February 2012
349 CVEs published, +10% on January 2012 and −9% on February 2011. CISA added 0 to KEV.
2012 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2012 | January 2012: 316 CVEs | February 2012: 349 CVEs | March 2012: 405 CVEs | April 2012: 228 CVEs | May 2012: 434 CVEs | June 2012: 413 CVEs | July 2012: 536 CVEs | August 2012: 741 CVEs | September 2012: 655 CVEs | October 2012: 559 CVEs | November 2012: 445 CVEs | December 2012: 270 CVEs | 5,351+28% |
- Critical
- 7522% of the 343 with a CVSS score
- Added to CISA KEV
- 02 of this month's CVEs are in KEV, listed a median 3765 days after publication
- Vendors
- 157258 products
- Top weakness
- XSSCWE-79 · 68 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1GoogleChrome, Cr-48 Chromebook, Chrome OS342nonenew
- 2AppleMac OS X, Mac OS X Server, iPhone OS230nonenew
- 3AdvantechAdvantech Webaccess, Modbus Tcp Opc Server, Adam Opc Server218nonenew
- 4MicrosoftVisio Viewer, Windows Server 2008, Internet Explorer209nonenew
- 5AdobeShockwave Player, Flash Player, Robohelp17142new
- 6MozillaFirefox, Seamonkey, Thunderbird145nonenew
- 7OracleJre, Javafx, Jdk126nonenew
- 8SiemensSimatic Hmi Panels, Wincc, Wincc Flexible126nonenew
- 9SunJre, Jdk115nonenew
- 10TYPO3Beuserswitch, Terminal, Toi Category100nonenew
- 11RealnetworksRealplayer Sp, Realplayer77nonenew
- 12SuseLinux Enterprise Server, Linux Enterprise Desktop, Linux Enterprise Software Development Kit64nonenew
- 13CiscoSmall Business SRP547W, Small Business SRP520 Series Firmware, Small Business SRP520-U Series Firmware52nonenew
- 14IBMSoliddb, Aix, Cognos TM150nonenew
- 15OpensuseOpensuse54nonenew
- 16PHPPHP50nonenew
- 17Gentoo Foundation Inc.Gentoo Linux40nonenew
- 18NovellIprint, Open Enterprise Server43nonenew
- 19SapNetweaver40nonenew
- 20Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux41nonenew
- 214homepages4images30nonenew
- 22ApacheStruts, Portable Runtime30nonenew
- 23BackuppcBackuppc30nonenew
- 24CanonicalUbuntu, Ubuntu Linux31nonenew
- 25DebianDebian Linux33nonenew
Severity
How this month's CVEs score on CVSS; 6 have no score yet. Severity is not exploitation.
- Critical75
- High73
- Medium185
- Low10
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS68
- CWE-119Memory Buffer Bounds34
- CWE-89SQL Injection28
- CWE-94Code Injection25
- CWE-20Improper Input Validation22
- CWE-22Path Traversal16
- CWE-352CSRF16
- CWE-26414
- CWE-416Use After Free11
- CWE-200Information Exposure10
- CWE-39910
- CWE-287Improper Authentication6
- CWE-787Out-of-bounds Write6
- CWE-125Out-of-bounds Read5
- CWE-1895
- CWE-134Format String2
- CWE-190Integer Overflow2
- CWE-120Buffer Overflow1
- CWE-2551
- CWE-295Improper Certificate Validation1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins6417% of sector-tagged CVEs
- Mobile Apps5816% of sector-tagged CVEs
- Operating Systems5414% of sector-tagged CVEs
- Consumer Software4612% of sector-tagged CVEs
- Enterprise Software4011% of sector-tagged CVEs
- ICS / OT / IoT277% of sector-tagged CVEs
- OSS Libraries164% of sector-tagged CVEs
- Databases144% of sector-tagged CVEs
- Not yet classified29
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 119Memory Buffer Bounds | 89SQL Injection | 94Code Injection | 20Improper Input Validation | 22Path Traversal | 352CSRF | 264 | 416Use After Free | 200Information Exposure |
|---|---|---|---|---|---|---|---|---|---|---|
| 1 | 10 | |||||||||
| Apple | 3 | 1 | 7 | 2 | ||||||
| Advantech | 3 | 7 | 4 | 2 | 1 | 1 | ||||
| Microsoft | 3 | 1 | 9 | 2 | 2 | |||||
| Adobe | 2 | 9 | ||||||||
| Mozilla | 1 | 2 | 1 | 2 | 2 | 1 | 2 | |||
| Oracle | ||||||||||
| Siemens | 2 | 1 | 1 | 2 | 2 | 1 | ||||
| Sun | ||||||||||
| TYPO3 | 5 | 2 | 1 | 1 | ||||||
| Realnetworks | 7 | |||||||||
| Suse | 2 | 1 |