November 2008
433 CVEs published, −20% on October 2008 and −11% on November 2007. CISA added 0 to KEV.
2008 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2008 | January 2008: 502 CVEs | February 2008: 539 CVEs | March 2008: 522 CVEs | April 2008: 459 CVEs | May 2008: 388 CVEs | June 2008: 438 CVEs | July 2008: 522 CVEs | August 2008: 374 CVEs | September 2008: 455 CVEs | October 2008: 543 CVEs | November 2008: 433 CVEs | December 2008: 530 CVEs | 5,705−22% |
- Critical
- 9221% of the 432 with a CVSS score
- Added to CISA KEV
- 01 of this month's CVEs are in KEV, listed a median 4867 days after publication
- Vendors
- 262391 products
- Top weakness
- CWE-5985 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1DebianDebian Linux, Dpkg-cross, Initramfs-tools195nonenew
- 2Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux197nonenew
- 3AdobeAcrobat, Flash Player, Acrobat Reader1751new
- 4XineXine-lib, Xine167nonenew
- 5MozillaFirefox, Seamonkey, Thunderbird147nonenew
- 6SunJava System Identity Manager, Solaris, Opensolaris142nonenew
- 7AppleiPhone OS, Safari, Cups133nonenew
- 8MicrosoftOffice Communicator, Windows Vista, Windows 2000133nonenew
- 9CanonicalUbuntu Linux115nonenew
- 10NovellEdirectory, Iprint, Identity Manager Roles Based Provisioning Module118nonenew
- 11LinuxLinux Kernel91nonenew
- 12TrendmicroServerprotect88nonenew
- 13YourfreeworldBlog Blaster Script, Autoresponder Hosting Script, Classifieds Blaster Script80nonenew
- 14Gentoo Foundation Inc.Gentoo Linux73nonenew
- 15EasysitenetworkCheats Complete Website, Drinks Complete Website, Jokes Complete Website50nonenew
- 16IBMHardware Management Console, Lotus, Metrica Service Assurance Framework50nonenew
- 17HPOpenvms, Service Manager, System Management Homepage42nonenew
- 18MW6 Technologies1d Barcode Decoder Activex, Aztec Activex, Datamatrix Activex44nonenew
- 19Ocean12 TechnologiesCalendar Manager, Contact Manager, Membership Manager Pro40nonenew
- 20PlanetlucRateme, Mygallery, Signme40nonenew
- 21Red HatRed Hat Enterprise Linux, Enterprise Linux Desktop, Enterprise Linux41nonenew
- 22Aj SquareAj Article, Aj Auction, Zeuscart30nonenew
- 23CiscoIOS, VPN Client, Catos30nonenew
- 24ClientsoftwareWincome Mpd Total, Wincom Mpd Total32nonenew
- 25JoomlaCom Datsogallery, Com Rssreader, Com Xewebtv31nonenew
Severity
How this month's CVEs score on CVSS; 1 have no score yet. Severity is not exploitation.
- Critical92
- High116
- Medium210
- Low14
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-5985
- CWE-89SQL Injection74
- CWE-119Memory Buffer Bounds52
- CWE-79XSS44
- CWE-26425
- CWE-20Improper Input Validation22
- CWE-94Code Injection16
- CWE-200Information Exposure15
- CWE-22Path Traversal15
- CWE-39915
- CWE-287Improper Authentication11
- CWE-1899
- CWE-352CSRF6
- CWE-362Race Condition5
- CWE-2554
- CWE-3103
- CWE-330Insufficient Random Values3
- CWE-787Out-of-bounds Write2
- CWE-161
- CWE-295Improper Certificate Validation1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 59 | 89SQL Injection | 119Memory Buffer Bounds | 79XSS | 264 | 20Improper Input Validation | 94Code Injection | 200Information Exposure | 22Path Traversal | 399 |
|---|---|---|---|---|---|---|---|---|---|---|
| Сообщество Свободного Программного Обеспечения | 5 | 2 | 3 | 1 | 3 | |||||
| Debian | 7 | 1 | 1 | 3 | 1 | |||||
| Adobe | 2 | 3 | 4 | 1 | 2 | 1 | ||||
| Xine | 9 | 2 | ||||||||
| Mozilla | 1 | 1 | 2 | 1 | 1 | 4 | ||||
| Sun | 3 | 2 | 2 | 1 | 1 | |||||
| Apple | 1 | 2 | 3 | 2 | ||||||
| Microsoft | 1 | 1 | 1 | 3 | 1 | |||||
| Canonical | 1 | 1 | 3 | 1 | ||||||
| Novell | 6 | 2 | 1 | |||||||
| Linux | 4 | 1 | 1 | 1 | ||||||
| Trend Micro | 7 |