Efiction ProjectEfiction70nonenew
- 6MacromediaColdfusion, Jrun, Flash Media Server70nonenew
- 7PhpmyadminPhpmyadmin70nonenew
- 8HitachiBusiness Logic, Cosminexus Collaboration Portal, Groupmax Collaboration Portal60nonenew
- 9Lyris Technologies IncListmanager60nonenew
- 10SunJava Communications Services Delegated Administrator, Java System Application Server, Netra 128060nonenew
- 11BlackboardAcademic Suite51nonenew
- 12HordeHorde Application Framework, Imp, Kronolith H350nonenew
- 13IBMAix, Websphere Application Server51nonenew
- 14MantisMantis50nonenew
- 15CfmagicMagic Forum Personal, Magic List Pro, Magic Book Professional40nonenew
- 16CiscoIOS, Catalyst 2948-ge-tx, Catalyst 2948g-l341nonenew
- 17Coinsoft TechnologiesPhpcoin40nonenew
- 18DeerfieldVisnetic Mail Server40nonenew
- 19Fad SolutionsDrzes Hms40nonenew
- 20HPHp-ux, Systems Insight Manager41nonenew
- 21IatekIntranetapp, Portalapp, Projectapp40nonenew
- 22IcewarpWeb Mail40nonenew
- 23MailenableMailenable Enterprise, Mailenable Professional40nonenew
- 24MerakMail Server40nonenew
- 25Phpbb GroupPhpbb40nonenew
Severity
How this month's CVEs score on CVSS; 12 have no score yet. Severity is not exploitation.
- Critical22
- High288
- Medium348
- Low23
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins22138% of sector-tagged CVEs
- Enterprise Software5710% of sector-tagged CVEs
- Operating Systems458% of sector-tagged CVEs
- Communications397% of sector-tagged CVEs
- Networking Infrastructure295% of sector-tagged CVEs
- Consumer Software264% of sector-tagged CVEs
- Security Products244% of sector-tagged CVEs
- OSS Libraries214% of sector-tagged CVEs
- Not yet classified87
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 89SQL Injection | 119Memory Buffer Bounds | 79XSS | 264 | 20Improper Input Validation | 200Information Exposure | 189 | 287Improper Authentication | 399 | 94Code Injection |
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | 1 | 1 | ||||||||
| Apple | 1 | 1 | ||||||||
| Gentoo Foundation Inc. | 2 | 1 | ||||||||
| Сообщество Свободного Программного Обеспечения | 3 | |||||||||
| Efiction Project | ||||||||||
| Macromedia | ||||||||||
| Phpmyadmin | 1 | |||||||||
| Hitachi | ||||||||||
| Lyris Technologies Inc | ||||||||||
| Sun | ||||||||||
| Blackboard | ||||||||||
| Horde | 1 |