April 2010

520 CVEs published, +1% on March 2010 and −9% on April 2009. CISA added 0 to KEV.

2010, month by month. Point at another month to read it.

2010: CVEs published per month
Year	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec	Year total
2010	January 2010: 319 CVEs	February 2010: 308 CVEs	March 2010: 515 CVEs	April 2010: 520 CVEs	May 2010: 408 CVEs	June 2010: 493 CVEs	July 2010: 344 CVEs	August 2010: 383 CVEs	September 2010: 301 CVEs	October 2010: 435 CVEs	November 2010: 280 CVEs	December 2010: 361 CVEs	4,667−18%

Critical: 7715% of the 516 with a CVSS score
Added to CISA KEV: 03 of this month's CVEs are in KEV, listed a median 4410 days after publication
Vendors: 248409 products
Top weakness: SQL InjectionCWE-89 · 63 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

How this month's CVEs score on CVSS; 4 have no score yet. Severity is not exploitation.

Not in the top 100 in any of the 24 months before.

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

The top weakness classes against the vendors and the sectors that carried them.

The lighter the cell, the more CVEs. Point at one to read it.