February 2009
689 CVEs published, +47% on January 2009 and +28% on February 2008. CISA added 0 to KEV.
2009 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2009 | January 2009: 469 CVEs | February 2009: 689 CVEs | March 2009: 566 CVEs | April 2009: 570 CVEs | May 2009: 367 CVEs | June 2009: 452 CVEs | July 2009: 449 CVEs | August 2009: no snapshot | September 2009: 576 CVEs | October 2009: 353 CVEs | November 2009: 311 CVEs | December 2009: 445 CVEs | 5,24711 of 12 months11/12 |
- Critical
- 7511% of the 685 with a CVSS score
- Added to CISA KEV
- 01 of this month's CVEs are in KEV, listed a median 6257 days after publication
- Vendors
- 405583 products
- Top weakness
- SQL InjectionCWE-89 · 203 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1IBMWebsphere Application Server, Workplace Web Content Management, Workplace For Business Controls and Reporting212nonenew
- 2CiscoAce 4710, Application Control Engine Module, Catalyst 3750 Series Integrated Wireless Lan Controller208nonenew
- 3AppleMac OS X, Mac OS X Server, Safari195nonenew
- 4Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Linux164nonenew
- 5DrupalEveryblog, Drupal, User Karma Module151nonenew
- 6MozillaFirefox, Bugzilla, Seamonkey152nonenew
- 7MicrosoftVisio, Exchange Server, Internet Explorer1261new
- 8AdobeFlash Player For Linux, Flex, Air92nonenew
- 9LinuxLinux Kernel90nonenew
- 10HPOpenview Network Node Manager, Color Laserjet 4370mfp, Color Laserjet 9500mfp84nonenew
- 11Scripts-for-sitesEz Baby, Ez Biz Pro, Ez E-store80nonenew
- 12GoaheadGoahead Webserver70nonenew
- 13JoomlaCom Beamospetition, Com Eventing, Com Musica70nonenew
- 14MoodleMoodle60nonenew
- 15MoziloMozilocms, Mozilowiki60nonenew
- 16PreprojectsPre Classified Listings, Pre Shopping Mall, Pre E-learning Portal60nonenew
- 17RavenphpscriptsRavennuke60nonenew
- 18SunOpensolaris, Java System Directory Server, Solaris60nonenew
- 19ArevaE-terrahabitat52nonenew
- 20NovellGroupwise, Open Enterprise Server51nonenew
- 21TYPO3Wec Discussion Forum, Sb Universal Plugin, Tu-clausthal Odin50nonenew
- 22AccscriptsAcc Autos, Acc PHP Email, Acc Real Estate40nonenew
- 23CfmsourceCf Auction, Cf Calendar, Cf Forum40nonenew
- 24DebianDebian Linux41nonenew
- 25DmxreadyClassified Listings Manager, Member Directory Manager, Online Notebook Manager40nonenew
Severity
How this month's CVEs score on CVSS; 4 have no score yet. Severity is not exploitation.
- Critical75
- High283
- Medium298
- Low29
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-89SQL Injection203
- CWE-79XSS99
- CWE-22Path Traversal53
- CWE-26450
- CWE-94Code Injection44
- CWE-119Memory Buffer Bounds40
- CWE-20Improper Input Validation37
- CWE-287Improper Authentication24
- CWE-39921
- CWE-200Information Exposure18
- CWE-352CSRF17
- CWE-25514
- CWE-1899
- CWE-167
- CWE-595
- CWE-3104
- CWE-78OS Command Injection3
- CWE-362Race Condition2
- CWE-134Format String1
- CWE-312Cleartext Storage1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins27241% of sector-tagged CVEs
- Operating Systems548% of sector-tagged CVEs
- Consumer Software518% of sector-tagged CVEs
- Enterprise Software497% of sector-tagged CVEs
- Networking Infrastructure396% of sector-tagged CVEs
- Mobile Apps254% of sector-tagged CVEs
- 9 smaller sectors77
- Not yet classified90
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 89SQL Injection | 79XSS | 22Path Traversal | 264 | 94Code Injection | 119Memory Buffer Bounds | 20Improper Input Validation | 287Improper Authentication | 399 | 200Information Exposure |
|---|---|---|---|---|---|---|---|---|---|---|
| IBM | 1 | 4 | 1 | 1 | 1 | 4 | ||||
| Cisco | 3 | 1 | 1 | 1 | 3 | 1 | ||||
| Apple | 2 | 5 | 2 | 1 | 2 | |||||
| Сообщество Свободного Программного Обеспечения | 2 | 4 | 3 | 3 | 1 | 1 | ||||
| Drupal | 3 | 6 | 4 | 1 | ||||||
| Mozilla | 2 | 3 | 2 | 1 | ||||||
| Microsoft | 1 | 1 | 2 | 7 | 1 | |||||
| Adobe | 3 | 2 | 1 | 1 | ||||||
| Linux | 3 | 1 | 3 | 2 | ||||||
| HP | 1 | 1 | 1 | 1 | 2 | 1 | ||||
| Scripts-for-sites | 6 | 2 | ||||||||
| Goahead | 4 | 1 | 1 |