CVE Tools
Track your stack

January 2008

502 CVEs published, +12% on December 2007 and −31% on January 2007. CISA added 0 to KEV.

2008 month by month

2008, month by month. Point at another month to read it.
2008: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2008January 2008: 502 CVEsFebruary 2008: 539 CVEsMarch 2008: 522 CVEsApril 2008: 459 CVEsMay 2008: 388 CVEsJune 2008: 438 CVEsJuly 2008: 522 CVEsAugust 2008: 374 CVEsSeptember 2008: 455 CVEsOctober 2008: 543 CVEsNovember 2008: 433 CVEsDecember 2008: 530 CVEs5,705−22%
Critical
7816% of the 498 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
308474 products
Top weakness
SQL InjectionCWE-89 · 93 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1WordPressWordPress, Math Comment Spam Protection Plugin, Permalinks Migration Plugin170none+71
  2. 2MicrosoftWindows 2003 Server, Internet Explorer, Windows Xp159none—
  3. 3Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux155none+6
  4. 4IBMAix, Websphere Application Server, Informix Dynamic Server144none+1
  5. 5JoomlaJoomla, Musepoes Component, Com Fq120none+53
  6. 6OracleDatabase Server, Collaboration Suite, Application Server1211none+5
  7. 7AppleQuicktime, Safari, Mac OS X103none−6
  8. 8DrupalDrupal, Archive Module, Atom Module100none+22
  9. 9ApacheHTTP Server, Tomcat90none+11
  10. 10DebianDebian Linux, Unp, Apt-listchanges92none+19
  11. 11MenaltoGallery, Gallery Publish Xp Module, Gallery Webcam Module96nonenew
  12. 12Gentoo Foundation Inc.Gentoo Linux82none−4
  13. 13MamboMambo, Com Mamml, Com Jokes80none+136
  14. 14SunJava System Identity Manager, Solaris Libxfont, Jre70none−11
  15. 15HfsHTTP File Server61nonenew
  16. 16VideolanVlc, Vlc Media Player61nonenew
  17. 17X.orgXserver, Tog-cup, X Server63nonenew
  18. 18Agares MediaPhpautovideo50none+58
  19. 19CanonicalUbuntu Linux51none+9
  20. 20FengFeng50nonenew
  21. 21PostgresqlPostgresql50nonenew
  22. 22Red HatRed Hat Enterprise Linux, Enterprise Linux Server, Enterprise Linux Desktop51none−15
  23. 23Snitz CommunicationsSnitz Forums 200050nonenew
  24. 24Ооо «русбитех-астра»Astra Linux Common Edition, Astra Linux Special Edition52nonenew
  25. 25CiscoAdaptive Security Appliance Software, Application Velocity System, Pix Firewall Software42none−3

Severity

How this month's CVEs score on CVSS; 4 have no score yet. Severity is not exploitation.

  • Critical7816%
  • High15331%
  • Medium25752%
  • Low102%

Breakouts

Vendors with at least three times their own 12-month median.

  1. WordPress174.3×
  2. Agares Media53.3×
  3. Manageengine33.0×

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Menalto9#11
  2. Hfs6#15
  3. Feng5#20
  4. Snitz Communications5#23
  5. Ооо «русбитех-астра»5#24
  6. Fascript4#27
  7. Layton Technology4#28
  8. Web Wiz4#32
  9. Blog CMS3#35
  10. Instantsoftwares3#37

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-89SQL Injection93+2
  2. CWE-79XSS80—
  3. CWE-119Memory Buffer Bounds57−2
  4. CWE-22Path Traversal47+1
  5. CWE-26436−1
  6. CWE-94Code Injection30+1
  7. CWE-20Improper Input Validation27−1
  8. CWE-39917+2
  9. CWE-287Improper Authentication14+2
  10. CWE-352CSRF12+4
  11. CWE-200Information Exposure10−3
  12. CWE-1897−3
  13. CWE-2553—
  14. CWE-362Race Condition3+3
  15. CWE-593+3
  16. CWE-162−4
  17. CWE-120Buffer Overflow1new
  18. CWE-134Format String1−2
  19. CWE-3101−4
  20. CWE-312Cleartext Storage1new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store