November 2012
445 CVEs published, −20% on October 2012 and +43% on November 2011. CISA added 0 to KEV.
2012 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2012 | January 2012: 316 CVEs | February 2012: 349 CVEs | March 2012: 405 CVEs | April 2012: 228 CVEs | May 2012: 434 CVEs | June 2012: 413 CVEs | July 2012: 536 CVEs | August 2012: 741 CVEs | September 2012: 655 CVEs | October 2012: 559 CVEs | November 2012: 445 CVEs | December 2012: 270 CVEs | 5,351+28% |
- Critical
- 7417% of the 436 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 204377 products
- Top weakness
- Improper Input ValidationCWE-20 · 75 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MozillaFirefox, Seamonkey, Thunderbird3618nonenew
- 2OpensuseOpensuse3417nonenew
- 3Red HatEnterprise Linux Desktop, Enterprise Linux Workstation, Enterprise Linux Eus3211nonenew
- 4GoogleChrome, Android, Web Toolkit300nonenew
- 5CanonicalUbuntu Linux2917nonenew
- 6SuseLinux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit2617nonenew
- 7XenXen210nonenew
- 8MicrosoftWindows 7, .net Framework, Windows Server 20081710nonenew
- 9AppleQuicktime, iPhone OS, Safari169nonenew
- 10AdobeFlash Player, Air Sdk, Air1211nonenew
- 11PaypalPayments Pro, Payments Standard, Paypal Pro120nonenew
- 12ApacheTomcat, AXIS2, Cxf110nonenew
- 13IBMWebsphere Application Server, Websphere Datapower XC10 Appliance, Tivoli Federated Identity Manager111nonenew
- 14MavenOrg.apache.tomcat:tomcat, Org.jboss.resteasy:resteasy-client, Org.jboss.resteasy:resteasy-jaxb-provider110nonenew
- 15Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux110nonenew
- 16DebianDebian Linux94nonenew
- 17AgilefleetFleetcommander, Fleetcommander Kiosk71nonenew
- 18MaharaMahara71nonenew
- 19OscommerceOscommerce70nonenew
- 20MoodleMoodle60nonenew
- 21PyPIGlance, Django, Apache-libcloud60nonenew
- 22BestpracticalRt, Rtfm50nonenew
- 23CitrixXenserver50nonenew
- 24David AlkireDrag \& Drop Gallery50nonenew
- 25EmcIt Operations Intelligence, Rsa Data Protection Manager Appliance, Rsa Adaptive Authentication On-premise51nonenew
Severity
How this month's CVEs score on CVSS; 9 have no score yet. Severity is not exploitation.
- Critical74
- High68
- Medium269
- Low25
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-20Improper Input Validation75
- CWE-26463
- CWE-79XSS53
- CWE-119Memory Buffer Bounds48
- CWE-39927
- CWE-200Information Exposure21
- CWE-31017
- CWE-416Use After Free15
- CWE-352CSRF13
- CWE-89SQL Injection13
- CWE-22Path Traversal11
- CWE-287Improper Authentication11
- CWE-18910
- CWE-295Improper Certificate Validation9
- CWE-94Code Injection5
- CWE-164
- CWE-787Out-of-bounds Write3
- CWE-134Format String2
- CWE-362Race Condition2
- CWE-125Out-of-bounds Read1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems9518% of sector-tagged CVEs
- Web & CMS Plugins8015% of sector-tagged CVEs
- Cloud & SaaS6011% of sector-tagged CVEs
- Consumer Software5811% of sector-tagged CVEs
- OSS Libraries5010% of sector-tagged CVEs
- Mobile Apps489% of sector-tagged CVEs
- Enterprise Software479% of sector-tagged CVEs
- 7 smaller sectors53
- Not yet classified33
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 20Improper Input Validation | 264 | 79XSS | 119Memory Buffer Bounds | 399 | 200Information Exposure | 310 | 416Use After Free | 352CSRF | 89SQL Injection |
|---|---|---|---|---|---|---|---|---|---|---|
| Mozilla | 2 | 7 | 3 | 5 | 9 | 1 | ||||
| Opensuse | 2 | 4 | 3 | 1 | 1 | 10 | 1 | |||
| 5 | 1 | 3 | 6 | 2 | 1 | 5 | ||||
| Canonical | 1 | 4 | 3 | 1 | 9 | 1 | ||||
| Red Hat | 1 | 2 | 4 | 1 | 2 | 2 | 5 | 1 | ||
| Suse | 1 | 4 | 3 | 1 | 9 | 1 | ||||
| Xen | 9 | 4 | 3 | 1 | ||||||
| Microsoft | 1 | 2 | 3 | 6 | 2 | 1 | ||||
| Apple | 1 | 2 | 1 | 7 | 2 | 1 | ||||
| Adobe | 1 | 9 | ||||||||
| Paypal | 12 | |||||||||
| Apache | 4 | 1 | 1 |