October 2012
559 CVEs published, −15% on September 2012 and +15% on October 2011. CISA added 0 to KEV.
2012 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2012 | January 2012: 316 CVEs | February 2012: 349 CVEs | March 2012: 405 CVEs | April 2012: 228 CVEs | May 2012: 434 CVEs | June 2012: 413 CVEs | July 2012: 536 CVEs | August 2012: 741 CVEs | September 2012: 655 CVEs | October 2012: 559 CVEs | November 2012: 445 CVEs | December 2012: 270 CVEs | 5,351+28% |
- Critical
- 9016% of the 552 with a CVSS score
- Added to CISA KEV
- 03 of this month's CVEs are in KEV, listed a median 3450 days after publication
- Vendors
- 221383 products
- Top weakness
- XSSCWE-79 · 84 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleJre, Jdk, Fusion Middleware121133new
- 2CanonicalUbuntu Linux, Ubuntu Software Properties4118nonenew
- 3Red HatEnterprise Linux Server, Enterprise Linux Workstation, Enterprise Linux Desktop3816nonenew
- 4SunJdk, Jre, Sunos376nonenew
- 5MozillaFirefox, Seamonkey, Thunderbird3219nonenew
- 6AdobeAdobe Air, Adobe Air Sdk, Flash Player3131nonenew
- 7SuseLinux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Sdk27161new
- 8DebianDebian Linux208nonenew
- 9IBMLotus Notes Traveler, Aix, Vios130nonenew
- 10CiscoCatalyst 6504-e, 5500 Series Adaptive Security Appliance, Adaptive Security Appliance Software127nonenew
- 11LinuxLinux Kernel110nonenew
- 12MariaDBMariaDB101nonenew
- 13GoogleChrome, Android, Sketchup94nonenew
- 14MicrosoftWindows 7, Word, Windows Server 200883nonenew
- 15IntelliantsSubrion CMS60nonenew
- 16JoomlaJoomla\!60nonenew
- 17PackagistPhpmyadmin/phpmyadmin, Drupal/drupal, Impresspages/impresspages60nonenew
- 18VwarVirtual War60nonenew
- 19AtutorAcontent50nonenew
- 20FedoraprojectFedora, 389 Directory Server, Crypto-utils51nonenew
- 21OpensuseOpensuse51nonenew
- 22ApacheAXIS2, Cloudstack, Ofbiz42nonenew
- 23Devscripts Devel TeamDevscripts40nonenew
- 24DrupalDrupal40nonenew
- 25EmcNetworker Module For Microsoft Applications, Rsa Adaptive Authentication On-premise, Avamar41nonenew
Severity
How this month's CVEs score on CVSS; 7 have no score yet. Severity is not exploitation.
- Critical90
- High88
- Medium297
- Low77
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS84
- CWE-119Memory Buffer Bounds75
- CWE-26446
- CWE-89SQL Injection40
- CWE-20Improper Input Validation19
- CWE-22Path Traversal18
- CWE-352CSRF17
- CWE-39912
- CWE-94Code Injection12
- CWE-287Improper Authentication10
- CWE-3106
- CWE-416Use After Free6
- CWE-1895
- CWE-200Information Exposure5
- CWE-2555
- CWE-362Race Condition5
- CWE-594
- CWE-125Out-of-bounds Read3
- CWE-269Improper Privilege Mgmt2
- CWE-611XXE2
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Databases12620% of sector-tagged CVEs
- Operating Systems11318% of sector-tagged CVEs
- Web & CMS Plugins11018% of sector-tagged CVEs
- Consumer Software7913% of sector-tagged CVEs
- Enterprise Software325% of sector-tagged CVEs
- OSS Libraries325% of sector-tagged CVEs
- Networking Infrastructure284% of sector-tagged CVEs
- 7 smaller sectors64
- Not yet classified42
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 119Memory Buffer Bounds | 264 | 89SQL Injection | 20Improper Input Validation | 22Path Traversal | 352CSRF | 399 | 94Code Injection | 287Improper Authentication |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | 1 | |||||||||
| Canonical | 6 | 7 | 1 | 2 | ||||||
| Red Hat | 5 | 5 | 3 | 1 | ||||||
| Sun | ||||||||||
| Mozilla | 6 | 8 | 3 | 1 | ||||||
| Adobe | 30 | 1 | ||||||||
| Suse | 6 | 7 | 1 | 1 | ||||||
| Debian | 3 | 1 | 1 | |||||||
| IBM | 2 | 1 | 2 | 2 | 2 | 1 | ||||
| Cisco | 10 | 1 | 1 | |||||||
| Linux | 1 | 2 | 1 | |||||||
| MariaDB |