February 2011
382 CVEs published, −4% on January 2011 and +24% on February 2010. CISA added 0 to KEV.
2011 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2011 | January 2011: 397 CVEs | February 2011: 382 CVEs | March 2011: 356 CVEs | April 2011: 312 CVEs | May 2011: 296 CVEs | June 2011: 294 CVEs | July 2011: 308 CVEs | August 2011: 295 CVEs | September 2011: 389 CVEs | October 2011: 484 CVEs | November 2011: 312 CVEs | December 2011: 347 CVEs | 4,172−11% |
- Critical
- 14137% of the 377 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 114265 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 68 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1AdobeAcrobat, Acrobat Reader, Shockwave Player7153nonenew
- 2CiscoTelepresence System 500 Series, Telepresence System 3200 Series, Telepresence System 30003620nonenew
- 3MicrosoftWindows 2003 Server, Windows Xp, Windows Server 20032612nonenew
- 4SunJdk, Jre, Sdk228nonenew
- 5IBMLotus Domino, DB2, Filenet P8 Content Manager2111nonenew
- 6GoogleChrome, Chrome OS161nonenew
- 7Red HatRed Hat Enterprise Linux, Directory Server, Enterprise Linux Workstation130nonenew
- 8Fedoraproject389 Directory Server, Fedora91nonenew
- 9LinuxLinux Kernel90nonenew
- 10SmartySmarty97nonenew
- 11DebianDebian Linux, Shadow80nonenew
- 12Gentoo Foundation Inc.Gentoo Linux70nonenew
- 13Hex-raysIda64nonenew
- 14HPData Protector, Openview Performance Insight, Power Manager65nonenew
- 15ApacheTomcat, Couchdb, Archiva50nonenew
- 16MavenOrg.apache.tomcat:tomcat, Org.apache.archiva:archiva, Org.apache.continuum:continuum50nonenew
- 17NovellEdirectory, Iprint Open Enterprise Server, Netware52nonenew
- 18PHPPHP50nonenew
- 19PivotxPivotx50nonenew
- 20PyPIDjango, Moin, Plone50nonenew
- 21RubygemsActionpack, Actionview, Activerecord50nonenew
- 22IntellicomNetbiter NB100, Netbiter Easyconnect EC150, Netbiter Modbus Rtu-tcp Gateway MB10042nonenew
- 23MitKerberos 5, Kerberos40nonenew
- 24RubyonrailsRails40nonenew
- 25VanillaforumsVanilla40nonenew
Severity
How this month's CVEs score on CVSS; 5 have no score yet. Severity is not exploitation.
- Critical141
- High70
- Medium149
- Low17
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds68
- CWE-20Improper Input Validation60
- CWE-79XSS37
- CWE-26421
- CWE-39918
- CWE-89SQL Injection16
- CWE-18911
- CWE-200Information Exposure10
- CWE-22Path Traversal10
- CWE-287Improper Authentication9
- CWE-94Code Injection8
- CWE-352CSRF7
- CWE-78OS Command Injection7
- CWE-2556
- CWE-3106
- CWE-594
- CWE-416Use After Free3
- CWE-120Buffer Overflow2
- CWE-362Race Condition2
- CWE-400Resource Consumption2
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems10325% of sector-tagged CVEs
- Consumer Software7919% of sector-tagged CVEs
- OSS Libraries4310% of sector-tagged CVEs
- Networking Infrastructure4210% of sector-tagged CVEs
- Web & CMS Plugins4210% of sector-tagged CVEs
- Enterprise Software4010% of sector-tagged CVEs
- Mobile Apps184% of sector-tagged CVEs
- 6 smaller sectors36
- Not yet classified14
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 20Improper Input Validation | 79XSS | 264 | 399 | 89SQL Injection | 189 | 200Information Exposure | 22Path Traversal | 287Improper Authentication |
|---|---|---|---|---|---|---|---|---|---|---|
| Adobe | 31 | 16 | 7 | 1 | 4 | 2 | ||||
| Cisco | 7 | 2 | 2 | 9 | 1 | 4 | ||||
| Microsoft | 3 | 10 | 3 | 1 | 1 | 2 | ||||
| Sun | 1 | |||||||||
| IBM | 8 | 2 | 4 | 3 | 1 | 1 | ||||
| 4 | 1 | 1 | 1 | |||||||
| Red Hat | 2 | 3 | 1 | 1 | ||||||
| Fedoraproject | 2 | 1 | 2 | |||||||
| Linux | 1 | 1 | 2 | |||||||
| Smarty | 1 | 2 | ||||||||
| Debian | 4 | |||||||||
| Gentoo Foundation Inc. | 2 | 2 |