September 2007

453 CVEs published, −15% on August 2007 and −19% on September 2006. CISA added 0 to KEV.

2007, month by month. Point at another month to read it.

2007: CVEs published per month
Year	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec	Year total
2007	January 2007: 730 CVEs	February 2007: 633 CVEs	March 2007: 640 CVEs	April 2007: 632 CVEs	May 2007: 575 CVEs	June 2007: 583 CVEs	July 2007: 594 CVEs	August 2007: 533 CVEs	September 2007: 453 CVEs	October 2007: 984 CVEs	November 2007: 486 CVEs	December 2007: 449 CVEs	7,292+5%

Critical: 5913% of the 448 with a CVSS score
Added to CISA KEV: 01 of this month's CVEs are in KEV, listed a median 5323 days after publication
Vendors: 275359 products
Top weakness: Memory Buffer BoundsCWE-119 · 76 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

How this month's CVEs score on CVSS; 5 have no score yet. Severity is not exploitation.

Not in the top 100 in any of the 24 months before.

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

The top weakness classes against the vendors and the sectors that carried them.

The lighter the cell, the more CVEs. Point at one to read it.

September 2007: weakness classes by vendor and by sector: By vendor
By vendor	119Memory Buffer Bounds	20Improper Input Validation	94Code Injection	79XSS	264	89SQL Injection	22Path Traversal	189	200Information Exposure	399
PHP	3	6	1		1		2	2		2
Apple	2	4	1	3					1
IBM	8				3				1
Сообщество Свободного Программного Обеспечения	4	2			4			2		2
Microsoft	4	1			1		1	1	1	1
Canonical	3	1			2			1		1
Joomla		2	4	2		2
Sun	2	1					1
Cisco					2					1
Linux		1			3					1
VMware	2				2			1		1
Debian	2	2			2			1