October 2007
984 CVEs published, 2.2× September 2007 and +78% on October 2006. CISA added 0 to KEV.
2007 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2007 | January 2007: 730 CVEs | February 2007: 633 CVEs | March 2007: 640 CVEs | April 2007: 632 CVEs | May 2007: 575 CVEs | June 2007: 583 CVEs | July 2007: 594 CVEs | August 2007: 533 CVEs | September 2007: 453 CVEs | October 2007: 984 CVEs | November 2007: 486 CVEs | December 2007: 449 CVEs | 7,292+5% |
- Critical
- 12913% of the 971 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 570821 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 150 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleDatabase Server, Application Server, Collaboration Suite376nonenew
- 2MicrosoftInternet Explorer, Windows Xp, Windows 2000303nonenew
- 3SunJre, Jdk, Solaris303nonenew
- 4HPHp-ux, Openvms, Openview Network Node Manager254nonenew
- 5CiscoIOS, Firewall Services Module, Adaptive Security Appliance Software226nonenew
- 6IBMDB2 Universal Database, Lotus Domino, DB2226nonenew
- 7BroadcomBrightstor Arcserve Backup, Brightstor Enterprise Backup, Brightstor Arcserve Backup Laptops Desktops2114nonenew
- 8Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux172nonenew
- 9MozillaFirefox, Seamonkey, Mozilla151nonenew
- 10JoomlaJoomla, Com Search Component, Joomla\!100nonenew
- 11OperaOpera Browser93nonenew
- 12DrupalDrupal, Asin Field Module, Drupal Project Issue Tracking80nonenew
- 13SymantecNorton Personal Firewall, Norton Antivirus, Mail Security 8820 Appliance83nonenew
- 14CaProtection Suites, Brightstor Arcserve Backup, Business Protection Suite77nonenew
- 15PhrozensmokeGyach Enhanced70nonenew
- 16RealnetworksRealone Player, Realplayer, Realplayer Enterprise77nonenew
- 17AppleDarwin Streaming Server, Quicktime Streaming Server, Tcp Ip Configuration Utility62nonenew
- 18DebianDebian Linux, Guilt60nonenew
- 19NetscapeCommunicator, Navigator61nonenew
- 20NortelMeridian Option 51c, Meridian Option 11c, Meridian Option 61c60nonenew
- 21PhorumPhorum61nonenew
- 22PhpbbPhpbb, Advanced Quick Reply Hack, Phpbbmod60nonenew
- 23SitebarSitebar61nonenew
- 24Gentoo Foundation Inc.Gentoo Linux51nonenew
- 25MamboMambo, Mambo Site Server, Site Server51nonenew
Severity
How this month's CVEs score on CVSS; 13 have no score yet. Severity is not exploitation.
- Critical129
- High238
- Medium553
- Low51
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds150
- CWE-79XSS132
- CWE-94Code Injection97
- CWE-26479
- CWE-20Improper Input Validation76
- CWE-22Path Traversal54
- CWE-89SQL Injection51
- CWE-200Information Exposure49
- CWE-1628
- CWE-18925
- CWE-287Improper Authentication21
- CWE-25520
- CWE-31020
- CWE-39920
- CWE-134Format String12
- CWE-5911
- CWE-352CSRF8
- CWE-362Race Condition6
- CWE-78OS Command Injection4
- CWE-120Buffer Overflow2
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins21122% of sector-tagged CVEs
- Operating Systems11712% of sector-tagged CVEs
- Enterprise Software10211% of sector-tagged CVEs
- Consumer Software819% of sector-tagged CVEs
- Networking Infrastructure677% of sector-tagged CVEs
- Communications515% of sector-tagged CVEs
- Databases505% of sector-tagged CVEs
- Security Products485% of sector-tagged CVEs
- OSS Libraries384% of sector-tagged CVEs
- Cloud & SaaS354% of sector-tagged CVEs
- Not yet classified117
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 79XSS | 94Code Injection | 264 | 20Improper Input Validation | 22Path Traversal | 89SQL Injection | 200Information Exposure | 16 | 189 |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | 1 | 1 | 1 | 2 | 2 | |||||
| Microsoft | 5 | 1 | 3 | 7 | 2 | 2 | ||||
| Sun | 1 | 1 | 6 | 2 | 2 | 1 | ||||
| HP | 8 | 1 | 6 | 1 | 1 | 2 | ||||
| Cisco | 3 | 1 | 3 | 4 | 3 | 1 | ||||
| IBM | 11 | 1 | 1 | 1 | ||||||
| Broadcom | 7 | 1 | 1 | 2 | 1 | 1 | 1 | 1 | 1 | |
| Сообщество Свободного Программного Обеспечения | 3 | 1 | 2 | 1 | 2 | 3 | ||||
| Mozilla | 5 | 1 | 5 | 2 | 2 | |||||
| Joomla | 2 | 8 | ||||||||
| Opera | 1 | 1 | 2 | |||||||
| Drupal | 3 | 1 | 1 | 1 |