January 2013
443 CVEs published, +64% on December 2012 and +40% on January 2012. CISA added 0 to KEV.
2013 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2013 | January 2013: 443 CVEs | February 2013: 410 CVEs | March 2013: 446 CVEs | April 2013: 434 CVEs | May 2013: 358 CVEs | June 2013: 370 CVEs | July 2013: 500 CVEs | August 2013: 360 CVEs | September 2013: 475 CVEs | October 2013: 634 CVEs | November 2013: 399 CVEs | December 2013: 495 CVEs | 5,324−1% |
- Critical
- 10123% of the 439 with a CVSS score
- Added to CISA KEV
- 06 of this month's CVEs are in KEV, listed a median 3344 days after publication
- Vendors
- 137347 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 75 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleMySQL, Enterprise Manager Grid Control, Peoplesoft Products8062new
- 2CanonicalUbuntu Linux, Ubuntu47241new
- 3OpensuseOpensuse46241new
- 4Red HatEnterprise Linux Workstation, Enterprise Linux Desktop, Enterprise Linux Server45142new
- 5AdobeAcrobat Reader, Acrobat, Coldfusion32294new
- 6GoogleChrome, V8292nonenew
- 7MozillaFirefox, Seamonkey, Thunderbird2723nonenew
- 8SuseLinux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit2723nonenew
- 9IBMInfosphere Information Server, Websphere Application Server, Websphere Real Time246nonenew
- 10Cisco7500 Wireless Lan Controller, Wireless Lan Controller Software, 2000 Wireless Lan Controller183nonenew
- 11MariaDBMariaDB170nonenew
- 12AppleiPhone OS, tvOS160nonenew
- 13Microsoft.net Framework, Windows 7, Windows Server 2008165nonenew
- 14Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Grep, Perl148nonenew
- 15OperaOpera Browser133nonenew
- 16MoodleMoodle100nonenew
- 17Rockwell Automation1788-enbt Flexlogix Adapter, 1794-aentr Flex I/o Ethernet/ip Adapter, Compactlogix and Softlogix Controllers81nonenew
- 18RockwellautomationCompactlogix L35E Controller, 1756-enbt, 1756-eweb81nonenew
- 19SunSunos70nonenew
- 20Portable Sdk For Upnp ProjectPortable Sdk For Upnp66nonenew
- 21EmcAlphastor, Avamar, Avamar Plugin52nonenew
- 22GeIntelligent Platforms Proficy Hmi\/scada Cimplicity, Intelligent Platforms Proficy Process Systems, Intelligent Platforms Proficy Process Systems With Cimplicity51nonenew
- 23LinuxLinux Kernel50nonenew
- 24Novell Inc.Opensuse, Suse Linux Enterprise, Suse Linux Enterprise Desktop511new
- 25RubygemsActiverecord, Authlogic, Activesupport50nonenew
Severity
How this month's CVEs score on CVSS; 4 have no score yet. Severity is not exploitation.
- Critical101
- High67
- Medium241
- Low30
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds75
- CWE-26442
- CWE-79XSS36
- CWE-20Improper Input Validation30
- CWE-200Information Exposure17
- CWE-89SQL Injection14
- CWE-39913
- CWE-18910
- CWE-22Path Traversal10
- CWE-416Use After Free10
- CWE-94Code Injection9
- CWE-287Improper Authentication8
- CWE-352CSRF8
- CWE-2556
- CWE-284Improper Access Control5
- CWE-3103
- CWE-162
- CWE-190Integer Overflow2
- CWE-232
- CWE-787Out-of-bounds Write2
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems13525% of sector-tagged CVEs
- Consumer Software8115% of sector-tagged CVEs
- Databases8015% of sector-tagged CVEs
- Web & CMS Plugins5711% of sector-tagged CVEs
- Mobile Apps458% of sector-tagged CVEs
- OSS Libraries397% of sector-tagged CVEs
- Enterprise Software336% of sector-tagged CVEs
- Networking Infrastructure244% of sector-tagged CVEs
- 5 smaller sectors42
- Not yet classified6
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 264 | 79XSS | 20Improper Input Validation | 200Information Exposure | 89SQL Injection | 399 | 189 | 22Path Traversal | 416Use After Free |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | 1 | 1 | ||||||||
| Canonical | 2 | 3 | 1 | 9 | ||||||
| Opensuse | 5 | 1 | 5 | 1 | 4 | 2 | 1 | 10 | ||
| Red Hat | 6 | 2 | 2 | 2 | 1 | 6 | ||||
| Adobe | 16 | 2 | 1 | 2 | ||||||
| 6 | 4 | 4 | 7 | 3 | 1 | 1 | ||||
| Mozilla | 1 | 1 | 2 | 1 | 9 | |||||
| Suse | 1 | 2 | 1 | 9 | ||||||
| IBM | 3 | 7 | 2 | 1 | ||||||
| Cisco | 5 | 3 | 3 | 2 | ||||||
| MariaDB | 1 | |||||||||
| Apple | 12 | 1 | 2 |