July 2012
536 CVEs published, +30% on June 2012 and +74% on July 2011. CISA added 0 to KEV.
2012 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2012 | January 2012: 316 CVEs | February 2012: 349 CVEs | March 2012: 405 CVEs | April 2012: 228 CVEs | May 2012: 434 CVEs | June 2012: 413 CVEs | July 2012: 536 CVEs | August 2012: 741 CVEs | September 2012: 655 CVEs | October 2012: 559 CVEs | November 2012: 445 CVEs | December 2012: 270 CVEs | 5,351+28% |
- Critical
- 10720% of the 536 with a CVSS score
- Added to CISA KEV
- 01 of this month's CVEs are in KEV, listed a median 5025 days after publication
- Vendors
- 161346 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 79 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MoodleMoodle830nonenew
- 2AppleSafari, Mac OS X, Xcode7963nonenew
- 3OracleFusion Middleware, Peoplesoft Products, Siebel Crm651nonenew
- 4PackagistMoodle/moodle, Phpmailer/phpmailer280nonenew
- 5MozillaFirefox, Thunderbird, Seamonkey219nonenew
- 6Red HatRed Hat Enterprise Linux, Enterprise Linux Desktop, Enterprise Linux Workstation211nonenew
- 7SunSunos160nonenew
- 8Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Vte Terminal162nonenew
- 9MicrosoftSharepoint Server, Windows Xp, Windows Vista1431new
- 10Gentoo Foundation Inc.Gentoo Linux121nonenew
- 11SymantecWeb Gateway, Message Filter, System Recovery112nonenew
- 12Novell Inc.Suse Linux Enterprise, Opensuse Leap, Opensuse101nonenew
- 13DebianDebian Linux80nonenew
- 14IBMDB2, Proventia Network Mail Security System Firmware, Lotus Protector For Mail Security81nonenew
- 15PyPIDjango, Nova, Trytond80nonenew
- 16Libexif ProjectLibexif70nonenew
- 17CanonicalUbuntu, Ubuntu Linux61nonenew
- 18CiscoTelepresence System TX9200, Telepresence System Software, Telepresence System T363nonenew
- 19LinuxLinux Kernel, Systemd60nonenew
- 20MariaDBMariaDB60nonenew
- 21AirdroidAirdroid50nonenew
- 22EmcRsa Authentication Manager, Celerra Network Server, Documentum Applicationxtender Desktop51nonenew
- 23GoogleChrome, Bionic, Chrome OS52nonenew
- 24ISCDhcp, Bind50nonenew
- 25PostgresqlPostgresql50nonenew
Severity
How this month's CVEs score on CVSS. Severity is not exploitation.
- Critical107
- High59
- Medium310
- Low60
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds79
- CWE-26466
- CWE-79XSS62
- CWE-20Improper Input Validation27
- CWE-200Information Exposure27
- CWE-18920
- CWE-89SQL Injection18
- CWE-39917
- CWE-352CSRF11
- CWE-22Path Traversal10
- CWE-94Code Injection10
- CWE-287Improper Authentication9
- CWE-3108
- CWE-78OS Command Injection8
- CWE-164
- CWE-362Race Condition4
- CWE-2553
- CWE-120Buffer Overflow1
- CWE-125Out-of-bounds Read1
- CWE-190Integer Overflow1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins11318% of sector-tagged CVEs
- Operating Systems10517% of sector-tagged CVEs
- Mobile Apps8914% of sector-tagged CVEs
- OSS Libraries7212% of sector-tagged CVEs
- Databases7011% of sector-tagged CVEs
- Consumer Software376% of sector-tagged CVEs
- Security Products345% of sector-tagged CVEs
- 7 smaller sectors86
- Not yet classified18
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 264 | 79XSS | 20Improper Input Validation | 200Information Exposure | 189 | 89SQL Injection | 399 | 352CSRF | 22Path Traversal |
|---|---|---|---|---|---|---|---|---|---|---|
| Moodle | 29 | 17 | 5 | 12 | 1 | 3 | 3 | |||
| Apple | 33 | 5 | 2 | 4 | 2 | 1 | ||||
| Oracle | ||||||||||
| Packagist | 8 | 6 | 2 | 4 | 1 | 3 | ||||
| Mozilla | 1 | 5 | 2 | 1 | 1 | 5 | ||||
| Sun | ||||||||||
| Сообщество Свободного Программного Обеспечения | 5 | 2 | 1 | 1 | 1 | 1 | ||||
| Microsoft | 1 | 2 | 3 | 3 | 1 | |||||
| Gentoo Foundation Inc. | 4 | 2 | 3 | 1 | ||||||
| Novell Inc. | 6 | 1 | 3 | |||||||
| Symantec | 3 | 1 | 2 | 1 | ||||||
| Red Hat | 1 | 1 | 1 |