June 2013
370 CVEs published, +3% on May 2013 and −10% on June 2012. CISA added 0 to KEV.
2013 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2013 | January 2013: 443 CVEs | February 2013: 410 CVEs | March 2013: 446 CVEs | April 2013: 434 CVEs | May 2013: 358 CVEs | June 2013: 370 CVEs | July 2013: 500 CVEs | August 2013: 360 CVEs | September 2013: 475 CVEs | October 2013: 634 CVEs | November 2013: 399 CVEs | December 2013: 495 CVEs | 5,324−1% |
- Critical
- 7521% of the 361 with a CVSS score
- Added to CISA KEV
- 03 of this month's CVEs are in KEV, listed a median 3205 days after publication
- Vendors
- 100351 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 67 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleJre, Jdk, Javafx42141new
- 2SunJre, Jdk34121new
- 3Red HatRed Hat Enterprise Linux, Enterprise Linux, Enterprise Linux Eus2901new
- 4X.orgLibxi, LIBX11, Libxt290nonenew
- 5HPStorage Data Protector, Insight Diagnostics, Service Manager2315nonenew
- 6IBMTivoli Monitoring, Application Manager For Smart Business, Tivoli Netcool Application Service Monitors231nonenew
- 7MicrosoftInternet Explorer, Windows 8, Windows Server 200823201new
- 8AppleMac OS X, iPhone OS, Mac OS X Server201nonenew
- 9DebianDebian Linux2011new
- 10LinuxLinux Kernel201nonenew
- 11CiscoIronport Asyncos, Telepresence Tc Software, Prime Central For Hosted Collaboration Solution192nonenew
- 12MozillaFirefox, Thunderbird, Thunderbird Esr1781new
- 13GoogleChrome, Chrome OS131nonenew
- 14OpensuseOpensuse1201new
- 15HuaweiS3700, S2700, S3300HI113nonenew
- 16WiresharkWireshark100nonenew
- 17CanonicalUbuntu Linux, Ubuntu801new
- 18VanderbiltRedcap82nonenew
- 19Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Linux80nonenew
- 20FfmpegFfmpeg60nonenew
- 21Project-redcapRedcap62nonenew
- 22Digital Alert SystemsDasdec Eas53nonenew
- 23ImpervaSecuresphere50nonenew
- 24LockonEc-cube50nonenew
- 25Monroe ElectronicsR189 One-net Eas53nonenew
Severity
How this month's CVEs score on CVSS; 9 have no score yet. Severity is not exploitation.
- Critical75
- High64
- Medium196
- Low26
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds67
- CWE-20Improper Input Validation38
- CWE-79XSS37
- CWE-26425
- CWE-18922
- CWE-39915
- CWE-200Information Exposure13
- CWE-25513
- CWE-31010
- CWE-89SQL Injection9
- CWE-94Code Injection7
- CWE-22Path Traversal6
- CWE-287Improper Authentication6
- CWE-352CSRF5
- CWE-416Use After Free4
- CWE-134Format String2
- CWE-120Buffer Overflow1
- CWE-171
- CWE-330Insufficient Random Values1
- CWE-362Race Condition1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems14030% of sector-tagged CVEs
- Enterprise Software6815% of sector-tagged CVEs
- Mobile Apps4610% of sector-tagged CVEs
- Databases439% of sector-tagged CVEs
- OSS Libraries419% of sector-tagged CVEs
- Networking Infrastructure266% of sector-tagged CVEs
- Consumer Software245% of sector-tagged CVEs
- Security Products225% of sector-tagged CVEs
- Web & CMS Plugins204% of sector-tagged CVEs
- Not yet classified12
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 20Improper Input Validation | 79XSS | 264 | 189 | 399 | 200Information Exposure | 255 | 310 | 89SQL Injection |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | 1 | |||||||||
| Sun | ||||||||||
| X | 8 | 1 | 17 | |||||||
| HP | 3 | 1 | 1 | 1 | 1 | |||||
| IBM | 6 | 3 | 4 | 2 | 2 | 1 | ||||
| Microsoft | 19 | 1 | 2 | |||||||
| Red Hat Inc. | 7 | 16 | ||||||||
| Apple | 6 | 6 | 1 | 3 | 2 | 1 | ||||
| Debian | 8 | 1 | 2 | 2 | ||||||
| Linux | 4 | 2 | 2 | 4 | ||||||
| Cisco | 5 | 2 | 1 | 4 | 2 | |||||
| Mozilla | 1 | 1 | 8 | 3 | 1 |