November 2007
486 CVEs published, −51% on October 2007 and −5% on November 2006. CISA added 0 to KEV.
2007 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2007 | January 2007: 730 CVEs | February 2007: 633 CVEs | March 2007: 640 CVEs | April 2007: 632 CVEs | May 2007: 575 CVEs | June 2007: 583 CVEs | July 2007: 594 CVEs | August 2007: 533 CVEs | September 2007: 453 CVEs | October 2007: 984 CVEs | November 2007: 486 CVEs | December 2007: 449 CVEs | 7,292+5% |
- Critical
- 7616% of the 478 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 285381 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 65 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1AppleMac OS X, Mac OS X Server, Quicktime4215nonenew
- 2IBMDB2 Universal Database, Aix, Websphere Application Server288nonenew
- 3Novell Inc.Suse Linux Enterprise, Opensuse121nonenew
- 4Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux121nonenew
- 5PcrePcre, Perl-compatible Regular Expression Library110nonenew
- 6Red HatEnterprise Linux, Red Hat Enterprise Linux, Conga112nonenew
- 7WiresharkWireshark113nonenew
- 8MicrosoftWindows Xp, Windows Vista, Windows 200096nonenew
- 9SymantecBackupexec System Recovery, Mail Security, Web Security93nonenew
- 10IngateIngate Firewall, Ingate Siparator83nonenew
- 11CitrixNetscaler, Access Gateway, Metaframe Presentation Server50nonenew
- 12HitachiCosminexus Application Server Enterprise, Cosminexus Application Server Standard, Cosminexus Developer Light Version 650nonenew
- 13LinuxLinux Kernel50nonenew
- 14SunJavamail, Net Connect Software, Solaris51nonenew
- 15Ethereal GroupEthereal40nonenew
- 16Flatnuke3Flatnuke340nonenew
- 17MozillaFirefox, Seamonkey41nonenew
- 18Openbase International LtdOpenbase42nonenew
- 19PHPPHP40nonenew
- 20SoftbizscriptsAd Management Plus Script, Banner Exchange Network Script, Link Directory Script40nonenew
- 21TugTexlive 200740nonenew
- 22AcdseePhoto Editor, Photo Manager, Pro Photo Manager32nonenew
- 23AutonomyKeyview Export Sdk, Keyview Filter Sdk, Keyview Viewer Sdk33nonenew
- 24BosdevBosnews, Bosmarket Business Directory System30nonenew
- 25Bti-trackerBti-tracker30nonenew
Severity
How this month's CVEs score on CVSS; 8 have no score yet. Severity is not exploitation.
- Critical76
- High144
- Medium237
- Low21
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds65
- CWE-79XSS65
- CWE-89SQL Injection52
- CWE-26440
- CWE-20Improper Input Validation37
- CWE-22Path Traversal35
- CWE-94Code Injection33
- CWE-200Information Exposure17
- CWE-287Improper Authentication15
- CWE-39915
- CWE-18913
- CWE-352CSRF8
- CWE-597
- CWE-165
- CWE-2555
- CWE-134Format String4
- CWE-362Race Condition4
- CWE-3103
- CWE-1291
- CWE-312Cleartext Storage1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins8417% of sector-tagged CVEs
- Operating Systems6614% of sector-tagged CVEs
- Enterprise Software5511% of sector-tagged CVEs
- Mobile Apps439% of sector-tagged CVEs
- Security Products347% of sector-tagged CVEs
- OSS Libraries306% of sector-tagged CVEs
- Communications276% of sector-tagged CVEs
- Consumer Software265% of sector-tagged CVEs
- Networking Infrastructure255% of sector-tagged CVEs
- Not yet classified67
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 79XSS | 89SQL Injection | 264 | 20Improper Input Validation | 22Path Traversal | 94Code Injection | 200Information Exposure | 287Improper Authentication | 399 |
|---|---|---|---|---|---|---|---|---|---|---|
| Apple | 9 | 1 | 8 | 2 | 1 | 1 | 3 | 2 | ||
| IBM | 6 | 4 | 6 | 1 | 3 | |||||
| Сообщество Свободного Программного Обеспечения | 4 | 1 | 2 | 1 | ||||||
| Pcre | 4 | |||||||||
| Wireshark | 4 | 1 | ||||||||
| Microsoft | 4 | 1 | 1 | |||||||
| Red Hat | 2 | 1 | 1 | 1 | ||||||
| Symantec | 2 | 2 | 1 | 1 | 1 | |||||
| Ingate | 1 | 2 | 1 | |||||||
| Novell Inc. | 3 | 1 | ||||||||
| Red Hat Inc. | 5 | |||||||||
| Citrix | 1 | 2 |