March 2012
405 CVEs published, +16% on February 2012 and +14% on March 2011. CISA added 0 to KEV.
2012 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2012 | January 2012: 316 CVEs | February 2012: 349 CVEs | March 2012: 405 CVEs | April 2012: 228 CVEs | May 2012: 434 CVEs | June 2012: 413 CVEs | July 2012: 536 CVEs | August 2012: 741 CVEs | September 2012: 655 CVEs | October 2012: 559 CVEs | November 2012: 445 CVEs | December 2012: 270 CVEs | 5,351+28% |
- Critical
- 12732% of the 403 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 148314 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 79 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1AppleiPhone OS, Itunes, Safari9755nonenew
- 2GoogleChrome364nonenew
- 3CiscoIOS, Cisco IOS, IOS XE293nonenew
- 4OpensuseOpensuse252nonenew
- 5IBMMaximo Asset Management Essentials, Maximo Asset Management, Tivoli Change and Configuration Management Database233nonenew
- 6AladdinEsafe220nonenew
- 7CatQuick Heal200nonenew
- 8Rising-globalRising Antivirus200nonenew
- 9EmsisoftAnti-malware190nonenew
- 10IkarusIkarus Virus Utilities T3 Command Line Scanner190nonenew
- 11PandasecurityPanda Antivirus190nonenew
- 12FortinetFortinet Antivirus170nonenew
- 13NormanNorman Antivirus \& Antispyware170nonenew
- 14SophosSophos Anti-virus150nonenew
- 15McafeeGateway, Scan Engine140nonenew
- 16MicrosoftWindows Server 2008, Security Essentials, Windows 7142nonenew
- 17MozillaFirefox, Thunderbird, Thunderbird Esr131nonenew
- 18EsetNOD32 Antivirus110nonenew
- 19KasperskyKaspersky Anti-virus110nonenew
- 20SymantecEndpoint Protection, Altiris Deployment Solution Remote Pcanywhere Solution, Altiris Client Management Suite Pcanywhere Solution110nonenew
- 21AuthentiumCommand Antivirus100nonenew
- 22F-protF-prot Antivirus100nonenew
- 23AntiyAvl Sdk90nonenew
- 24ComodoComodo Antivirus90nonenew
- 25GoforandroidGo Bookmark Widget, Go Email Widget, Go Fbwidget99nonenew
Severity
How this month's CVEs score on CVSS; 2 have no score yet. Severity is not exploitation.
- Critical127
- High70
- Medium200
- Low6
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds79
- CWE-26463
- CWE-79XSS38
- CWE-39930
- CWE-20Improper Input Validation25
- CWE-200Information Exposure18
- CWE-416Use After Free15
- CWE-22Path Traversal11
- CWE-89SQL Injection9
- CWE-352CSRF8
- CWE-94Code Injection6
- CWE-125Out-of-bounds Read4
- CWE-1894
- CWE-3104
- CWE-287Improper Authentication3
- CWE-190Integer Overflow2
- CWE-2552
- CWE-269Improper Privilege Mgmt2
- CWE-592
- CWE-7042
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Mobile Apps13528% of sector-tagged CVEs
- Security Products8417% of sector-tagged CVEs
- Operating Systems449% of sector-tagged CVEs
- Consumer Software439% of sector-tagged CVEs
- Enterprise Software408% of sector-tagged CVEs
- Networking Infrastructure347% of sector-tagged CVEs
- Web & CMS Plugins265% of sector-tagged CVEs
- 7 smaller sectors50
- Not yet classified29
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 264 | 79XSS | 399 | 20Improper Input Validation | 200Information Exposure | 416Use After Free | 22Path Traversal | 89SQL Injection | 352CSRF |
|---|---|---|---|---|---|---|---|---|---|---|
| Apple | 59 | 3 | 7 | 2 | 3 | 2 | 12 | |||
| 2 | 2 | 1 | 15 | |||||||
| Cisco | 1 | 2 | 16 | 5 | 1 | |||||
| Opensuse | 2 | 1 | 13 | |||||||
| IBM | 1 | 1 | 6 | 3 | 3 | 2 | 2 | 1 | ||
| Aladdin | 22 | |||||||||
| Cat | 20 | |||||||||
| Rising-global | 20 | |||||||||
| Emsisoft | 19 | |||||||||
| Ikarus | 19 | |||||||||
| Pandasecurity | 19 | |||||||||
| Fortinet | 17 |