August 2012
741 CVEs published, +38% on July 2012 and 2.5× August 2011. CISA added 0 to KEV.
2012 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2012 | January 2012: 316 CVEs | February 2012: 349 CVEs | March 2012: 405 CVEs | April 2012: 228 CVEs | May 2012: 434 CVEs | June 2012: 413 CVEs | July 2012: 536 CVEs | August 2012: 741 CVEs | September 2012: 655 CVEs | October 2012: 559 CVEs | November 2012: 445 CVEs | December 2012: 270 CVEs | 5,351+28% |
- Critical
- 10815% of the 734 with a CVSS score
- Added to CISA KEV
- 03 of this month's CVEs are in KEV, listed a median 3487 days after publication
- Vendors
- 311577 products
- Top weakness
- XSSCWE-79 · 127 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1AdobeAcrobat Reader, Acrobat, Flash Player34291new
- 2GoogleChrome, Tunnelblick, Google Chrome341nonenew
- 3OpensuseOpensuse, Leap34141new
- 4Red HatEnterprise Linux Server, Enterprise Linux Desktop, Enterprise Linux Workstation33162new
- 5MozillaFirefox, Thunderbird, Seamonkey3224nonenew
- 6McafeeEmail Gateway, Email and Web Security, Enterprise Mobility Manager293nonenew
- 7FfmpegFfmpeg240nonenew
- 8IBMRational Clearquest, Websphere Mq, Websphere Application Server220nonenew
- 9CanonicalUbuntu Linux, PHP52114nonenew
- 10CiscoIOS, Anyconnect Secure Mobility Client, Unified Computing System Infrastructure and Unified Computing System Software210nonenew
- 11WebsenseWebsense Web Security, Websense Web Filter, Websense Email Security200nonenew
- 12SuseLinux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit18141new
- 13DebianDebian Linux, Cifs-utils, Devotee167nonenew
- 14LibavLibav160nonenew
- 15SunSunos, Jdk, Jre150nonenew
- 16WiresharkWireshark150nonenew
- 17ComodoComodo Internet Security143nonenew
- 18Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux140nonenew
- 19HPSan\/iq, Fortify Software Security Center, Integrity132nonenew
- 20MicrosoftWindows Xp, Internet Explorer, Windows 713101new
- 21SilverstripeSilverstripe120nonenew
- 22BitcoinBitcoin Core, Wxbitcoin, Bitcoin-qt100nonenew
- 23RubygemsPuppet, Actionpack, Activesupport101nonenew
- 24OracleJre, Jdk, MySQL941new
- 25UshahidiUshahidi Platform90nonenew
Severity
How this month's CVEs score on CVSS; 7 have no score yet. Severity is not exploitation.
- Critical108
- High99
- Medium446
- Low81
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS127
- CWE-119Memory Buffer Bounds109
- CWE-26477
- CWE-89SQL Injection45
- CWE-200Information Exposure44
- CWE-362Race Condition44
- CWE-20Improper Input Validation35
- CWE-39929
- CWE-352CSRF22
- CWE-18919
- CWE-287Improper Authentication18
- CWE-94Code Injection18
- CWE-31016
- CWE-22Path Traversal12
- CWE-416Use After Free11
- CWE-2559
- CWE-787Out-of-bounds Write5
- CWE-164
- CWE-594
- CWE-78OS Command Injection3
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Security Products12815% of sector-tagged CVEs
- Operating Systems12214% of sector-tagged CVEs
- Web & CMS Plugins11814% of sector-tagged CVEs
- Consumer Software9812% of sector-tagged CVEs
- Enterprise Software9111% of sector-tagged CVEs
- OSS Libraries8410% of sector-tagged CVEs
- Mobile Apps496% of sector-tagged CVEs
- Networking Infrastructure415% of sector-tagged CVEs
- 6 smaller sectors65
- Not yet classified46
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 119Memory Buffer Bounds | 264 | 89SQL Injection | 200Information Exposure | 362Race Condition | 20Improper Input Validation | 399 | 352CSRF | 189 |
|---|---|---|---|---|---|---|---|---|---|---|
| Adobe | 29 | 1 | 1 | 1 | ||||||
| 1 | 7 | 4 | 1 | 3 | 1 | 6 | 2 | |||
| Opensuse | 1 | 5 | 1 | 2 | 1 | 2 | 4 | 3 | ||
| Mozilla | 1 | 3 | 3 | 3 | 4 | 1 | ||||
| Red Hat | 1 | 4 | 2 | 1 | 4 | 1 | ||||
| Mcafee | 3 | 9 | 3 | 1 | ||||||
| Ffmpeg | 18 | 3 | 1 | 2 | ||||||
| IBM | 6 | 5 | 3 | 3 | 2 | |||||
| Canonical | 2 | 1 | 2 | |||||||
| Cisco | 5 | 3 | 1 | 2 | 2 | |||||
| Websense | 1 | 4 | 5 | 2 | 1 | |||||
| Suse | 1 | 1 | 2 | 1 |