February 2008
539 CVEs published, +7% on January 2008 and −15% on February 2007. CISA added 0 to KEV.
2008 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2008 | January 2008: 502 CVEs | February 2008: 539 CVEs | March 2008: 522 CVEs | April 2008: 459 CVEs | May 2008: 388 CVEs | June 2008: 438 CVEs | July 2008: 522 CVEs | August 2008: 374 CVEs | September 2008: 455 CVEs | October 2008: 543 CVEs | November 2008: 433 CVEs | December 2008: 530 CVEs | 5,705−22% |
- Critical
- 7915% of the 533 with a CVSS score
- Added to CISA KEV
- 02 of this month's CVEs are in KEV, listed a median 5232.5 days after publication
- Vendors
- 284534 products
- Top weakness
- SQL InjectionCWE-89 · 121 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1JoomlaJoomla, Com Astatspro, Com Downloads390nonenew
- 2MamboMambo, Com Downloads, Com Detail230nonenew
- 3IBMAix, DB2, Websphere Application Server204nonenew
- 4MicrosoftOffice, Works, Internet Explorer1813nonenew
- 5MozillaFirefox, Seamonkey, Thunderbird144nonenew
- 6Bea SystemsWeblogic Portal, Weblogic Server, Aqualogic Interaction120nonenew
- 7AppleMac OS X, Iphoto, Quicktime112nonenew
- 8AdobeAcrobat Reader, Acrobat, Connect Enterprise Server1052new
- 9BeaWeblogic Server, Weblogic Workshop100nonenew
- 10WordPressSniplets Plugin, Wordspew, Dean Logan Wp-people Plugin100nonenew
- 11XoopsXoops, Tiny Event Module, Xm-memberstats100nonenew
- 12SunSolaris, Jdk, Jre81nonenew
- 13SymantecScan Engine, Backup Exec For Windows Server, Symantec Antivirus Filtering Domino Mpe84nonenew
- 14CiscoSession Initiation Protocol \(Sip\) Firmware, Skinny Client Control Protocol \(Sccp\) Firmware, Unified Callmanager74nonenew
- 15Double-take SoftwareDouble-take70nonenew
- 16DrupalProject Issue Tracking Module, Secure Site Module, Userpoints Module72nonenew
- 17HPStorageworks Double-take, Storage Essentials Srm Standard, Virtual Rooms71nonenew
- 18LiferayLiferay Enterprise Portal60nonenew
- 19NovellClient, Challenge Response Client, Groupwise63nonenew
- 20PhpnukeBook, Easycontent Module, Kose Yazilari Module60nonenew
- 21ShoppingtreeCandypress Store60nonenew
- 22ApacheTomcat, Mod Jk, Geronimo50nonenew
- 23LinuxLinux Kernel50nonenew
- 24Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux51nonenew
- 25CactiCacti40nonenew
Severity
How this month's CVEs score on CVSS; 6 have no score yet. Severity is not exploitation.
- Critical79
- High184
- Medium253
- Low17
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-89SQL Injection121
- CWE-79XSS89
- CWE-119Memory Buffer Bounds66
- CWE-26445
- CWE-94Code Injection40
- CWE-22Path Traversal33
- CWE-39927
- CWE-20Improper Input Validation26
- CWE-200Information Exposure15
- CWE-18911
- CWE-598
- CWE-352CSRF6
- CWE-134Format String4
- CWE-2554
- CWE-287Improper Authentication3
- CWE-120Buffer Overflow1
- CWE-3101
- CWE-362Race Condition1
- CWE-416Use After Free1
- CWE-732Incorrect Permissions1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 89SQL Injection | 79XSS | 119Memory Buffer Bounds | 264 | 94Code Injection | 22Path Traversal | 399 | 20Improper Input Validation | 200Information Exposure | 189 |
|---|---|---|---|---|---|---|---|---|---|---|
| Joomla | 39 | |||||||||
| Mambo | 23 | |||||||||
| IBM | 4 | 4 | 9 | 1 | 1 | |||||
| Microsoft | 2 | 1 | 6 | 3 | 3 | |||||
| Mozilla | 2 | 1 | 1 | 1 | 3 | 1 | 2 | |||
| Bea Systems | 4 | 4 | 2 | |||||||
| Apple | 1 | 2 | 3 | 2 | 1 | 1 | ||||
| Adobe | 1 | 2 | 2 | 1 | 2 | |||||
| Bea | 4 | 3 | 2 | |||||||
| WordPress | 4 | 3 | 1 | 2 | ||||||
| Xoops | 6 | 2 | 1 | |||||||
| Sun | 4 | 1 | 1 |