November 2011
312 CVEs published, −36% on October 2011 and +11% on November 2010. CISA added 0 to KEV.
2011 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2011 | January 2011: 397 CVEs | February 2011: 382 CVEs | March 2011: 356 CVEs | April 2011: 312 CVEs | May 2011: 296 CVEs | June 2011: 294 CVEs | July 2011: 308 CVEs | August 2011: 295 CVEs | September 2011: 389 CVEs | October 2011: 484 CVEs | November 2011: 312 CVEs | December 2011: 347 CVEs | 4,172−11% |
- Critical
- 7123% of the 309 with a CVSS score
- Added to CISA KEV
- 01 of this month's CVEs are in KEV, listed a median 5085 days after publication
- Vendors
- 181305 products
- Top weakness
- SQL InjectionCWE-89 · 77 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1RealnetworksRealplayer1919nonenew
- 2AdobeFlash Player, Adobe Air, Shockwave Player1616nonenew
- 3HPOpenview Network Node Manager, Tcp Ip Services Openvms, Network Node Manager I124nonenew
- 4GoogleChrome, Chrome OS, Cr-48 Chromebook91nonenew
- 5MozillaFirefox, Thunderbird96nonenew
- 6AppleiPhone OS, Mac OS X, Safari81nonenew
- 7InvestintechSlimpdf Reader, ABLE2EXTRACT Server, ABLE2DOC88nonenew
- 8IBMDB2 Tools For Z\/os, Aix, TS3100 Tape Library Firmware60nonenew
- 9MicrosoftWindows 7, Windows Server 2008, Windows Vista621new
- 10ApacheHTTP Server, HTTP Server2.0a4, HTTP Server2.0a150nonenew
- 11IscriptsEswap, Cybermatch, Easybiller50nonenew
- 12MaharaMahara50nonenew
- 132daybizOnline Classified Script, Polls Script, Network Community Script40nonenew
- 14CiscoIOS, Linksys WRT54G Router Firmware, Linksys WRT54GS Router Firmware41nonenew
- 15DebianDebian Linux40nonenew
- 16DellKace K2000 Systems Deployment Appliance41nonenew
- 17Red HatRed Hat Enterprise Linux40nonenew
- 18CanonicalUbuntu Linux30nonenew
- 19EliteladdersElite Gaming Ladders30nonenew
- 20EsoftproOnline Contact Manager, Online Guestbook Pro, Online Photo Pro30nonenew
- 21GeIntelligent Platforms Proficy Historian32nonenew
- 22MykazaamNotes Management System, Address \& Contact Organizer30nonenew
- 23PhpmyadminPhpmyadmin30nonenew
- 24SitecomWl-153, Wl-153 Router Firmware, Wl-11132nonenew
- 25WiresharkWireshark30nonenew
Severity
How this month's CVEs score on CVSS; 3 have no score yet. Severity is not exploitation.
- Critical71
- High107
- Medium117
- Low14
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-89SQL Injection77
- CWE-79XSS59
- CWE-119Memory Buffer Bounds37
- CWE-94Code Injection19
- CWE-26416
- CWE-20Improper Input Validation14
- CWE-39910
- CWE-168
- CWE-200Information Exposure6
- CWE-1895
- CWE-287Improper Authentication5
- CWE-3104
- CWE-352CSRF4
- CWE-22Path Traversal3
- CWE-78OS Command Injection3
- CWE-787Out-of-bounds Write3
- CWE-120Buffer Overflow1
- CWE-125Out-of-bounds Read1
- CWE-190Integer Overflow1
- CWE-2551
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 89SQL Injection | 79XSS | 119Memory Buffer Bounds | 94Code Injection | 264 | 20Improper Input Validation | 399 | 16 | 200Information Exposure | 189 |
|---|---|---|---|---|---|---|---|---|---|---|
| Realnetworks | 4 | 9 | 1 | 1 | ||||||
| Adobe | 15 | 1 | ||||||||
| HP | 2 | 1 | ||||||||
| 1 | ||||||||||
| Mozilla | 1 | 3 | 1 | 1 | 2 | |||||
| Apple | 1 | 3 | 1 | 1 | ||||||
| Investintech | 3 | 2 | ||||||||
| IBM | 1 | 3 | ||||||||
| Microsoft | 1 | 1 | 1 | |||||||
| Apache | 1 | 3 | 1 | |||||||
| Iscripts | 4 | 1 | ||||||||
| Mahara | 1 | 1 | 1 | 1 |