July 2011
308 CVEs published, +5% on June 2011 and −10% on July 2010. CISA added 0 to KEV.
2011 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2011 | January 2011: 397 CVEs | February 2011: 382 CVEs | March 2011: 356 CVEs | April 2011: 312 CVEs | May 2011: 296 CVEs | June 2011: 294 CVEs | July 2011: 308 CVEs | August 2011: 295 CVEs | September 2011: 389 CVEs | October 2011: 484 CVEs | November 2011: 312 CVEs | December 2011: 347 CVEs | 4,172−11% |
- Critical
- 5217% of the 307 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 89216 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 47 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleDatabase Server, Enterprise Manager Grid Control, Peoplesoft Products632nonenew
- 2AppleSafari, Webkit, Cfnetwork3425nonenew
- 3OperaOpera Browser342nonenew
- 4MicrosoftWindows Vista, Windows 7, Windows Server 2008210nonenew
- 5IBMLotus Symphony, Rational Doors Web Access, Websphere Application Server193nonenew
- 6Red HatRed Hat Enterprise Linux, Enterprise Linux Server, Enterprise Linux Desktop151nonenew
- 7SunSunos130nonenew
- 8HPOpenview Storage Data Protector, Arcsight C3200 Appliance, Arcsight C3400 Appliance123nonenew
- 9DebianDebian Linux, Advanced Package Tool100nonenew
- 10CanonicalUbuntu Linux90nonenew
- 11FedoraprojectFedora70nonenew
- 12JoomlaJoomla\!70nonenew
- 13LinuxLinux Kernel70nonenew
- 14CiscoSA540, SA520W, SA52051nonenew
- 15DigiumAsterisk50nonenew
- 16GoogleSearch Appliance, Android, Android Sdk52nonenew
- 17Novell Inc.Suse Linux Enterprise, Opensuse51nonenew
- 18PackagistPhpmyadmin/phpmyadmin, Joomla/joomla-cms, Drupal/core50nonenew
- 19SquirrelmailSquirrelmail50nonenew
- 20Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Linux52nonenew
- 21ChyrpChyrp40nonenew
- 22LibpngLibpng40nonenew
- 23PhpmyadminPhpmyadmin40nonenew
- 24ApacheHttpclient, Tomcat, Xml Security For C\+\+30nonenew
- 25ManageengineServicedesk Plus30nonenew
Severity
How this month's CVEs score on CVSS; 1 have no score yet. Severity is not exploitation.
- Critical52
- High54
- Medium182
- Low19
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds47
- CWE-39933
- CWE-20Improper Input Validation20
- CWE-79XSS18
- CWE-26412
- CWE-200Information Exposure11
- CWE-89SQL Injection9
- CWE-94Code Injection8
- CWE-1896
- CWE-22Path Traversal5
- CWE-476NULL Pointer Dereference5
- CWE-287Improper Authentication4
- CWE-352CSRF4
- CWE-2552
- CWE-3102
- CWE-787Out-of-bounds Write2
- CWE-120Buffer Overflow1
- CWE-125Out-of-bounds Read1
- CWE-161
- CWE-1931
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Databases6720% of sector-tagged CVEs
- Operating Systems6720% of sector-tagged CVEs
- Consumer Software4112% of sector-tagged CVEs
- Enterprise Software4012% of sector-tagged CVEs
- Mobile Apps3912% of sector-tagged CVEs
- Web & CMS Plugins185% of sector-tagged CVEs
- OSS Libraries185% of sector-tagged CVEs
- 6 smaller sectors38
- Not yet classified10
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 399 | 20Improper Input Validation | 79XSS | 264 | 200Information Exposure | 89SQL Injection | 94Code Injection | 189 | 22Path Traversal |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | ||||||||||
| Apple | 21 | 2 | 2 | 2 | 2 | 2 | ||||
| Opera | 12 | 5 | 1 | |||||||
| Microsoft | 3 | 9 | 1 | 2 | ||||||
| IBM | 2 | 6 | 2 | 2 | 1 | 2 | ||||
| Sun | ||||||||||
| HP | 3 | 1 | 2 | 2 | 1 | |||||
| Debian | 1 | 1 | 1 | 1 | ||||||
| Red Hat Inc. | 2 | 1 | 1 | 1 | 1 | |||||
| Canonical | 1 | 1 | 1 | |||||||
| Fedoraproject | 1 | |||||||||
| Joomla | 1 | 2 | 4 |