August 2007
533 CVEs published, −10% on July 2007 and −4% on August 2006. CISA added 0 to KEV.
2007 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2007 | January 2007: 730 CVEs | February 2007: 633 CVEs | March 2007: 640 CVEs | April 2007: 632 CVEs | May 2007: 575 CVEs | June 2007: 583 CVEs | July 2007: 594 CVEs | August 2007: 533 CVEs | September 2007: 453 CVEs | October 2007: 984 CVEs | November 2007: 486 CVEs | December 2007: 449 CVEs | 7,292+5% |
- Critical
- 5811% of the 529 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 297449 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 29 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftInternet Explorer, Windows Vista, Windows Media Player2310nonenew
- 2IBMDB2 Universal Database, Aix, Surepos 500200nonenew
- 3AppleSafari, Ichat, Webcore160nonenew
- 4CiscoIOS, Unified Communications Manager, VPN Client164nonenew
- 5JoomlaJoomla, Joomla\!, Eventlist131nonenew
- 6SunSolaris, Sunos, Java System Web Server91nonenew
- 7WordPressWordPress, Pool, Sirius90nonenew
- 8Universal IrcdIrcu80nonenew
- 9HitachiUcosminexus Service Platform, Ucosminexus Application Server Enterprise, Ucosminexus Application Server Standard70nonenew
- 10ToribashToribash70nonenew
- 11ApacheTomcat, Geronimo, HTTP Server61nonenew
- 12BeaWeblogic Server60nonenew
- 13Mapos ScriptsBilder Galerie, Bilder Uploader, File Uploader60nonenew
- 14MozillaBugzilla, Firefox, Seamonkey61nonenew
- 15PHPPHP60nonenew
- 16Brian CarrierThe Slueth Kit50nonenew
- 17HPHp-ux, Dynrootdisk, Address and Routing Parameter Area\(Arpa\) Transport51nonenew
- 18IntersystemsCache Database, Cache51nonenew
- 19NovellSuse Linux, Client Login Extension \(Cle\), Client51nonenew
- 20OlateOlatedownload52nonenew
- 21TibcoRendezvous50nonenew
- 22VisionsoftAudit53nonenew
- 23Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Sysstat50nonenew
- 24Ez Photo SalesEz Photo Sales40nonenew
- 25Gentoo Foundation Inc.Gentoo Linux40nonenew
Severity
How this month's CVEs score on CVSS; 4 have no score yet. Severity is not exploitation.
- Critical58
- High121
- Medium326
- Low24
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds29
- CWE-94Code Injection20
- CWE-26419
- CWE-79XSS19
- CWE-20Improper Input Validation15
- CWE-89SQL Injection15
- CWE-22Path Traversal12
- CWE-287Improper Authentication6
- CWE-1895
- CWE-3995
- CWE-2554
- CWE-593
- CWE-134Format String2
- CWE-162
- CWE-200Information Exposure2
- CWE-3102
- CWE-327Broken Crypto Algorithm2
- CWE-352CSRF2
- CWE-787Out-of-bounds Write2
- CWE-125Out-of-bounds Read1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins11322% of sector-tagged CVEs
- Operating Systems6312% of sector-tagged CVEs
- Enterprise Software5511% of sector-tagged CVEs
- Security Products449% of sector-tagged CVEs
- Consumer Software377% of sector-tagged CVEs
- Communications367% of sector-tagged CVEs
- Networking Infrastructure347% of sector-tagged CVEs
- OSS Libraries245% of sector-tagged CVEs
- Mobile Apps194% of sector-tagged CVEs
- Not yet classified65
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 94Code Injection | 264 | 79XSS | 20Improper Input Validation | 89SQL Injection | 22Path Traversal | 287Improper Authentication | 189 | 399 |
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | 4 | 1 | 1 | 1 | 2 | |||||
| IBM | 2 | 1 | 1 | |||||||
| Apple | 2 | 1 | ||||||||
| Cisco | 1 | 1 | 2 | 1 | 1 | |||||
| Joomla | 2 | 1 | ||||||||
| Sun | ||||||||||
| WordPress | 1 | |||||||||
| Universal Ircd | ||||||||||
| Hitachi | 2 | |||||||||
| Toribash | 1 | |||||||||
| Apache | 1 | 1 | ||||||||
| Bea | 1 | 2 |