July 2010
344 CVEs published, −30% on June 2010 and −23% on July 2009. CISA added 0 to KEV.
2010 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2010 | January 2010: 319 CVEs | February 2010: 308 CVEs | March 2010: 515 CVEs | April 2010: 520 CVEs | May 2010: 408 CVEs | June 2010: 493 CVEs | July 2010: 344 CVEs | August 2010: 383 CVEs | September 2010: 301 CVEs | October 2010: 435 CVEs | November 2010: 280 CVEs | December 2010: 361 CVEs | 4,667−18% |
- Critical
- 5616% of the 343 with a CVSS score
- Added to CISA KEV
- 01 of this month's CVEs are in KEV, listed a median 4438 days after publication
- Vendors
- 168258 products
- Top weakness
- SQL InjectionCWE-89 · 76 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleSolaris, Opensolaris, E-business Suite565nonenew
- 2AppleSafari, Webkit, Mac OS X Server1715nonenew
- 3GoogleChrome1510nonenew
- 4MozillaFirefox, Seamonkey, Thunderbird146nonenew
- 5HPInsight Software Installer, Openvms, Openview Network Node Manager123nonenew
- 6Gentoo Foundation Inc.Gentoo Linux110nonenew
- 7OperaOpera Browser102nonenew
- 8LibtiffLibtiff90nonenew
- 9Ао "нппкт"Осон Основа Оnyx90nonenew
- 10CiscoContent Services Switch 11500, Ace 4710, IOS51nonenew
- 11IBMAdvanced Management Module, Soliddb, Filenet Content Manager51nonenew
- 12MaharaMahara50nonenew
- 13MicrosoftAccess, Windows Server 2008, Windows Vista531new
- 142daybizCustom T-shirt Design Script, Job Site Script, Job Search Engine Script40nonenew
- 15AtutorAcollab40nonenew
- 16CanonicalUbuntu Linux42nonenew
- 17SweetphpTotalcalendar, Totalcalender40nonenew
- 18Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux42nonenew
- 19AjsquareAj Hyip, Aj Article30nonenew
- 20BrotherscriptsScripts Directory, Recipe Website30nonenew
- 21CustomerparadigmPagedirector CMS30nonenew
- 22EsoftproOnline Contact Manager, Online Guestbook Pro, Online Photo Pro30nonenew
- 23Gonzalo MaserCom Artforms30nonenew
- 24OpensuseOpensuse32nonenew
- 25PyPIPython-cjson, Mako30nonenew
Severity
How this month's CVEs score on CVSS; 1 have no score yet. Severity is not exploitation.
- Critical56
- High108
- Medium146
- Low33
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-89SQL Injection76
- CWE-79XSS47
- CWE-119Memory Buffer Bounds32
- CWE-20Improper Input Validation17
- CWE-26417
- CWE-22Path Traversal16
- CWE-94Code Injection11
- CWE-200Information Exposure9
- CWE-3998
- CWE-287Improper Authentication6
- CWE-352CSRF5
- CWE-1894
- CWE-416Use After Free2
- CWE-592
- CWE-161
- CWE-171
- CWE-191
- CWE-190Integer Overflow1
- CWE-2521
- CWE-2551
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins7521% of sector-tagged CVEs
- Databases5616% of sector-tagged CVEs
- Enterprise Software3510% of sector-tagged CVEs
- Consumer Software339% of sector-tagged CVEs
- Mobile Apps329% of sector-tagged CVEs
- OSS Libraries319% of sector-tagged CVEs
- Operating Systems308% of sector-tagged CVEs
- 6 smaller sectors27
- Not yet classified35
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 89SQL Injection | 79XSS | 119Memory Buffer Bounds | 20Improper Input Validation | 264 | 22Path Traversal | 94Code Injection | 200Information Exposure | 399 | 287Improper Authentication |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | ||||||||||
| Apple | 1 | 9 | 1 | 3 | ||||||
| 5 | ||||||||||
| Mozilla | 1 | 2 | 2 | 1 | 1 | 2 | ||||
| HP | 1 | 2 | 1 | |||||||
| Gentoo Foundation Inc. | 2 | 6 | ||||||||
| Opera | 1 | 1 | 5 | 1 | ||||||
| Libtiff | 2 | 6 | ||||||||
| Ао «нппкт» | 2 | 5 | ||||||||
| Cisco | 2 | 2 | 1 | |||||||
| IBM | 1 | 2 | 1 | 1 | ||||||
| Mahara | 1 | 2 | 1 |