December 2010
361 CVEs published, +29% on November 2010 and −19% on December 2009. CISA added 0 to KEV.
2010 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2010 | January 2010: 319 CVEs | February 2010: 308 CVEs | March 2010: 515 CVEs | April 2010: 520 CVEs | May 2010: 408 CVEs | June 2010: 493 CVEs | July 2010: 344 CVEs | August 2010: 383 CVEs | September 2010: 301 CVEs | October 2010: 435 CVEs | November 2010: 280 CVEs | December 2010: 361 CVEs | 4,667−18% |
- Critical
- 9326% of the 359 with a CVSS score
- Added to CISA KEV
- 04 of this month's CVEs are in KEV, listed a median 4126 days after publication
- Vendors
- 125228 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 49 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftWindows Server 2008, Windows 7, Windows Vista43251new
- 2IBMLotus Notes Traveler, Lotus Mobile Connect, Rational Clearquest331nonenew
- 3RealnetworksRealplayer, Realplayer Sp2724nonenew
- 4LinuxLinux Kernel1901new
- 5GoogleChrome, Chrome OS182nonenew
- 6DebianDebian Linux1412new
- 7MozillaFirefox, Seamonkey, Thunderbird1410nonenew
- 8SuseLinux Enterprise Server, Linux Enterprise Real Time Extension, Linux Enterprise Desktop1401new
- 9Red HatJboss Enterprise Application Platform, Enterprise Linux, Enterprise Linux Server1201new
- 10AppleQuicktime, Airport Express, Airport Extreme Base Station Firmware115nonenew
- 11OpensuseOpensuse1113new
- 12HPDiscovery\&dependency Mapping Inventory, Hp-ux, Insight Control Server Deployment103nonenew
- 13OperaOpera Browser93nonenew
- 14CanonicalUbuntu Linux813new
- 15FedoraprojectFedora70nonenew
- 16Gentoo Foundation Inc.Gentoo Linux71nonenew
- 17MybbMybb70nonenew
- 18VMwareWorkstation, Player, Fusion721new
- 19ArticaPandora Fms62nonenew
- 20NullsoftWinamp64nonenew
- 21The Centos ProjectCentos50nonenew
- 22AwstatsAwstats40nonenew
- 23BokaSiteengine40nonenew
- 24ISCBind, Dhcp40nonenew
- 25MitKerberos 5, Kerberos40nonenew
Severity
How this month's CVEs score on CVSS; 2 have no score yet. Severity is not exploitation.
- Critical93
- High70
- Medium170
- Low26
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds49
- CWE-79XSS44
- CWE-89SQL Injection30
- CWE-26427
- CWE-20Improper Input Validation24
- CWE-39922
- CWE-200Information Exposure19
- CWE-94Code Injection16
- CWE-18914
- CWE-22Path Traversal10
- CWE-287Improper Authentication10
- CWE-3108
- CWE-787Out-of-bounds Write6
- CWE-352CSRF5
- CWE-476NULL Pointer Dereference4
- CWE-362Race Condition3
- CWE-9083
- CWE-162
- CWE-2552
- CWE-269Improper Privilege Mgmt2
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 79XSS | 89SQL Injection | 264 | 20Improper Input Validation | 399 | 200Information Exposure | 94Code Injection | 189 | 22Path Traversal |
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | 13 | 2 | 4 | 5 | 2 | 7 | 1 | |||
| IBM | 3 | 6 | 3 | 7 | 4 | 1 | ||||
| Realnetworks | 17 | 1 | 3 | 1 | 3 | |||||
| Linux | 1 | 4 | ||||||||
| 1 | 3 | 1 | 1 | |||||||
| Debian | ||||||||||
| Mozilla | 4 | 1 | 2 | 1 | 2 | |||||
| Suse | 3 | |||||||||
| Apple | 3 | 2 | 1 | 2 | ||||||
| Opensuse | 2 | |||||||||
| Red Hat | 1 | 2 | 1 | 2 | ||||||
| HP | 1 | 3 | 1 |