June 2006
651 CVEs published, +4% on May 2006 and −2% on June 2005. CISA added 0 to KEV.
2006 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2006 | January 2006: 514 CVEs | February 2006: 530 CVEs | March 2006: 590 CVEs | April 2006: 636 CVEs | May 2006: 627 CVEs | June 2006: 651 CVEs | July 2006: 533 CVEs | August 2006: 558 CVEs | September 2006: 562 CVEs | October 2006: 554 CVEs | November 2006: 514 CVEs | December 2006: 676 CVEs | 6,945+2% |
- Critical
- 234% of the 646 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 391480 products
- Top weakness
- XSSCWE-79 · 17 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftInternet Explorer, Windows Xp, Windows 2000298nonenew
- 2MozillaFirefox, Thunderbird, Seamonkey163nonenew
- 3CiscoWireless Control System, Secure Access Control Server, Call Manager111nonenew
- 4Particle SoftParticle Links, Particle Wiki, Particle Whois80nonenew
- 5SunStaroffice, One Application Server, One Messaging Server80nonenew
- 6PHPPHP71nonenew
- 7WoltlabBurning Board70nonenew
- 8AppleMac OS X, Mac OS X Server, Itunes60nonenew
- 9Gentoo Foundation Inc.Gentoo Linux60nonenew
- 10IBMDB2 Universal Database, Websphere Application Server, Aix61nonenew
- 11LinuxLinux Kernel60nonenew
- 12SpiffyjrPhpraid60nonenew
- 13ThinkfactoryUltimate Estate, Ultimate Eshop, Thinkwms60nonenew
- 14Ultimate PHP BoardUltimate PHP Board61nonenew
- 15VbzoomVbzoom60nonenew
- 16DeltascriptsPHP Classifieds, PHP Manualmaker, PHP Pro Publish50nonenew
- 17DrupalDrupal50nonenew
- 18Epic DesignsTinybb, Eggblog50nonenew
- 19Novell Inc.Opensuse50nonenew
- 20BitweaverBitweaver40nonenew
- 21CescriptsCar Classifieds, Event Registration 2checkout, Event Registration Corporate40nonenew
- 22ComscriptsCs-forum40nonenew
- 23DeluxebbDeluxebb40nonenew
- 24KayakoLiveresponse40nonenew
- 25MySQLEventum, MySQL40nonenew
Severity
How this month's CVEs score on CVSS; 5 have no score yet. Severity is not exploitation.
- Critical23
- High206
- Medium349
- Low68
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS17
- CWE-119Memory Buffer Bounds16
- CWE-94Code Injection14
- CWE-89SQL Injection8
- CWE-2647
- CWE-3996
- CWE-20Improper Input Validation5
- CWE-1894
- CWE-200Information Exposure3
- CWE-134Format String1
- CWE-161
- CWE-190Integer Overflow1
- CWE-22Path Traversal1
- CWE-2551
- CWE-2731
- CWE-287Improper Authentication1
- CWE-6671
- CWE-881
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 119Memory Buffer Bounds | 94Code Injection | 89SQL Injection | 264 | 399 | 20Improper Input Validation | 189 | 200Information Exposure | 134Format String |
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | 1 | 4 | 2 | 1 | 2 | 1 | 2 | |||
| Mozilla | 1 | 2 | 2 | 2 | 2 | |||||
| Cisco | ||||||||||
| Particle Soft | ||||||||||
| Sun | 1 | 1 | 1 | |||||||
| PHP | 1 | |||||||||
| Woltlab | ||||||||||
| Apple | 1 | 1 | 1 | 1 | ||||||
| Gentoo Foundation Inc. | 1 | |||||||||
| IBM | 1 | |||||||||
| Linux | 1 | |||||||||
| Spiffyjr | 1 |