September 2011
389 CVEs published, +32% on August 2011 and +29% on September 2010. CISA added 0 to KEV.
2011 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2011 | January 2011: 397 CVEs | February 2011: 382 CVEs | March 2011: 356 CVEs | April 2011: 312 CVEs | May 2011: 296 CVEs | June 2011: 294 CVEs | July 2011: 308 CVEs | August 2011: 295 CVEs | September 2011: 389 CVEs | October 2011: 484 CVEs | November 2011: 312 CVEs | December 2011: 347 CVEs | 4,172−11% |
- Critical
- 6617% of the 387 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 251340 products
- Top weakness
- Information ExposureCWE-200 · 140 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1GoogleChrome, Chrome OS, Cr-48 Chromebook342nonenew
- 2AdobeAcrobat Reader, Acrobat, Flash Player1916nonenew
- 3MicrosoftSharepoint Server, Office, Excel168nonenew
- 4MozillaFirefox, Seamonkey, Thunderbird158nonenew
- 5AppleiPhone OS, Itunes, Safari101nonenew
- 6Red HatRed Hat Enterprise Linux, Enterprise Linux Server, Enterprise Linux Desktop100nonenew
- 7IBMJava, Lotus Domino, Openadmin Tool82nonenew
- 8MantisbtMantisbt60nonenew
- 9CiscoCiscoworks Lan Management Solution, Identity Services Engine, Identity Services Engine Software53nonenew
- 10LinuxLinux Kernel50nonenew
- 11MhproductsMhp Downloadshop, Projekt Shop, Download Center50nonenew
- 12TibcoSpotfire Analytics Server, Spotfire Server, Slingshot50nonenew
- 13CogentdatahubCogent Datahub41nonenew
- 14ManageengineEventlog Analyzer, Servicedesk Plus40nonenew
- 15MeasuresoftScadapro44nonenew
- 16Novell Inc.Suse Linux Enterprise, Opensuse40nonenew
- 17PhorumPhorum40nonenew
- 18WiresharkWireshark41nonenew
- 19DebianDebian Linux30nonenew
- 20FuseFuse30nonenew
- 21Gentoo Foundation Inc.Gentoo Linux30nonenew
- 22GnomeGtk, Networkmanager31nonenew
- 23HPPalm Pre Webos, Business Service Automation Essentials31nonenew
- 24NetsaroEnterprise Messenger Server30nonenew
- 25OpenttdOpenttd30nonenew
Severity
How this month's CVEs score on CVSS; 2 have no score yet. Severity is not exploitation.
- Critical66
- High38
- Medium268
- Low15
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-200Information Exposure140
- CWE-79XSS53
- CWE-119Memory Buffer Bounds43
- CWE-20Improper Input Validation22
- CWE-89SQL Injection18
- CWE-26417
- CWE-22Path Traversal9
- CWE-3998
- CWE-125Out-of-bounds Read7
- CWE-287Improper Authentication6
- CWE-416Use After Free6
- CWE-94Code Injection5
- CWE-1894
- CWE-3104
- CWE-426Untrusted Search Path3
- CWE-476NULL Pointer Dereference3
- CWE-352CSRF2
- CWE-592
- CWE-120Buffer Overflow1
- CWE-1931
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins10125% of sector-tagged CVEs
- Enterprise Software5213% of sector-tagged CVEs
- Consumer Software4612% of sector-tagged CVEs
- Mobile Apps4411% of sector-tagged CVEs
- Operating Systems3810% of sector-tagged CVEs
- OSS Libraries215% of sector-tagged CVEs
- ICS / OT / IoT164% of sector-tagged CVEs
- Communications154% of sector-tagged CVEs
- 5 smaller sectors31
- Not yet classified36
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 200Information Exposure | 79XSS | 119Memory Buffer Bounds | 20Improper Input Validation | 89SQL Injection | 264 | 22Path Traversal | 399 | 125Out-of-bounds Read | 287Improper Authentication |
|---|---|---|---|---|---|---|---|---|---|---|
| 6 | 1 | 7 | ||||||||
| Adobe | 1 | 10 | 3 | 2 | 2 | |||||
| Microsoft | 1 | 5 | 3 | 2 | 1 | 1 | ||||
| Mozilla | 3 | 1 | 4 | |||||||
| Apple | 1 | 1 | 1 | |||||||
| IBM | 2 | 2 | 1 | 1 | 1 | 1 | ||||
| Mantisbt | 1 | 4 | 1 | |||||||
| Red Hat Inc. | 1 | 1 | 2 | |||||||
| Cisco | 1 | 1 | 1 | |||||||
| Linux | 1 | 1 | ||||||||
| Mhproducts | 5 | |||||||||
| Red Hat | 1 | 1 |