May 2008

388 CVEs published, −15% on April 2008 and −33% on May 2007. CISA added 0 to KEV.

2008, month by month. Point at another month to read it.

2008: CVEs published per month
Year	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec	Year total
2008	January 2008: 502 CVEs	February 2008: 539 CVEs	March 2008: 522 CVEs	April 2008: 459 CVEs	May 2008: 388 CVEs	June 2008: 438 CVEs	July 2008: 522 CVEs	August 2008: 374 CVEs	September 2008: 455 CVEs	October 2008: 543 CVEs	November 2008: 433 CVEs	December 2008: 530 CVEs	5,705−22%

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

How this month's CVEs score on CVSS; 2 have no score yet. Severity is not exploitation.

Vendors with at least three times their own 12-month median.

Not in the top 100 in any of the 24 months before.

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

The top weakness classes against the vendors and the sectors that carried them.

The lighter the cell, the more CVEs. Point at one to read it.