August 2008
374 CVEs published, −28% on July 2008 and −30% on August 2007. CISA added 0 to KEV.
2008 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2008 | January 2008: 502 CVEs | February 2008: 539 CVEs | March 2008: 522 CVEs | April 2008: 459 CVEs | May 2008: 388 CVEs | June 2008: 438 CVEs | July 2008: 522 CVEs | August 2008: 374 CVEs | September 2008: 455 CVEs | October 2008: 543 CVEs | November 2008: 433 CVEs | December 2008: 530 CVEs | 5,705−22% |
- Critical
- 6217% of the 373 with a CVSS score
- Added to CISA KEV
- 01 of this month's CVEs are in KEV, listed a median 4958 days after publication
- Vendors
- 227347 products
- Top weakness
- SQL InjectionCWE-89 · 73 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftOffice, Internet Explorer, Office Converter Pack2822nonenew
- 2Red HatRed Hat Enterprise Linux, Directory Server, Enterprise Linux Desktop143nonenew
- 3SunOpensolaris, Solaris, Sunos134nonenew
- 4Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux121nonenew
- 5AppleMac OS X, Coregraphics, iPhone OS104nonenew
- 6IBMDB2 Universal Database, Lotus Quickr, Rational Clearquest101nonenew
- 7YourfreeworldAd Board Script, Ad-exchange Script, Banner Management Script100nonenew
- 8LinuxLinux Kernel, Ipsec Tools Racoon Daemon91nonenew
- 9CanonicalUbuntu Linux80nonenew
- 10DebianDebian Linux70nonenew
- 11DrupalDrupal, Suggested Terms Module, Upload Module70nonenew
- 12ApacheTomcat, HTTP Server, Openoffice50nonenew
- 13Gentoo Foundation Inc.Gentoo Linux51nonenew
- 14HPHp-ux, Linux Imaging and Printing Project, System Administration Manager52nonenew
- 15PythonPython50nonenew
- 16Ruby-langRuby50nonenew
- 17LussumoVanilla40nonenew
- 18Microworld TechnologiesMailscan40nonenew
- 19OpenfreewayFreeway40nonenew
- 20PozscriptsClassified Ads, Greencart PHP Shopping Cart, Tubeguru Video Sharing Script40nonenew
- 21SpacetagLacoodast42nonenew
- 22TurnkeywebtoolsPHP Live Helper, Sunshop Shopping Cart40nonenew
- 23AdobePresenter, Flash Player30nonenew
- 24FedoraDirectory Server30nonenew
- 25HarmoniHarmoni30nonenew
Severity
How this month's CVEs score on CVSS; 1 have no score yet. Severity is not exploitation.
- Critical62
- High137
- Medium160
- Low14
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-89SQL Injection73
- CWE-79XSS58
- CWE-26433
- CWE-119Memory Buffer Bounds30
- CWE-20Improper Input Validation27
- CWE-39924
- CWE-94Code Injection24
- CWE-22Path Traversal20
- CWE-200Information Exposure11
- CWE-1898
- CWE-287Improper Authentication6
- CWE-352CSRF6
- CWE-3104
- CWE-120Buffer Overflow3
- CWE-134Format String3
- CWE-163
- CWE-190Integer Overflow3
- CWE-2552
- CWE-4942
- CWE-592
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins12131% of sector-tagged CVEs
- Operating Systems8522% of sector-tagged CVEs
- Enterprise Software328% of sector-tagged CVEs
- OSS Libraries267% of sector-tagged CVEs
- Consumer Software236% of sector-tagged CVEs
- Communications185% of sector-tagged CVEs
- Security Products174% of sector-tagged CVEs
- 7 smaller sectors36
- Not yet classified33
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 89SQL Injection | 79XSS | 264 | 119Memory Buffer Bounds | 20Improper Input Validation | 399 | 94Code Injection | 22Path Traversal | 200Information Exposure | 189 |
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | 2 | 1 | 2 | 7 | 12 | 2 | 2 | |||
| Sun | 2 | 1 | 1 | 1 | 1 | |||||
| Сообщество Свободного Программного Обеспечения | 1 | 1 | 2 | 2 | 1 | 3 | ||||
| Apple | 1 | 1 | 1 | 3 | 1 | 1 | ||||
| IBM | 1 | 5 | 2 | 2 | ||||||
| Red Hat | 1 | 1 | 1 | 2 | 1 | |||||
| Yourfreeworld | 10 | |||||||||
| Linux | 1 | 2 | 2 | |||||||
| Canonical | 1 | 1 | ||||||||
| Debian | 1 | |||||||||
| Drupal | 3 | 2 | ||||||||
| Apache | 2 | 2 |