April 2013
434 CVEs published, −3% on March 2013 and +90% on April 2012. CISA added 0 to KEV.
2013 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2013 | January 2013: 443 CVEs | February 2013: 410 CVEs | March 2013: 446 CVEs | April 2013: 434 CVEs | May 2013: 358 CVEs | June 2013: 370 CVEs | July 2013: 500 CVEs | August 2013: 360 CVEs | September 2013: 475 CVEs | October 2013: 634 CVEs | November 2013: 399 CVEs | December 2013: 495 CVEs | 5,324−1% |
- Critical
- 6615% of the 430 with a CVSS score
- Added to CISA KEV
- 02 of this month's CVEs are in KEV, listed a median 3383.5 days after publication
- Vendors
- 106400 products
- Top weakness
- CWE-26438 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleJre, Jdk, MySQL137231new
- 2CiscoAdaptive Security Appliance Software, Unified Computing System Infrastructure and Unified Computing System Software, Unified Computing System 6248up Fabric Interconnect477nonenew
- 3SunJdk, Jre, Sunos3912nonenew
- 4Red HatEnterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server3101new
- 5IBMWebsphere Application Server, Spss Samplepower, Tririga Application Platform286nonenew
- 6LinuxLinux Kernel2601new
- 7MariaDBMariaDB190nonenew
- 8MicrosoftWindows Vista, Windows Server 2008, Windows 8143nonenew
- 9RubygemsActiverecord, Crack, Devise143nonenew
- 10Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux140nonenew
- 11MozillaFirefox, Seamonkey, Thunderbird135nonenew
- 12CanonicalUbuntu Linux, Ubuntu1101new
- 13OpensuseOpensuse1011new
- 14AdobeShockwave Player, Flash Player, Adobe Air97nonenew
- 15Gentoo Foundation Inc.Gentoo Linux90nonenew
- 16Schneider-electricModicon M340, Modicon Premium, Modicon Quantum Plc72nonenew
- 17GoogleChrome OS, Authenticator61nonenew
- 18NovellImanager, Suse Linux Enterprise Desktop, Groupwise52nonenew
- 19PhpmyadminPhpmyadmin50nonenew
- 20PostgresqlPostgresql52nonenew
- 21ApacheActivemq, Maven40nonenew
- 22ChatelaoPHP Address Book40nonenew
- 23CogentdatahubCogent Datahub, Opc Datahub, Datahub Quicktrend40nonenew
- 24HPColor Laserjet 3000, Color Laserjet 3800, Color Laserjet 470040nonenew
- 25IthemesBackupbuddy40nonenew
Severity
How this month's CVEs score on CVSS; 4 have no score yet. Severity is not exploitation.
- Critical66
- High69
- Medium243
- Low52
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-26438
- CWE-119Memory Buffer Bounds37
- CWE-200Information Exposure31
- CWE-20Improper Input Validation26
- CWE-79XSS26
- CWE-352CSRF12
- CWE-287Improper Authentication10
- CWE-362Race Condition7
- CWE-3997
- CWE-165
- CWE-2555
- CWE-89SQL Injection5
- CWE-94Code Injection5
- CWE-1893
- CWE-22Path Traversal3
- CWE-3103
- CWE-78OS Command Injection2
- CWE-12841
- CWE-190Integer Overflow1
- CWE-284Improper Access Control1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 264 | 119Memory Buffer Bounds | 200Information Exposure | 20Improper Input Validation | 79XSS | 352CSRF | 287Improper Authentication | 362Race Condition | 399 | 16 |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | 1 | |||||||||
| Cisco | 5 | 8 | 3 | 13 | 3 | 3 | 2 | |||
| Sun | ||||||||||
| Red Hat | 4 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | ||
| IBM | 3 | 4 | 1 | 10 | 1 | 1 | 1 | |||
| Linux | 4 | 18 | 1 | 1 | ||||||
| MariaDB | ||||||||||
| Microsoft | 1 | 1 | 3 | 1 | 4 | 2 | ||||
| Rubygems | 3 | 1 | 4 | 1 | 1 | |||||
| Сообщество Свободного Программного Обеспечения | 1 | 11 | 1 | |||||||
| Mozilla | 2 | 2 | 1 | 1 | ||||||
| Canonical | 1 | 3 | 1 |