CVE Tools
Track your stack

July 2008

522 CVEs published, +19% on June 2008 and −12% on July 2007. CISA added 0 to KEV.

2008 month by month

2008, month by month. Point at another month to read it.
2008: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2008January 2008: 502 CVEsFebruary 2008: 539 CVEsMarch 2008: 522 CVEsApril 2008: 459 CVEsMay 2008: 388 CVEsJune 2008: 438 CVEsJuly 2008: 522 CVEsAugust 2008: 374 CVEsSeptember 2008: 455 CVEsOctober 2008: 543 CVEsNovember 2008: 433 CVEsDecember 2008: 530 CVEs5,705−22%
Critical
6412% of the 520 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
274463 products
Top weakness
SQL InjectionCWE-89 · 108 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1OracleDatabase Server, Peoplesoft Enterprise, Jd Edwards Enterpriseone451nonenew
  2. 2TYPO3Dam Frontend Extension, Pdf Generator 2 Extension, SQL Frontend Extension231nonenew
  3. 3AppleMac OS X, Safari, Mac OS X Server152nonenew
  4. 4DrupalDrupal, Aggregation Module, Taxonomy Autotagger Module151nonenew
  5. 5MicrosoftSQL Server, Data Engine, SQL Server Desktop Engine157nonenew
  6. 6MozillaFirefox, Seamonkey, Thunderbird153nonenew
  7. 7SunJre, Jdk, Sdk156nonenew
  8. 8FedoraprojectFedora101nonenew
  9. 9JoomlaJoomla, Com Brightweblinks, Com Dtregister81nonenew
  10. 10LinuxLinux Kernel, Direct Connect80nonenew
  11. 11DebianDebian Linux, Turba, Horde70nonenew
  12. 12MyiosoftEasydynamicpages, Easye-cards, Easypublish70nonenew
  13. 13OpensuseOpensuse, Zypper60nonenew
  14. 14Red HatRed Hat Enterprise Linux, Vsftpd, Cygwin61nonenew
  15. 15WiresharkWireshark60nonenew
  16. 16CanonicalUbuntu Linux50nonenew
  17. 17NovellEdirectory, Linux Desktop, Novell Client For Windows52nonenew
  18. 18PackagistJoomla/joomla-platform, Joomla/framework, Drupal/drupal50nonenew
  19. 19ClarolineClaroline40nonenew
  20. 20HPOpenview Internet Services, Hpsi Active Directory Bidirectional Ldap Connector, Oracle For Openview42nonenew
  21. 21IBMWebsphere Application Server, Maximo, Data Ontap42nonenew
  22. 22MaianGuestbook, Links, Recipe40nonenew
  23. 23MojoscriptsMojopersonals, Mojoauto, Mojoclassifieds40nonenew
  24. 24MybbMybb40nonenew
  25. 25OperaOpera, Opera Browser41nonenew

Severity

How this month's CVEs score on CVSS; 2 have no score yet. Severity is not exploitation.

  • Critical6412%
  • High17834%
  • Medium26050%
  • Low183%

Breakouts

Vendors with at least three times their own 12-month median.

  1. Fedoraproject105.0×
  2. Oracle453.6×
  3. Drupal153.3×
  4. Mozilla153.0×
  5. Opensuse63.0×

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. TYPO323#2
  2. Myiosoft7#12
  3. Pidgin4#26
  4. Tuxplanet4#27
  5. Yektaweb4#28
  6. Easy-script3#30
  7. Fascript3#32
  8. Greatclone3#33
  9. Homeph Design3#34
  10. Mole Group3#36

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-89SQL Injection108new
  2. CWE-79XSS73new
  3. CWE-26439new
  4. CWE-20Improper Input Validation38new
  5. CWE-22Path Traversal36new
  6. CWE-94Code Injection31new
  7. CWE-119Memory Buffer Bounds28new
  8. CWE-200Information Exposure24new
  9. CWE-39920new
  10. CWE-287Improper Authentication18new
  11. CWE-18911new
  12. CWE-352CSRF8new
  13. CWE-595new
  14. CWE-2554new
  15. CWE-163new
  16. CWE-134Format String2new
  17. CWE-3102new
  18. CWE-362Race Condition2new
  19. CWE-787Out-of-bounds Write2new
  20. CWE-12841new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

The lighter the cell, the more CVEs. Point at one to read it.

July 2008: weakness classes by vendor and by sector: By vendor
By vendor89SQL Injection79XSS26420Improper Input Validation22Path Traversal94Code Injection119Memory Buffer Bounds200Information Exposure399287Improper Authentication
Oracle1
TYPO3844122
Apple52121
Drupal3621
Microsoft312321
Mozilla2341131
Sun91211
Fedoraproject12
Joomla321
Linux31
Debian1
Myiosoft34

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store