January 2007
730 CVEs published, +8% on December 2006 and +42% on January 2006. CISA added 0 to KEV.
2007 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2007 | January 2007: 730 CVEs | February 2007: 633 CVEs | March 2007: 640 CVEs | April 2007: 632 CVEs | May 2007: 575 CVEs | June 2007: 583 CVEs | July 2007: 594 CVEs | August 2007: 533 CVEs | September 2007: 453 CVEs | October 2007: 984 CVEs | November 2007: 486 CVEs | December 2007: 449 CVEs | 7,292+5% |
- Critical
- 8512% of the 725 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 464684 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 21 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleApplication Server, Database Server, Collaboration Suite330nonenew
- 2AppleMac OS X, Quicktime, Ichat284nonenew
- 3MicrosoftOffice, Works, Excel2416nonenew
- 4BeaWeblogic Server, Aqualogic Service Bus, Jrockit201nonenew
- 5CiscoNetwork Admission Control Manager and Server System Software, Secure Access Control Server, IOS Transmission Control Protocol133nonenew
- 6SunSolaris, Sunos, Java System Access Manager121nonenew
- 7BroadcomBrightstor Enterprise Backup, Brightstor Arcserve Backup, Widcomm Bluetooth106nonenew
- 8JoomlaJoomla, Rs Gallery2, Be It Easypartner Component90nonenew
- 9AdobeAcrobat Reader, Acrobat, Acrobat 3d81nonenew
- 10Gentoo Foundation Inc.Gentoo Linux84nonenew
- 11HPHp-ux, Openview Network Node Manager, HTTP Server81nonenew
- 12The Address BookThe Address Book80nonenew
- 13WordPressWordPress80nonenew
- 14DrupalDrupal, Project, Project Issue Tracking Module70nonenew
- 15PhpmyadminPhpmyadmin71nonenew
- 16EndonesiaEndonesia60nonenew
- 17IBMAix, OS 40061nonenew
- 18LinuxLinux Kernel61nonenew
- 19Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux60nonenew
- 20Aztek ForumAztek Forum50nonenew
- 21ArgosoftFtp Server41nonenew
- 22BitweaverBitweaver40nonenew
- 23CmsmadesimpleCMS Made Simple40nonenew
- 24Easebay ResourcesLogin Manager, Paypal Subscription Manager40nonenew
- 25F5Firepass, Firepass 410040nonenew
Severity
How this month's CVEs score on CVSS; 5 have no score yet. Severity is not exploitation.
- Critical85
- High288
- Medium329
- Low23
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds21
- CWE-20Improper Input Validation16
- CWE-79XSS11
- CWE-94Code Injection10
- CWE-89SQL Injection9
- CWE-3996
- CWE-200Information Exposure5
- CWE-134Format String3
- CWE-1892
- CWE-2642
- CWE-120Buffer Overflow1
- CWE-161
- CWE-191
- CWE-22Path Traversal1
- CWE-2551
- CWE-287Improper Authentication1
- CWE-3101
- CWE-352CSRF1
- CWE-362Race Condition1
- CWE-400Resource Consumption1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins21832% of sector-tagged CVEs
- Operating Systems7811% of sector-tagged CVEs
- Enterprise Software609% of sector-tagged CVEs
- Databases416% of sector-tagged CVEs
- Networking Infrastructure396% of sector-tagged CVEs
- Consumer Software375% of sector-tagged CVEs
- Mobile Apps325% of sector-tagged CVEs
- Security Products294% of sector-tagged CVEs
- 6 smaller sectors59
- Not yet classified95
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 20Improper Input Validation | 79XSS | 94Code Injection | 89SQL Injection | 399 | 200Information Exposure | 134Format String | 189 | 264 |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | 2 | 1 | ||||||||
| Apple | 3 | 2 | 1 | 3 | 1 | 1 | ||||
| Microsoft | 1 | 2 | 1 | |||||||
| Bea | ||||||||||
| Cisco | 1 | |||||||||
| Sun | 1 | 1 | ||||||||
| Broadcom | 2 | |||||||||
| Joomla | 1 | 1 | ||||||||
| Adobe | 1 | 1 | 1 | 1 | ||||||
| Gentoo Foundation Inc. | 1 | |||||||||
| HP | ||||||||||
| The Address Book |