March 2011
356 CVEs published, −7% on February 2011 and −31% on March 2010. CISA added 0 to KEV.
2011 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2011 | January 2011: 397 CVEs | February 2011: 382 CVEs | March 2011: 356 CVEs | April 2011: 312 CVEs | May 2011: 296 CVEs | June 2011: 294 CVEs | July 2011: 308 CVEs | August 2011: 295 CVEs | September 2011: 389 CVEs | October 2011: 484 CVEs | November 2011: 312 CVEs | December 2011: 347 CVEs | 4,172−11% |
- Critical
- 267% of the 355 with a CVSS score
- Added to CISA KEV
- 01 of this month's CVEs are in KEV, listed a median 4103 days after publication
- Vendors
- 105193 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 80 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1AppleItunes, Webkit, iPhone OS1004nonenew
- 2GoogleChrome, Chrome OS, Picasa5211new
- 3IBMWebsphere Application Server, Lotus Quickr, Lotus Domino302nonenew
- 4OtrsOtrs250nonenew
- 5Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux211nonenew
- 6Red HatRed Hat Enterprise Linux, Enterprise Linux Workstation, Enterprise Linux Server200nonenew
- 7PHPPHP, Pear150nonenew
- 8CanonicalUbuntu, Ubuntu Linux130nonenew
- 9MozillaFirefox, Seamonkey, Thunderbird128nonenew
- 10Gentoo Foundation Inc.Gentoo Linux81nonenew
- 11PHP GroupPHP80nonenew
- 12WiresharkWireshark81nonenew
- 13GentooLogrotate60nonenew
- 14HPClient Automation Enterprise, Diagnostics, Discovery\&dependency Mapping Inventory61nonenew
- 15MicrosoftInternet Explorer, Windows Vista, Windows 763nonenew
- 16DebianDebian Linux, Tex-common50nonenew
- 17LinuxLinux Kernel50nonenew
- 18Novell Inc.Opensuse Leap, Suse Linux Enterprise50nonenew
- 19FoolabsXpdf40nonenew
- 20FreebsdFreebsd40nonenew
- 21GlyphandcogXpdfreader40nonenew
- 22GplhostDomain Technologie Control40nonenew
- 23T1LIBT1LIB40nonenew
- 24ApacheTomcat, Subversion30nonenew
- 25DigiumAsterisk, Asterisknow, S800I30nonenew
Severity
How this month's CVEs score on CVSS; 1 have no score yet. Severity is not exploitation.
- Critical26
- High112
- Medium187
- Low30
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds80
- CWE-20Improper Input Validation39
- CWE-39931
- CWE-26429
- CWE-79XSS22
- CWE-18914
- CWE-200Information Exposure13
- CWE-89SQL Injection9
- CWE-287Improper Authentication7
- CWE-22Path Traversal6
- CWE-352CSRF6
- CWE-596
- CWE-3105
- CWE-416Use After Free5
- CWE-125Out-of-bounds Read4
- CWE-362Race Condition3
- CWE-120Buffer Overflow2
- CWE-134Format String2
- CWE-162
- CWE-787Out-of-bounds Write2
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Mobile Apps15236% of sector-tagged CVEs
- Operating Systems7217% of sector-tagged CVEs
- Enterprise Software7017% of sector-tagged CVEs
- OSS Libraries338% of sector-tagged CVEs
- Consumer Software215% of sector-tagged CVEs
- Web & CMS Plugins205% of sector-tagged CVEs
- Security Products184% of sector-tagged CVEs
- 6 smaller sectors25
- Not yet classified10
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 20Improper Input Validation | 399 | 264 | 79XSS | 189 | 200Information Exposure | 89SQL Injection | 287Improper Authentication | 22Path Traversal |
|---|---|---|---|---|---|---|---|---|---|---|
| Apple | 58 | 12 | 4 | 3 | 1 | 7 | 3 | |||
| 2 | 10 | 3 | ||||||||
| IBM | 1 | 3 | 10 | 4 | 2 | 1 | 1 | 2 | ||
| Otrs | 6 | 9 | 2 | 2 | ||||||
| Сообщество Свободного Программного Обеспечения | 5 | 2 | 2 | 1 | 3 | 1 | 1 | |||
| PHP | 2 | 1 | 2 | 3 | ||||||
| Red Hat Inc. | 2 | 1 | 4 | 3 | 1 | 1 | ||||
| Mozilla | 4 | 1 | 2 | 1 | ||||||
| Gentoo Foundation Inc. | 2 | 1 | 3 | 1 | ||||||
| Canonical Ltd. | 2 | 1 | 1 | 2 | ||||||
| PHP Group | 2 | 1 | 1 | 2 | ||||||
| Wireshark | 2 | 3 | 1 |