October 2008
543 CVEs published, +19% on September 2008 and −45% on October 2007. CISA added 0 to KEV.
2008 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2008 | January 2008: 502 CVEs | February 2008: 539 CVEs | March 2008: 522 CVEs | April 2008: 459 CVEs | May 2008: 388 CVEs | June 2008: 438 CVEs | July 2008: 522 CVEs | August 2008: 374 CVEs | September 2008: 455 CVEs | October 2008: 543 CVEs | November 2008: 433 CVEs | December 2008: 530 CVEs | 5,705−22% |
- Critical
- 11421% of the 540 with a CVSS score
- Added to CISA KEV
- 01 of this month's CVEs are in KEV, listed a median 6418 days after publication
- Vendors
- 306483 products
- Top weakness
- SQL InjectionCWE-89 · 114 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleDatabase 10g, Database 9i, Database 11i381nonenew
- 2MicrosoftInternet Explorer, Windows Xp, Windows 200030131new
- 3IBMLotus Connections, Lotus Quickr, DB2164nonenew
- 4AppleMac OS X, Mac OS X Server, Cups155nonenew
- 5DrupalDrupal, Shindig-integrator, Brilliant Gallery120nonenew
- 6Vastal I-techCosmetics Zone, Dating Zone, Dvd Zone100nonenew
- 7Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux104nonenew
- 8CiscoUnity, Pix Security Appliance, Adaptive Security Appliance 5500 Series90nonenew
- 9AdobeFlash Player, Pagemaker86nonenew
- 10Gentoo Foundation Inc.Gentoo Linux83nonenew
- 11HPOpenview Network Node Manager, Insight Diagnostics, Oncplus81nonenew
- 12LinuxLinux Kernel80nonenew
- 13OperaOpera, Opera Browser83nonenew
- 14DebianDebian Linux, Xsabre, Feta71nonenew
- 15Red HatRed Hat Enterprise Linux, Enterprise Linux Desktop, Fedora73nonenew
- 16TYPO3Econda Plugin, Frontend Users View, Jobcontrol70nonenew
- 17AvailscriptAvailscript Article Script, Availscript Photo Album, Availscript Jobs Portal Script60nonenew
- 18WiresharkWireshark60nonenew
- 19PhlatlinePersonal Information Manager51nonenew
- 20SunFire X4600 Server, Integrated Lights-out Manager, Java Access Manager54nonenew
- 21BroadcomArcserve Backup, Business Protection Suite, Server Protection Suite41nonenew
- 22CaArcserve Backup, Business Protection Suite41nonenew
- 23Condor ProjectCondor40nonenew
- 24Ec-cubeEc-cube40nonenew
- 25FfmpegFfmpeg44nonenew
Severity
How this month's CVEs score on CVSS; 3 have no score yet. Severity is not exploitation.
- Critical114
- High184
- Medium216
- Low26
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-89SQL Injection114
- CWE-79XSS71
- CWE-119Memory Buffer Bounds54
- CWE-26443
- CWE-22Path Traversal41
- CWE-20Improper Input Validation30
- CWE-39926
- CWE-200Information Exposure18
- CWE-287Improper Authentication18
- CWE-94Code Injection17
- CWE-5912
- CWE-1897
- CWE-190Integer Overflow5
- CWE-2555
- CWE-162
- CWE-352CSRF2
- CWE-3101
- CWE-362Race Condition1
- CWE-601Open Redirect1
- CWE-732Incorrect Permissions1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 89SQL Injection | 79XSS | 119Memory Buffer Bounds | 264 | 22Path Traversal | 20Improper Input Validation | 399 | 200Information Exposure | 287Improper Authentication | 94Code Injection |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | 1 | |||||||||
| Microsoft | 1 | 2 | 5 | 2 | 7 | 1 | 1 | 1 | ||
| IBM | 1 | 1 | 1 | 3 | 2 | 1 | 2 | 1 | ||
| Apple | 4 | 2 | 1 | 2 | ||||||
| Drupal | 2 | 3 | 6 | |||||||
| Vastal I-tech | 10 | |||||||||
| Сообщество Свободного Программного Обеспечения | 3 | 2 | 1 | 1 | 1 | |||||
| Cisco | 1 | 1 | 2 | 2 | ||||||
| Adobe | 4 | 2 | 1 | |||||||
| HP | 2 | 1 | 1 | 1 | ||||||
| Linux | 2 | 2 | 1 | 1 | 1 | |||||
| Opera | 4 | 1 | 1 | 1 |