February 2006
530 CVEs published, +3% on January 2006 and −36% on February 2005. CISA added 0 to KEV.
2006 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2006 | January 2006: 514 CVEs | February 2006: 530 CVEs | March 2006: 590 CVEs | April 2006: 636 CVEs | May 2006: 627 CVEs | June 2006: 651 CVEs | July 2006: 533 CVEs | August 2006: 558 CVEs | September 2006: 562 CVEs | October 2006: 554 CVEs | November 2006: 514 CVEs | December 2006: 676 CVEs | 6,945+2% |
- Critical
- 194% of the 524 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 291434 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 12 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftWindows Xp, Windows 2003 Server, Internet Explorer202nonenew
- 2MozillaFirefox, Thunderbird, Seamonkey171nonenew
- 3Hinton DesignPhphg Guestbook, Phphd, Phpht Topsites120nonenew
- 4SunSolaris, Jre, Jdk120nonenew
- 5IBMAix, Lotus Domino Inotes Client, Lotus Notes102nonenew
- 6OracleDatabase Server, Oracle10g, Application Server80nonenew
- 7QnxRtos, Neutrino Rtos70nonenew
- 8Red HatFedora Core, Enterprise Linux, Enterprise Linux Desktop70nonenew
- 9Francisco BurziPhp-nuke, Php-nuke Ev60nonenew
- 10MybulletinboardMybulletinboard60nonenew
- 11NoccNocc50nonenew
- 12PhpoutsourcingNoahs Classifieds50nonenew
- 13PunbbPunbb50nonenew
- 14SpipSpip50nonenew
- 15Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux50nonenew
- 16CpanelCpanel40nonenew
- 17ImagevueImagevue40nonenew
- 18Leif M. WrightWeb Blog40nonenew
- 19LinuxLinux Kernel40nonenew
- 20MantisMantis41nonenew
- 21PearPear Archive Tar, Pear Archive Zip, Pear Liveuser40nonenew
- 22Reamday EnterprisesMagic News Lite, Magic Calendar Lite, Magic Downloads40nonenew
- 23Stefan RittElog Web Logbook40nonenew
- 24Virtual Hosting Control SystemVirtual Hosting Control System42nonenew
- 25XeroxWorkcentre 232, Workcentre 238, Workcentre 24540nonenew
Severity
How this month's CVEs score on CVSS; 6 have no score yet. Severity is not exploitation.
- Critical19
- High157
- Medium301
- Low47
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds12
- CWE-79XSS12
- CWE-2649
- CWE-89SQL Injection8
- CWE-94Code Injection6
- CWE-22Path Traversal5
- CWE-20Improper Input Validation3
- CWE-3993
- CWE-134Format String2
- CWE-200Information Exposure2
- CWE-161
- CWE-287Improper Authentication1
- CWE-3101
- CWE-362Race Condition1
- CWE-862Missing Authorization1
- CWE-881
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins16432% of sector-tagged CVEs
- Operating Systems6914% of sector-tagged CVEs
- Enterprise Software6212% of sector-tagged CVEs
- Consumer Software418% of sector-tagged CVEs
- Communications398% of sector-tagged CVEs
- Security Products214% of sector-tagged CVEs
- 7 smaller sectors58
- Not yet classified54
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 79XSS | 264 | 89SQL Injection | 94Code Injection | 22Path Traversal | 20Improper Input Validation | 399 | 134Format String | 200Information Exposure |
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | 3 | 2 | ||||||||
| Mozilla | 3 | |||||||||
| Hinton Design | 1 | 1 | ||||||||
| Sun | ||||||||||
| IBM | 1 | 1 | 1 | |||||||
| Oracle | 1 | |||||||||
| Qnx | 1 | 1 | ||||||||
| Red Hat | 1 | |||||||||
| Francisco Burzi | ||||||||||
| Mybulletinboard | ||||||||||
| Nocc | ||||||||||
| Phpoutsourcing |