January 2011
397 CVEs published, +10% on December 2010 and +24% on January 2010. CISA added 0 to KEV.
2011 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2011 | January 2011: 397 CVEs | February 2011: 382 CVEs | March 2011: 356 CVEs | April 2011: 312 CVEs | May 2011: 296 CVEs | June 2011: 294 CVEs | July 2011: 308 CVEs | August 2011: 295 CVEs | September 2011: 389 CVEs | October 2011: 484 CVEs | November 2011: 312 CVEs | December 2011: 347 CVEs | 4,172−11% |
- Critical
- 7419% of the 396 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 147255 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 54 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleMySQL, Fusion Middleware, Peoplesoft and Jdedwards Product Suite624nonenew
- 2CiscoASA 5500, 5500 Series Adaptive Security Appliance, Adaptive Security Appliance Software312nonenew
- 3Red HatRed Hat Enterprise Linux, Evince, Enterprise Mrg267nonenew
- 4LinuxLinux Kernel210nonenew
- 5DebianDebian Linux, Dpkg188nonenew
- 6GoogleChrome OS, Chrome, Android1711nonenew
- 7HPOpenview Network Node Manager, Business Service Management, Data Protector Manager1713nonenew
- 8MySQLMySQL160nonenew
- 9SunSunos, Java System Access Manager, Java System Communications Express161nonenew
- 10NovellGroupwise, Vibe Onprem, Identity Manager158nonenew
- 11Novell Inc.Opensuse, Suse Linux Enterprise, Suse Linux Enterprise Desktop125nonenew
- 12Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux128nonenew
- 13ApacheOpenoffice, Subversion107nonenew
- 14CanonicalUbuntu Linux, Ubuntu108nonenew
- 15MicrosoftWindows Xp, Windows 2003 Server, Windows 793nonenew
- 16Ооо «русбитех-астра»Astra Linux Common Edition, Astra Linux Special Edition98nonenew
- 17Apache Software FoundationOpenoffice87nonenew
- 18IBMWebsphere Application Server, Websphere Mq, Tivoli Access Manager For E-business80nonenew
- 19Linux-pamLinux-pam80nonenew
- 20OperaOpera Browser81nonenew
- 21MozillaBugzilla70nonenew
- 22OpensuseOpensuse70nonenew
- 23SuseLinux Enterprise Server, Linux Enterprise Desktop, Linux Enterprise Software Development Kit70nonenew
- 24TorTor70nonenew
- 25PHPPHP60nonenew
Severity
How this month's CVEs score on CVSS; 1 have no score yet. Severity is not exploitation.
- Critical74
- High81
- Medium212
- Low29
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds54
- CWE-79XSS34
- CWE-20Improper Input Validation30
- CWE-39928
- CWE-26418
- CWE-89SQL Injection18
- CWE-18912
- CWE-22Path Traversal11
- CWE-787Out-of-bounds Write8
- CWE-200Information Exposure7
- CWE-596
- CWE-352CSRF5
- CWE-164
- CWE-3104
- CWE-400Resource Consumption4
- CWE-416Use After Free4
- CWE-120Buffer Overflow3
- CWE-190Integer Overflow3
- CWE-2553
- CWE-287Improper Authentication3
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems10725% of sector-tagged CVEs
- Databases6415% of sector-tagged CVEs
- Enterprise Software4611% of sector-tagged CVEs
- Networking Infrastructure379% of sector-tagged CVEs
- Web & CMS Plugins368% of sector-tagged CVEs
- OSS Libraries328% of sector-tagged CVEs
- Consumer Software287% of sector-tagged CVEs
- Security Products205% of sector-tagged CVEs
- Mobile Apps194% of sector-tagged CVEs
- Not yet classified14
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 79XSS | 20Improper Input Validation | 399 | 264 | 89SQL Injection | 189 | 22Path Traversal | 787Out-of-bounds Write | 200Information Exposure |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | 6 | 1 | ||||||||
| Cisco | 1 | 4 | 9 | 5 | ||||||
| Linux | 1 | 2 | 1 | 1 | 2 | |||||
| Debian | 1 | 3 | 3 | 1 | ||||||
| 2 | 4 | |||||||||
| HP | 11 | 1 | ||||||||
| Red Hat Inc. | 1 | 1 | 1 | 2 | 3 | |||||
| MySQL | 6 | 1 | ||||||||
| Sun | ||||||||||
| Novell | 6 | 5 | 1 | 1 | 1 | |||||
| Novell Inc. | 1 | 1 | 1 | 1 | 1 | |||||
| Сообщество Свободного Программного Обеспечения | 1 | 1 | 1 | 2 | 3 |