April 2008
459 CVEs published, −12% on March 2008 and −27% on April 2007. CISA added 0 to KEV.
2008 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2008 | January 2008: 502 CVEs | February 2008: 539 CVEs | March 2008: 522 CVEs | April 2008: 459 CVEs | May 2008: 388 CVEs | June 2008: 438 CVEs | July 2008: 522 CVEs | August 2008: 374 CVEs | September 2008: 455 CVEs | October 2008: 543 CVEs | November 2008: 433 CVEs | December 2008: 530 CVEs | 5,705−22% |
- Critical
- 8819% of the 456 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 294436 products
- Top weakness
- SQL InjectionCWE-89 · 73 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleDatabase Server, Database 9i, Application Server2115nonenew
- 2AppleQuicktime, Safari, Webkit191nonenew
- 3IBMLotus Notes, Soliddb, DB21910nonenew
- 4MicrosoftWindows Xp, Windows Vista, Windows 20001711nonenew
- 5Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux142nonenew
- 6HPOpenview Network Node Manager, 442084-b21, RX6600102nonenew
- 7Red HatRed Hat Enterprise Linux, Directory Server, Enterprise Linux93nonenew
- 8AutonomyKeyview77nonenew
- 9Clam Anti-virusClamav71nonenew
- 10ProzillaCheats, Entertainers, Forum70nonenew
- 11SunSolaris, Sunos, N1 Grid Engine70nonenew
- 12Ооо «русбитех-астра»Astra Linux Common Edition, Astra Linux Special Edition71nonenew
- 13AdobeFlash Player, Flex, Air63nonenew
- 14SymantecMail Security, Norton 360, Norton Antivirus64nonenew
- 15BroadcomDesktop Management Suite, Brightstor Arcserve Backup, Anti-virus For The Enterprise53nonenew
- 16DebianAptlinex, Debian Linux, Tss51nonenew
- 17DrupalUbercart Module, E-publish, Drupal50nonenew
- 18Gentoo Foundation Inc.Gentoo Linux50nonenew
- 19AcidcatAcidcat CMS40nonenew
- 20Apache Software FoundationOpenoffice41nonenew
- 21GnuM4, Sccs, Emacs40nonenew
- 22Pixel MotionPixel Motion Blog41nonenew
- 23WordPressDownload Monitor Plugin, WordPress, Wp Download40nonenew
- 24Blogator ScriptBlogator Script, Blogator-script30nonenew
- 25CanonicalUbuntu Linux, Ubuntu32nonenew
Severity
How this month's CVEs score on CVSS; 3 have no score yet. Severity is not exploitation.
- Critical88
- High125
- Medium227
- Low16
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-89SQL Injection73
- CWE-119Memory Buffer Bounds65
- CWE-79XSS60
- CWE-26432
- CWE-22Path Traversal31
- CWE-94Code Injection29
- CWE-20Improper Input Validation26
- CWE-39925
- CWE-18914
- CWE-287Improper Authentication12
- CWE-200Information Exposure11
- CWE-352CSRF6
- CWE-596
- CWE-3104
- CWE-134Format String3
- CWE-163
- CWE-190Integer Overflow3
- CWE-330Insufficient Random Values2
- CWE-120Buffer Overflow1
- CWE-2551
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins12426% of sector-tagged CVEs
- Operating Systems6413% of sector-tagged CVEs
- Enterprise Software6012% of sector-tagged CVEs
- Consumer Software398% of sector-tagged CVEs
- Security Products296% of sector-tagged CVEs
- Databases255% of sector-tagged CVEs
- OSS Libraries235% of sector-tagged CVEs
- Mobile Apps204% of sector-tagged CVEs
- Communications204% of sector-tagged CVEs
- Not yet classified60
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 89SQL Injection | 119Memory Buffer Bounds | 79XSS | 264 | 22Path Traversal | 94Code Injection | 20Improper Input Validation | 399 | 189 | 287Improper Authentication |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | ||||||||||
| Apple | 10 | 1 | 1 | 1 | 2 | |||||
| IBM | 8 | 3 | 2 | 2 | 1 | |||||
| Microsoft | 4 | 1 | 1 | 1 | 5 | 1 | 3 | |||
| Сообщество Свободного Программного Обеспечения | 7 | 2 | 1 | 1 | 2 | |||||
| HP | 1 | 1 | 1 | 3 | 1 | |||||
| Autonomy | 6 | |||||||||
| Clam Anti-virus | 3 | 1 | 1 | |||||||
| Prozilla | 4 | 2 | 1 | |||||||
| Sun | 2 | 1 | 1 | |||||||
| Ооо «русбитех-астра» | 4 | 1 | 2 | |||||||
| Adobe | 1 | 1 | 1 | 1 |