June 2011
294 CVEs published, −1% on May 2011 and −40% on June 2010. CISA added 0 to KEV.
2011 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2011 | January 2011: 397 CVEs | February 2011: 382 CVEs | March 2011: 356 CVEs | April 2011: 312 CVEs | May 2011: 296 CVEs | June 2011: 294 CVEs | July 2011: 308 CVEs | August 2011: 295 CVEs | September 2011: 389 CVEs | October 2011: 484 CVEs | November 2011: 312 CVEs | December 2011: 347 CVEs | 4,172−11% |
- Critical
- 10536% of the 294 with a CVSS score
- Added to CISA KEV
- 02 of this month's CVEs are in KEV, listed a median 4011 days after publication
- Vendors
- 72163 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 66 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1AdobeShockwave Player, Acrobat, Acrobat Reader4438nonenew
- 2MicrosoftInternet Explorer, Windows Server 2008, Windows Xp36231new
- 3AppleMac OS X, Mac OS X Server, Quicktime260nonenew
- 4GoogleChrome, Android2401new
- 5MozillaFirefox, Thunderbird, Seamonkey2010nonenew
- 6SunJdk, Jre179nonenew
- 7NovellIprint, Mobility Pack, Data Synchronizer1110nonenew
- 8HPService Center, Service Manager, Openview Storage Data Protector102nonenew
- 9CiscoUnified Ip Phone 7975g, Unified Ip Phone 7965g, Unified Ip Phone 7970g93nonenew
- 10Gentoo Foundation Inc.Gentoo Linux80nonenew
- 11ApacheSubversion, Archiva, Rampart\/c70nonenew
- 12LinuxLinux Kernel70nonenew
- 13GnuGroff60nonenew
- 14WiresharkWireshark60nonenew
- 15FedoraprojectFedora50nonenew
- 16SimplemachinesSmf51nonenew
- 17CybozuGaroon, Office, Mailwise40nonenew
- 18IBMTivoli Management Framework, Rational Team Concert42nonenew
- 19Maynard JohnsonOprofile40nonenew
- 20VMwareESXi, Esx, Fusion41nonenew
- 21CanonicalUbuntu Linux30nonenew
- 22PhpnukePhp-nuke30nonenew
- 23PlonePlone30nonenew
- 24PostrevPost Revolution30nonenew
- 25ProsodyProsody30nonenew
Severity
How this month's CVEs score on CVSS. Severity is not exploitation.
- Critical105
- High36
- Medium135
- Low18
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds66
- CWE-79XSS30
- CWE-39927
- CWE-26421
- CWE-20Improper Input Validation19
- CWE-200Information Exposure14
- CWE-18913
- CWE-9088
- CWE-416Use After Free7
- CWE-597
- CWE-94Code Injection5
- CWE-190Integer Overflow4
- CWE-22Path Traversal4
- CWE-352CSRF4
- CWE-287Improper Authentication3
- CWE-120Buffer Overflow2
- CWE-2552
- CWE-3102
- CWE-89SQL Injection2
- CWE-125Out-of-bounds Read1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 79XSS | 399 | 264 | 20Improper Input Validation | 200Information Exposure | 189 | 908 | 416Use After Free | 59 |
|---|---|---|---|---|---|---|---|---|---|---|
| Adobe | 30 | 1 | 3 | 4 | ||||||
| Microsoft | 10 | 3 | 3 | 2 | 6 | 2 | 1 | 8 | ||
| Apple | 5 | 2 | 1 | 1 | 3 | 1 | 1 | |||
| 3 | 3 | 3 | 3 | 7 | ||||||
| Mozilla | 1 | 1 | 4 | 4 | 2 | 1 | 1 | |||
| Sun | ||||||||||
| Novell | 10 | |||||||||
| HP | 1 | 1 | 1 | |||||||
| Cisco | 4 | 2 | ||||||||
| Gentoo Foundation Inc. | 1 | 6 | ||||||||
| Apache | 1 | 2 | 1 | |||||||
| Linux | 1 | 4 |