February 2010
308 CVEs published, −3% on January 2010 and −55% on February 2009. CISA added 0 to KEV.
2010 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2010 | January 2010: 319 CVEs | February 2010: 308 CVEs | March 2010: 515 CVEs | April 2010: 520 CVEs | May 2010: 408 CVEs | June 2010: 493 CVEs | July 2010: 344 CVEs | August 2010: 383 CVEs | September 2010: 301 CVEs | October 2010: 435 CVEs | November 2010: 280 CVEs | December 2010: 361 CVEs | 4,667−18% |
- Critical
- 5618% of the 308 with a CVSS score
- Added to CISA KEV
- 02 of this month's CVEs are in KEV, listed a median 4398 days after publication
- Vendors
- 140221 products
- Top weakness
- SQL InjectionCWE-89 · 37 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftWindows Server 2008, Windows Vista, Windows Xp3118nonenew
- 2GoogleChrome198nonenew
- 3Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux1911nonenew
- 4CiscoPix 500, ASA 5500, Security Agent171nonenew
- 5DebianDebian Linux, Lintian137nonenew
- 6CanonicalUbuntu Linux117nonenew
- 7FfmpegFfmpeg105nonenew
- 8SunOne Web Server, Opensolaris, Cluster100nonenew
- 9IBMWebsphere Portal, Websphere Commerce, Lotus Quickr90nonenew
- 10LinuxLinux Kernel, Kernel90nonenew
- 11MozillaFirefox, Seamonkey, Bugzilla93nonenew
- 12ApacheOpenoffice, HTTP Server85nonenew
- 13AppleWebkit, Safari, iPhone OS72nonenew
- 14AdobeAcrobat Reader, Adobe Air, Coldfusion612new
- 15Gentoo Foundation Inc.Gentoo Linux60nonenew
- 16GnomeScreensaver, Gmime60nonenew
- 17HPNetwork Node Manager, Dreamscreen, Enterprise Cluster Master Toolkit62nonenew
- 18AccellionSecure File Transfer Appliance52nonenew
- 19Apache Software FoundationOpenoffice55nonenew
- 20GeoppGeo\+\+ Gncaster50nonenew
- 21Novell Inc.Novell Linux Desktop, Opensuse, Suse Linux Enterprise Desktop55nonenew
- 22SymantecClient Security, Antivirus, Endpoint Protection52nonenew
- 23Ооо «русбитех-астра»Astra Linux Common Edition55nonenew
- 24MoinmoMoinmoin40nonenew
- 25MyshellEvalsmsi40nonenew
Severity
How this month's CVEs score on CVSS. Severity is not exploitation.
- Critical56
- High79
- Medium156
- Low17
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-89SQL Injection37
- CWE-79XSS36
- CWE-26425
- CWE-119Memory Buffer Bounds23
- CWE-18921
- CWE-20Improper Input Validation18
- CWE-200Information Exposure18
- CWE-94Code Injection17
- CWE-22Path Traversal13
- CWE-39912
- CWE-352CSRF7
- CWE-2556
- CWE-165
- CWE-3104
- CWE-287Improper Authentication3
- CWE-362Race Condition2
- CWE-592
- CWE-134Format String1
- CWE-190Integer Overflow1
- CWE-1911
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems8927% of sector-tagged CVEs
- Web & CMS Plugins6720% of sector-tagged CVEs
- Consumer Software288% of sector-tagged CVEs
- Enterprise Software268% of sector-tagged CVEs
- Mobile Apps268% of sector-tagged CVEs
- Networking Infrastructure268% of sector-tagged CVEs
- OSS Libraries155% of sector-tagged CVEs
- Security Products155% of sector-tagged CVEs
- Not yet classified19
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 89SQL Injection | 79XSS | 264 | 119Memory Buffer Bounds | 189 | 20Improper Input Validation | 200Information Exposure | 94Code Injection | 22Path Traversal | 399 |
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | 2 | 3 | 7 | 1 | 5 | 1 | 7 | 1 | ||
| 2 | 5 | 6 | 1 | 3 | ||||||
| Сообщество Свободного Программного Обеспечения | 1 | 2 | 6 | 1 | 3 | 1 | ||||
| Cisco | 1 | 2 | 1 | 1 | ||||||
| Debian | 1 | 2 | 1 | 1 | 1 | |||||
| Canonical | 1 | 1 | 1 | 1 | ||||||
| Ffmpeg | 1 | 7 | 2 | |||||||
| Sun | 1 | 1 | 1 | |||||||
| IBM | 2 | 1 | ||||||||
| Linux | 2 | 1 | 1 | |||||||
| Mozilla | 1 | 3 | 2 | 1 | 1 | |||||
| Apache | 1 | 2 | 1 |