March 2008
522 CVEs published, −3% on February 2008 and −18% on March 2007. CISA added 0 to KEV.
2008 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2008 | January 2008: 502 CVEs | February 2008: 539 CVEs | March 2008: 522 CVEs | April 2008: 459 CVEs | May 2008: 388 CVEs | June 2008: 438 CVEs | July 2008: 522 CVEs | August 2008: 374 CVEs | September 2008: 455 CVEs | October 2008: 543 CVEs | November 2008: 433 CVEs | December 2008: 530 CVEs | 5,705−22% |
- Critical
- 8216% of the 520 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 276472 products
- Top weakness
- XSSCWE-79 · 97 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1AppleMac OS X, Mac OS X Server, Safari432nonenew
- 2SunJdk, Jre, Sdk227nonenew
- 3IBMAix, Websphere Mq, Rational Clearquest213nonenew
- 4MicrosoftOffice, Excel, Excel Viewer2014nonenew
- 5ZyxelZynos, Prestige 661, Prestige 660174nonenew
- 6CiscoIOS, Cisco IOS, User Changeable Password102nonenew
- 7Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Xine-lib101nonenew
- 8LinksysWRT54G, WAG54GS, WRT300N92nonenew
- 9MozillaSeamonkey, Firefox, Thunderbird91nonenew
- 10PyPIPlone, Moin, Roundup81nonenew
- 11AdobeColdfusion, Livecycle Workflow, Acrobat Reader71nonenew
- 12Red HatRed Hat Enterprise Linux, Directory Server, Enterprise Linux62nonenew
- 13VMwareAce, Player, Server61nonenew
- 14CanonicalUbuntu Linux, Ubuntu53nonenew
- 15DebianDebian Linux52nonenew
- 16JoomlaCom Acajoom, Com Ewriting, Com Garyscookbook50nonenew
- 17PlonePlone CMS51nonenew
- 18AcronisTrue Image, Snap Deploy, True Image Windows Agent40nonenew
- 19AsteriskOpen Source, S800I, Asterisk Appliance Developer Kit41nonenew
- 20DeslockDeslock40nonenew
- 21EXV2EXV2, Bamagalerie40nonenew
- 22FedoraprojectFedora41nonenew
- 23GallarificGallarific40nonenew
- 24ManageengineApplications Manager, Eventlog Analyzer, Servicedesk Plus40nonenew
- 25MavenOrg.opencms:opencms-core, Com.sun.faces:jsf-api40nonenew
Severity
How this month's CVEs score on CVSS; 2 have no score yet. Severity is not exploitation.
- Critical82
- High125
- Medium294
- Low19
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS97
- CWE-89SQL Injection57
- CWE-119Memory Buffer Bounds50
- CWE-26448
- CWE-94Code Injection34
- CWE-20Improper Input Validation31
- CWE-200Information Exposure31
- CWE-22Path Traversal31
- CWE-287Improper Authentication18
- CWE-18916
- CWE-39915
- CWE-25511
- CWE-352CSRF9
- CWE-134Format String8
- CWE-168
- CWE-596
- CWE-3104
- CWE-362Race Condition4
- CWE-2542
- CWE-312Cleartext Storage1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins11922% of sector-tagged CVEs
- Operating Systems8315% of sector-tagged CVEs
- Enterprise Software6211% of sector-tagged CVEs
- Networking Infrastructure5911% of sector-tagged CVEs
- Mobile Apps458% of sector-tagged CVEs
- Security Products377% of sector-tagged CVEs
- Communications275% of sector-tagged CVEs
- Consumer Software265% of sector-tagged CVEs
- OSS Libraries265% of sector-tagged CVEs
- Not yet classified47
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 89SQL Injection | 119Memory Buffer Bounds | 264 | 94Code Injection | 20Improper Input Validation | 200Information Exposure | 22Path Traversal | 287Improper Authentication | 189 |
|---|---|---|---|---|---|---|---|---|---|---|
| Apple | 9 | 9 | 4 | 1 | 3 | 8 | 1 | 3 | ||
| Sun | 2 | 3 | 6 | 1 | ||||||
| IBM | 1 | 2 | 7 | 2 | 1 | 2 | 1 | |||
| Microsoft | 1 | 12 | 3 | |||||||
| Zyxel | 1 | 2 | 1 | 2 | ||||||
| Cisco | 1 | 1 | 1 | 1 | 1 | |||||
| Сообщество Свободного Программного Обеспечения | 1 | 1 | 1 | 3 | ||||||
| Linksys | 2 | 2 | 1 | 2 | ||||||
| Mozilla | 1 | 2 | 1 | |||||||
| PyPI | 2 | 2 | ||||||||
| Adobe | 2 | 1 | 1 | |||||||
| VMware | 3 |