CVE Tools
Track your stack

August 2011

295 CVEs published, −4% on July 2011 and −23% on August 2010. CISA added 0 to KEV.

2011 month by month

2011, month by month. Point at another month to read it.
2011: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2011January 2011: 397 CVEsFebruary 2011: 382 CVEsMarch 2011: 356 CVEsApril 2011: 312 CVEsMay 2011: 296 CVEsJune 2011: 294 CVEsJuly 2011: 308 CVEsAugust 2011: 295 CVEsSeptember 2011: 389 CVEsOctober 2011: 484 CVEsNovember 2011: 312 CVEsDecember 2011: 347 CVEs4,172−11%
Critical
8529% of the 294 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
89176 products
Top weakness
Memory Buffer BoundsCWE-119 · 52 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1GoogleChrome, Android443nonenew
  2. 2AppleiPhone OS, Safari, Itunes2811nonenew
  3. 3MozillaFirefox, Seamonkey, Thunderbird2512nonenew
  4. 4AdobeFlash Player, Adobe Air, Shockwave Player2421nonenew
  5. 5MicrosoftWindows Server 2008, Internet Explorer, Windows 7227nonenew
  6. 6NovellSuse Studio Onsite, Mobility Pack, Data Synchronizer171nonenew
  7. 7IBMTivoli Federated Identity Manager, Tivoli Federated Identity Manager Business Gateway, Infosphere Datastage123nonenew
  8. 8Marcus SchaferKiwi111nonenew
  9. 9RealnetworksRealplayer Sp, Realplayer1110nonenew
  10. 10CiscoUnified Communications Manager, Intercompany Media Engine, IOS102nonenew
  11. 11HPOpenview Performance Insight, Palm Webos, Network Automation100nonenew
  12. 12Red HatRed Hat Enterprise Linux, Enterprise Linux Eus, Enterprise Linux Server80nonenew
  13. 13WordPressWordPress73nonenew
  14. 14DebianDebian Linux60nonenew
  15. 15PHPPHP61nonenew
  16. 16RubygemsActionpack, Activerecord, Activesupport60nonenew
  17. 17RubyonrailsRails, Ruby On Rails60nonenew
  18. 18ApacheTomcat, Apache Commons Daemon, HTTP Server50nonenew
  19. 19EmcCaptiva Einput, Rsa Adaptive Authentication On-premise, Autostart50nonenew
  20. 20PhpmyadminPhpmyadmin50nonenew
  21. 21LinuxLinux Kernel40nonenew
  22. 22ZabbixZabbix40nonenew
  23. 23CanonicalUbuntu Linux30nonenew
  24. 24CitrixXen30nonenew
  25. 25Ioquake3Ioquake3 Engine32nonenew

Severity

How this month's CVEs score on CVSS; 1 have no score yet. Severity is not exploitation.

  • Critical8529%
  • High5318%
  • Medium14248%
  • Low145%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Marcus Schafer11#8
  2. Phpmyadmin5#20
  3. Ioquake33#25
  4. Osgeo3#26
  5. Ruby-lang3#28
  6. Umn3#30
  7. Worldofpadman3#31
  8. Aimluck2#33
  9. Aveva2#34
  10. Libpng2#37

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-119Memory Buffer Bounds52new
  2. CWE-20Improper Input Validation33new
  3. CWE-79XSS31new
  4. CWE-26422new
  5. CWE-39919new
  6. CWE-200Information Exposure16new
  7. CWE-416Use After Free13new
  8. CWE-18912new
  9. CWE-3108new
  10. CWE-89SQL Injection8new
  11. CWE-94Code Injection7new
  12. CWE-287Improper Authentication6new
  13. CWE-22Path Traversal3new
  14. CWE-2553new
  15. CWE-787Out-of-bounds Write3new
  16. CWE-125Out-of-bounds Read2new
  17. CWE-162new
  18. CWE-352CSRF2new
  19. CWE-362Race Condition2new
  20. CWE-9082new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

The lighter the cell, the more CVEs. Point at one to read it.

August 2011: weakness classes by vendor and by sector: By vendor
By vendor119Memory Buffer Bounds20Improper Input Validation79XSS264399200Information Exposure416Use After Free18931089SQL Injection
Google1112213
Apple921182
Mozilla51224
Adobe19113
Microsoft142342
Novell1522
IBM1141
Marcus Schafer14
Realnetworks613
Cisco31
HP151
WordPress1121

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store