June 2008
438 CVEs published, +13% on May 2008 and −25% on June 2007. CISA added 0 to KEV.
2008 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2008 | January 2008: 502 CVEs | February 2008: 539 CVEs | March 2008: 522 CVEs | April 2008: 459 CVEs | May 2008: 388 CVEs | June 2008: 438 CVEs | July 2008: 522 CVEs | August 2008: 374 CVEs | September 2008: 455 CVEs | October 2008: 543 CVEs | November 2008: 433 CVEs | December 2008: 530 CVEs | 5,705−22% |
- Critical
- 8119% of the 437 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 251382 products
- Top weakness
- SQL InjectionCWE-89 · 118 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1AppleMac OS X, Mac OS X Server, Quicktime2810nonenew
- 2SunJava Asp Server, Solaris, Sunos183nonenew
- 3MicrosoftInternet Explorer, Windows Xp, Windows Server 2003164nonenew
- 4JoomlaJoomla, Com Gameq, Com Idoblog140nonenew
- 5XiglaAbsolute Image Gallery XE, Absolute Banner Manager, Absolute Form Processor XE130nonenew
- 6CiscoAdaptive Security Appliance Software, Pix Security Appliance, Unified Communications Manager100nonenew
- 7HPInstant Support, Storageworks Storage Mirroring97nonenew
- 8CanonicalUbuntu Linux83nonenew
- 9Red HatEnterprise Linux, Red Hat Enterprise Linux, Enterprise Linux Desktop82nonenew
- 10IBMAix, Afp Viewer Plug-in, OS 40071nonenew
- 11LinuxLinux Kernel71nonenew
- 12DebianDebian Linux63nonenew
- 13VMwareWorkstation, VMware Workstation, Esx61nonenew
- 14DrupalTrailscout Module, Drupal, Magic Tabs Module50nonenew
- 15Gentoo Foundation Inc.Gentoo Linux52nonenew
- 16MenaltoGallery50nonenew
- 17Ruby-langRuby52nonenew
- 18ElinestudioSite Composer40nonenew
- 19NovellGroupwise Messenger, Edirectory, Iprint Client42nonenew
- 20Novell Inc.Suse Linux Enterprise, Opensuse42nonenew
- 21PreprojectsPre Job Board, E-smart Cart, PHP Jobwebsite Pro40nonenew
- 22Realm ProjectRealm CMS40nonenew
- 23TYPO3TYPO3, Rlmp Eventdb, Wt Gallery40nonenew
- 24X.orgX1143nonenew
- 25Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux40nonenew
Severity
How this month's CVEs score on CVSS; 1 have no score yet. Severity is not exploitation.
- Critical81
- High172
- Medium174
- Low10
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-89SQL Injection118
- CWE-79XSS58
- CWE-119Memory Buffer Bounds45
- CWE-22Path Traversal35
- CWE-20Improper Input Validation30
- CWE-26426
- CWE-94Code Injection26
- CWE-18921
- CWE-200Information Exposure14
- CWE-39914
- CWE-287Improper Authentication11
- CWE-163
- CWE-3102
- CWE-352CSRF2
- CWE-362Race Condition2
- CWE-1021Clickjacking1
- CWE-12841
- CWE-190Integer Overflow1
- CWE-2551
- CWE-284Improper Access Control1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 89SQL Injection | 79XSS | 119Memory Buffer Bounds | 22Path Traversal | 20Improper Input Validation | 264 | 94Code Injection | 189 | 200Information Exposure | 399 |
|---|---|---|---|---|---|---|---|---|---|---|
| Apple | 1 | 6 | 1 | 3 | 6 | 1 | 1 | 3 | 4 | |
| Sun | 2 | 1 | 1 | 3 | 2 | 1 | 3 | |||
| Microsoft | 5 | 5 | 1 | 1 | ||||||
| Joomla | 14 | |||||||||
| Xigla | 6 | 7 | ||||||||
| Cisco | 4 | 2 | 1 | |||||||
| HP | 1 | 2 | ||||||||
| Canonical | 1 | 1 | 3 | 1 | ||||||
| IBM | 4 | 1 | 1 | |||||||
| Linux | 1 | 1 | 1 | 2 | ||||||
| Debian | 1 | 3 | 1 | |||||||
| Red Hat | 1 | 1 |