April 2007
632 CVEs published, −1% on March 2007 and −1% on April 2006. CISA added 0 to KEV.
2007 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2007 | January 2007: 730 CVEs | February 2007: 633 CVEs | March 2007: 640 CVEs | April 2007: 632 CVEs | May 2007: 575 CVEs | June 2007: 583 CVEs | July 2007: 594 CVEs | August 2007: 533 CVEs | September 2007: 453 CVEs | October 2007: 984 CVEs | November 2007: 486 CVEs | December 2007: 449 CVEs | 7,292+5% |
- Critical
- 11418% of the 631 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 391531 products
- Top weakness
- Code InjectionCWE-94 · 13 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleDatabase Server, Application Server, E-business Suite2916nonenew
- 2MicrosoftWindows Xp, Windows 2000, Windows 2003 Server245nonenew
- 3AppleMac OS X, Mac OS X Server, Quicktime195nonenew
- 4CiscoWireless Lan Controller Software, Wireless Control System, Unified Callmanager153nonenew
- 5PHPPHP140nonenew
- 6XoopsCore Module, Friendfinder Module, Happy Linux Xfsection Module120nonenew
- 7IBMWebsphere Application Server, Lotus Notes, Tivoli Business Service Manager83nonenew
- 8DebianDebian Linux73nonenew
- 9Gentoo Foundation Inc.Gentoo Linux74nonenew
- 10ApacheHTTP Server, Tomcat, Axis60nonenew
- 11CanonicalUbuntu Linux63nonenew
- 12HPHp-ux, Mercury Quality Center, Power Manager Remote Agent62nonenew
- 13Red HatEnterprise Linux, Red Hat Enterprise Linux, Enterprise Linux Desktop60nonenew
- 14SapRfc Library62nonenew
- 15Web-app.netWebapp60nonenew
- 16AdobeGolive, Illustrator, Photoshop52nonenew
- 17Kaspersky LabKaspersky Anti-virus, Kaspersky Internet Security53nonenew
- 18MozillaFirefox, Mozilla, Seamonkey52nonenew
- 19PhorumPhorum50nonenew
- 20SymantecNorton Save and Recovery, Norton Ghost, Livestate Recovery51nonenew
- 21Web-app.orgWebapp50nonenew
- 22AfflibAfflib42nonenew
- 23MybbMybb, Mybb Hot Editor Plugin40nonenew
- 24NortelVPN Router 5000, Contivity, VPN Router 110043nonenew
- 25Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux40nonenew
Severity
How this month's CVEs score on CVSS; 1 have no score yet. Severity is not exploitation.
- Critical114
- High264
- Medium245
- Low8
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-94Code Injection13
- CWE-119Memory Buffer Bounds11
- CWE-3998
- CWE-89SQL Injection8
- CWE-20Improper Input Validation7
- CWE-287Improper Authentication7
- CWE-79XSS7
- CWE-1896
- CWE-2646
- CWE-200Information Exposure4
- CWE-787Out-of-bounds Write2
- CWE-120Buffer Overflow1
- CWE-134Format String1
- CWE-161
- CWE-1931
- CWE-306Missing Auth for Critical Function1
- CWE-362Race Condition1
- CWE-4011
- CWE-415Double Free1
- CWE-8241
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins17329% of sector-tagged CVEs
- Operating Systems6310% of sector-tagged CVEs
- Enterprise Software447% of sector-tagged CVEs
- Networking Infrastructure447% of sector-tagged CVEs
- Consumer Software407% of sector-tagged CVEs
- OSS Libraries376% of sector-tagged CVEs
- Databases325% of sector-tagged CVEs
- Security Products315% of sector-tagged CVEs
- 6 smaller sectors63
- Not yet classified79
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 94Code Injection | 119Memory Buffer Bounds | 399 | 89SQL Injection | 20Improper Input Validation | 287Improper Authentication | 79XSS | 189 | 264 | 200Information Exposure |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | 1 | 2 | 1 | |||||||
| Microsoft | 2 | 2 | 1 | 2 | ||||||
| Apple | 2 | 1 | 1 | |||||||
| Cisco | 2 | |||||||||
| PHP | 1 | |||||||||
| Xoops | 2 | |||||||||
| IBM | 1 | |||||||||
| Debian | 1 | 1 | ||||||||
| Gentoo Foundation Inc. | 1 | |||||||||
| Apache | 1 | 1 | ||||||||
| Canonical | 1 | 1 | ||||||||
| HP | 2 |