June 2012
413 CVEs published, −5% on May 2012 and +40% on June 2011. CISA added 0 to KEV.
2012 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2012 | January 2012: 316 CVEs | February 2012: 349 CVEs | March 2012: 405 CVEs | April 2012: 228 CVEs | May 2012: 434 CVEs | June 2012: 413 CVEs | July 2012: 536 CVEs | August 2012: 741 CVEs | September 2012: 655 CVEs | October 2012: 559 CVEs | November 2012: 445 CVEs | December 2012: 270 CVEs | 5,351+28% |
- Critical
- 6416% of the 405 with a CVSS score
- Added to CISA KEV
- 04 of this month's CVEs are in KEV, listed a median 3567.5 days after publication
- Vendors
- 179357 products
- Top weakness
- CWE-26462 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1LinuxLinux Kernel400nonenew
- 2Red HatEnterprise Linux Desktop, Enterprise Linux Workstation, Enterprise Linux Server2583new
- 3MicrosoftInternet Explorer, Windows Xp, Windows 724111new
- 4GoogleChrome, Chrome OS, Cr-48 Chromebook232nonenew
- 5IBMWebsphere Application Server, Aix, Lotus Expeditor183nonenew
- 6Gentoo Foundation Inc.Gentoo Linux171nonenew
- 7OracleJre, Jdk, Solaris1772new
- 8DebianDebian Linux, Advanced Package Tool1511new
- 9MozillaFirefox, Thunderbird, Seamonkey158nonenew
- 10OpensuseOpensuse1571new
- 11OperaOpera Browser153nonenew
- 12CanonicalUbuntu Linux, Ubuntu141nonenew
- 13CiscoWebex Recording Format Player, Anyconnect Secure Mobility Client, Catalyst 6513126nonenew
- 14SuseLinux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit1172new
- 15SunJre, Jdk, Sunos1041new
- 16BestpracticalRt90nonenew
- 17AdobeAir, Flash Player, Coldfusion851new
- 18HPSystem Management Homepage, Photosmart E-all-in-one Printer Series, Hp-ux841new
- 19ImagemagickImagemagick80nonenew
- 20MantisbtMantisbt80nonenew
- 21Novell Inc.Opensuse, Suse Linux Enterprise, Suse Linux Enterprise Server811new
- 22Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Libxml2, Linux811new
- 23ApacheOpenoffice.org, Roller, Openoffice70nonenew
- 24PyPIHorizon, Nova, Pycrypto70nonenew
- 25Konstanty BialkowskiLibmodplug60nonenew
Severity
How this month's CVEs score on CVSS; 8 have no score yet. Severity is not exploitation.
- Critical64
- High77
- Medium203
- Low61
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-26462
- CWE-119Memory Buffer Bounds46
- CWE-79XSS43
- CWE-20Improper Input Validation38
- CWE-18923
- CWE-39923
- CWE-200Information Exposure16
- CWE-94Code Injection16
- CWE-352CSRF12
- CWE-89SQL Injection10
- CWE-287Improper Authentication9
- CWE-2558
- CWE-3108
- CWE-190Integer Overflow4
- CWE-362Race Condition4
- CWE-22Path Traversal3
- CWE-787Out-of-bounds Write3
- CWE-125Out-of-bounds Read2
- CWE-284Improper Access Control2
- CWE-835Infinite Loop2
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems13829% of sector-tagged CVEs
- Enterprise Software5912% of sector-tagged CVEs
- OSS Libraries5111% of sector-tagged CVEs
- Consumer Software4810% of sector-tagged CVEs
- Web & CMS Plugins316% of sector-tagged CVEs
- Networking Infrastructure276% of sector-tagged CVEs
- Mobile Apps265% of sector-tagged CVEs
- 6 smaller sectors77
- Not yet classified27
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 264 | 119Memory Buffer Bounds | 79XSS | 20Improper Input Validation | 189 | 399 | 200Information Exposure | 94Code Injection | 352CSRF | 89SQL Injection |
|---|---|---|---|---|---|---|---|---|---|---|
| Linux | 8 | 4 | 4 | 8 | 5 | 3 | ||||
| Microsoft | 1 | 2 | 3 | 1 | 3 | 11 | ||||
| 1 | 3 | 3 | 7 | 1 | ||||||
| Red Hat | 2 | 2 | 1 | 2 | 1 | |||||
| Gentoo Foundation Inc. | 2 | 4 | 2 | 6 | 1 | 1 | ||||
| IBM | 4 | 1 | 4 | 1 | 1 | 1 | 1 | |||
| Oracle | ||||||||||
| Debian | 3 | 1 | 1 | |||||||
| Mozilla | 1 | 5 | 1 | 3 | 1 | |||||
| Opensuse | 2 | 1 | ||||||||
| Opera | 3 | 1 | 1 | |||||||
| Canonical | 1 | 2 | 1 |