May 2012
434 CVEs published, +90% on April 2012 and +47% on May 2011. CISA added 0 to KEV.
2012 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2012 | January 2012: 316 CVEs | February 2012: 349 CVEs | March 2012: 405 CVEs | April 2012: 228 CVEs | May 2012: 434 CVEs | June 2012: 413 CVEs | July 2012: 536 CVEs | August 2012: 741 CVEs | September 2012: 655 CVEs | October 2012: 559 CVEs | November 2012: 445 CVEs | December 2012: 270 CVEs | 5,351+28% |
- Critical
- 8921% of the 425 with a CVSS score
- Added to CISA KEV
- 02 of this month's CVEs are in KEV, listed a median 3639.5 days after publication
- Vendors
- 111287 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 62 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleFinancial Services Software, Peoplesoft Products, Database Server8131new
- 2GoogleChrome3813nonenew
- 3LinuxLinux Kernel361nonenew
- 4CiscoIOS, 5500 Series Adaptive Security Appliance, Adaptive Security Appliance Software351nonenew
- 5AppleMac OS X, Mac OS X Server, Quicktime31121new
- 6MicrosoftOffice, Windows Server 2008, Windows 72215nonenew
- 7Red HatEnterprise Linux, Enterprise Linux Workstation, Enterprise Linux Desktop1921new
- 8AdobeIllustrator, Illustrator Cs5.5, Shockwave Player1515nonenew
- 9HPInsight Management Agents, Performance Insight, Snmp Agents For Linux1431new
- 10IBMRational Appscan, Cognos TM1, Aix143nonenew
- 11Gentoo Foundation Inc.Gentoo Linux132nonenew
- 12SunSunos, Jdk, Jre100nonenew
- 13PackagistTypo3/cms, Typo3/cms-frontend, Typo3/cms-install80nonenew
- 14SymantecEndpoint Protection, Web Gateway, Network Access Control83nonenew
- 15TYPO3TYPO380nonenew
- 16Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Libxml281nonenew
- 17CanonicalUbuntu Linux, Ubuntu70nonenew
- 18Novell Inc.Suse Linux Enterprise, Opensuse Leap, Opensuse71nonenew
- 19PHPPHP721new
- 20PuppetPuppet, Puppet Enterprise60nonenew
- 21SapNetweaver61nonenew
- 22SuseLinux Enterprise Server, Linux Enterprise Desktop, Linux Enterprise High Availability Extension511new
- 23VMwareEsx, ESXi, Fusion54nonenew
- 24DebianDebian Linux, Texlive-extra-utils411new
- 25MariaDBMariaDB40nonenew
Severity
How this month's CVEs score on CVSS; 9 have no score yet. Severity is not exploitation.
- Critical89
- High77
- Medium221
- Low38
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds62
- CWE-26445
- CWE-20Improper Input Validation44
- CWE-79XSS39
- CWE-39924
- CWE-18915
- CWE-200Information Exposure12
- CWE-89SQL Injection12
- CWE-287Improper Authentication7
- CWE-94Code Injection6
- CWE-22Path Traversal5
- CWE-352CSRF5
- CWE-362Race Condition5
- CWE-476NULL Pointer Dereference5
- CWE-400Resource Consumption4
- CWE-190Integer Overflow3
- CWE-3103
- CWE-416Use After Free3
- CWE-2552
- CWE-284Improper Access Control2
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems9821% of sector-tagged CVEs
- Databases8317% of sector-tagged CVEs
- Mobile Apps7015% of sector-tagged CVEs
- Enterprise Software459% of sector-tagged CVEs
- Networking Infrastructure378% of sector-tagged CVEs
- Web & CMS Plugins378% of sector-tagged CVEs
- OSS Libraries306% of sector-tagged CVEs
- Consumer Software235% of sector-tagged CVEs
- 6 smaller sectors38
- Not yet classified16
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 264 | 20Improper Input Validation | 79XSS | 399 | 189 | 200Information Exposure | 89SQL Injection | 287Improper Authentication | 94Code Injection |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | 1 | |||||||||
| 9 | 2 | 5 | 10 | 1 | ||||||
| Linux | 3 | 5 | 3 | 2 | 3 | 2 | ||||
| Cisco | 3 | 13 | 1 | 3 | 1 | 3 | 1 | 3 | 3 | |
| Apple | 11 | 1 | 2 | 1 | 5 | 2 | 1 | 1 | ||
| Microsoft | 2 | 7 | 7 | 4 | ||||||
| Adobe | 13 | 1 | ||||||||
| Red Hat | 2 | 2 | 1 | |||||||
| HP | 3 | 2 | 3 | 1 | ||||||
| IBM | 2 | 2 | 2 | 1 | 1 | 1 | ||||
| Gentoo Foundation Inc. | 5 | 2 | 2 | |||||||
| Sun |