September 2010
301 CVEs published, −21% on August 2010 and −48% on September 2009. CISA added 0 to KEV.
2010 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2010 | January 2010: 319 CVEs | February 2010: 308 CVEs | March 2010: 515 CVEs | April 2010: 520 CVEs | May 2010: 408 CVEs | June 2010: 493 CVEs | July 2010: 344 CVEs | August 2010: 383 CVEs | September 2010: 301 CVEs | October 2010: 435 CVEs | November 2010: 280 CVEs | December 2010: 361 CVEs | 4,667−18% |
- Critical
- 5017% of the 297 with a CVSS score
- Added to CISA KEV
- 01 of this month's CVEs are in KEV, listed a median 4290 days after publication
- Vendors
- 124216 products
- Top weakness
- XSSCWE-79 · 47 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1CanonicalUbuntu Linux362nonenew
- 2LinuxLinux Kernel332nonenew
- 3GoogleChrome, Android2815nonenew
- 4IBMFilenet P8 Application Engine, Proventia Network Mail Security System Virtual Appliance, Filenet Content Manager272nonenew
- 5SuseLinux Enterprise Desktop, Linux Enterprise Server, Suse Linux Enterprise Server231nonenew
- 6AppleiPhone OS, Safari, Itunes186nonenew
- 7MozillaFirefox, Seamonkey, Thunderbird179nonenew
- 8CiscoIOS, IOS XE, Wireless Lan Controller Software163nonenew
- 9OpensuseOpensuse160nonenew
- 10MicrosoftWindows Xp, Windows Server 2003, Windows Vista157nonenew
- 11Novell Inc.Opensuse, Suse Linux Enterprise140nonenew
- 12HPSystem Management Homepage, Data Protector Express, Operations Agent131nonenew
- 13DebianDebian Linux110nonenew
- 14VMwareEsx, Player, Workstation90nonenew
- 15WebkitgtkWebkitgtk73nonenew
- 16DrupalDrupal60nonenew
- 17NetartmediaReal Estate Portal, Websiteadmin, Car Portal50nonenew
- 18Red HatRed Hat Enterprise Linux, Enterprise Linux50nonenew
- 19AvayaAura Presence Services, Iq, Aura System Manager40nonenew
- 20PackagistDrupal/drupal, Egroupware/egroupware, In2code/powermail40nonenew
- 21AdobeAcrobat, Acrobat Reader, Adobe Reader321new
- 22Alcatel-lucentCcagent, Omnitouch Contact Center, Omnivista 4760 Server30nonenew
- 23Alex KellnerPowermail30nonenew
- 24ARG0Encfs30nonenew
- 25FedoraprojectFedora30nonenew
Severity
How this month's CVEs score on CVSS; 4 have no score yet. Severity is not exploitation.
- Critical50
- High66
- Medium155
- Low26
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS47
- CWE-119Memory Buffer Bounds30
- CWE-26427
- CWE-89SQL Injection19
- CWE-22Path Traversal15
- CWE-200Information Exposure14
- CWE-94Code Injection14
- CWE-20Improper Input Validation13
- CWE-39910
- CWE-352CSRF7
- CWE-476NULL Pointer Dereference7
- CWE-2556
- CWE-287Improper Authentication6
- CWE-3106
- CWE-416Use After Free6
- CWE-1894
- CWE-190Integer Overflow4
- CWE-362Race Condition3
- CWE-120Buffer Overflow2
- CWE-1932
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems7723% of sector-tagged CVEs
- Enterprise Software5015% of sector-tagged CVEs
- Mobile Apps4614% of sector-tagged CVEs
- Web & CMS Plugins4012% of sector-tagged CVEs
- Consumer Software329% of sector-tagged CVEs
- Networking Infrastructure196% of sector-tagged CVEs
- OSS Libraries196% of sector-tagged CVEs
- Communications144% of sector-tagged CVEs
- 6 smaller sectors27
- Not yet classified15
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 119Memory Buffer Bounds | 264 | 89SQL Injection | 22Path Traversal | 200Information Exposure | 94Code Injection | 20Improper Input Validation | 399 | 352CSRF |
|---|---|---|---|---|---|---|---|---|---|---|
| Canonical | 3 | 7 | 1 | 4 | ||||||
| Linux | 3 | 7 | 1 | 2 | 1 | |||||
| 5 | 2 | 2 | 1 | |||||||
| IBM | 6 | 2 | 7 | 1 | 1 | 2 | 1 | |||
| Suse | 1 | 6 | ||||||||
| Apple | 4 | 1 | 1 | 1 | 4 | |||||
| Mozilla | 3 | 4 | 2 | 1 | 3 | |||||
| Cisco | 5 | 1 | ||||||||
| Opensuse | 1 | 1 | 4 | |||||||
| Microsoft | 1 | 5 | 1 | 3 | 2 | 1 | ||||
| Novell Inc. | 4 | 2 | ||||||||
| HP | 3 | 1 | 2 |