May 2010
408 CVEs published, −22% on April 2010 and +11% on May 2009. CISA added 0 to KEV.
2010 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2010 | January 2010: 319 CVEs | February 2010: 308 CVEs | March 2010: 515 CVEs | April 2010: 520 CVEs | May 2010: 408 CVEs | June 2010: 493 CVEs | July 2010: 344 CVEs | August 2010: 383 CVEs | September 2010: 301 CVEs | October 2010: 435 CVEs | November 2010: 280 CVEs | December 2010: 361 CVEs | 4,667−18% |
- Critical
- 5413% of the 403 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 214364 products
- Top weakness
- XSSCWE-79 · 70 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1AdobeShockwave Player, Coldfusion, Photoshop CS42311nonenew
- 2CiscoPgw 2200 Softswitch, Mediator Framework, Scientific Atlanta Webstar DPC2100R2206nonenew
- 3MicrosoftWindows Xp, Windows 2000, Windows Server 2003163nonenew
- 4OpenmairieOpencourrier, Openplanning, Openregistrecil140nonenew
- 5PHPPHP141nonenew
- 6HPOpenview Network Node Manager, Loadrunner, Insight Control Server Migration For Windows128nonenew
- 7Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux102nonenew
- 8ConsonaConsona Dynamic Agent, Consona Subscriber Assistance, Consona Live Assistance94nonenew
- 9GoogleChrome92nonenew
- 10IBMWebsphere Application Server, Communications Server, Aix61nonenew
- 11ToutvirtualVirtualiq60nonenew
- 12AppleSafari, Java 1.6, Java50nonenew
- 13LinuxLinux Kernel50nonenew
- 14PerchaCom Perchacategoriestree, Com Perchadownloadsattach, Com Perchafieldsattach50nonenew
- 15PythonPython50nonenew
- 16Chaos Tool Suite ProjectCtools40nonenew
- 17MozillaFirefox, Seamonkey41nonenew
- 18OpensuseOpensuse41nonenew
- 19Phpscripte24Pay Per Watch \& Bid Auktions System, Live Shopping Multi Portal System, Web Social Network Freunde Community40nonenew
- 20PostgresqlPostgresql40nonenew
- 21SuseLinux Enterprise Server, Linux Enterprise Desktop, Linux Enterprise High Availability Extension41nonenew
- 222daybizPolls Script, Auction Script30nonenew
- 23AlibabacloneEC21 Clone, Alibaba Clone Platinum, B2B Gold Script30nonenew
- 24BukulokomediaLokomedia CMS30nonenew
- 25CanonicalUbuntu Linux30nonenew
Severity
How this month's CVEs score on CVSS; 5 have no score yet. Severity is not exploitation.
- Critical54
- High117
- Medium207
- Low25
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS70
- CWE-89SQL Injection57
- CWE-22Path Traversal48
- CWE-119Memory Buffer Bounds41
- CWE-20Improper Input Validation25
- CWE-26422
- CWE-39920
- CWE-94Code Injection18
- CWE-200Information Exposure14
- CWE-18910
- CWE-352CSRF10
- CWE-787Out-of-bounds Write10
- CWE-3107
- CWE-2556
- CWE-190Integer Overflow5
- CWE-287Improper Authentication5
- CWE-134Format String3
- CWE-592
- CWE-120Buffer Overflow1
- CWE-161
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins9423% of sector-tagged CVEs
- Enterprise Software5614% of sector-tagged CVEs
- Consumer Software5012% of sector-tagged CVEs
- Operating Systems4210% of sector-tagged CVEs
- OSS Libraries348% of sector-tagged CVEs
- Networking Infrastructure246% of sector-tagged CVEs
- 8 smaller sectors57
- Not yet classified53
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 89SQL Injection | 22Path Traversal | 119Memory Buffer Bounds | 20Improper Input Validation | 264 | 399 | 94Code Injection | 200Information Exposure | 189 |
|---|---|---|---|---|---|---|---|---|---|---|
| Adobe | 2 | 9 | 1 | 1 | ||||||
| Cisco | 1 | 7 | 1 | 1 | ||||||
| Microsoft | 4 | 1 | 3 | 1 | 1 | 1 | 2 | |||
| Openmairie | 8 | 6 | ||||||||
| PHP | 3 | 1 | 8 | |||||||
| HP | 1 | 5 | ||||||||
| Сообщество Свободного Программного Обеспечения | 1 | 2 | 1 | 1 | 1 | |||||
| Consona | 1 | 1 | 2 | 1 | ||||||
| 1 | 1 | |||||||||
| IBM | 3 | 1 | 1 | |||||||
| Toutvirtual | 2 | 1 | ||||||||
| Apple | 3 | 1 |