July 2013
500 CVEs published, +35% on June 2013 and −7% on July 2012. CISA added 0 to KEV.
2013 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2013 | January 2013: 443 CVEs | February 2013: 410 CVEs | March 2013: 446 CVEs | April 2013: 434 CVEs | May 2013: 358 CVEs | June 2013: 370 CVEs | July 2013: 500 CVEs | August 2013: 360 CVEs | September 2013: 475 CVEs | October 2013: 634 CVEs | November 2013: 399 CVEs | December 2013: 495 CVEs | 5,324−1% |
- Critical
- 7315% of the 485 with a CVSS score
- Added to CISA KEV
- 02 of this month's CVEs are in KEV, listed a median 3361 days after publication
- Vendors
- 137493 products
- Top weakness
- XSSCWE-79 · 64 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleMySQL, Peoplesoft Products, Fusion Middleware6841new
- 2CiscoUnified Communications Manager, Secure Access Control System, Intrusion Prevention System4641new
- 3IBMSterling B2B Integrator, Sterling File Gateway, Java4210nonenew
- 4MicrosoftInternet Explorer, Windows Server 2008, Windows 734231new
- 5HPSystem Management Homepage, Loadrunner, VPN Firewall Appliance307nonenew
- 6GoogleChrome, Android Studio, Android242nonenew
- 7Red HatEnterprise Linux, Red Hat Enterprise Linux, Openstack211nonenew
- 8DebianDebian Linux201nonenew
- 9OpensuseOpensuse200nonenew
- 10ApacheStruts, Subversion, Openoffice1961new
- 11WiresharkWireshark170nonenew
- 12CanonicalUbuntu Linux140nonenew
- 13MavenOrg.apache.struts:struts2-core, Org.apache.struts.xwork:xwork-core, Net.liftweb:lift-webkit_2.8.01461new
- 14SunSunos130nonenew
- 15LinuxLinux Kernel120nonenew
- 16PackagistTypo3/cms, Phpmyadmin/phpmyadmin, Moodle/moodle120nonenew
- 17SuseLinux Enterprise Server, Linux Enterprise Desktop, Linux Enterprise Software Development Kit120nonenew
- 18PhpmyadminPhpmyadmin110nonenew
- 19WordPressWordPress110nonenew
- 20MariaDBMariaDB100nonenew
- 21MoodleMoodle100nonenew
- 22SymantecWeb Gateway Appliance 8450, Web Gateway, Web Gateway Appliance 8490100nonenew
- 23Apache Software FoundationStruts, Xerces2 Java851new
- 24IBM Corp.IBM Call Center For Commerce, IBM Java, IBM Platform Symphony851new
- 25SiemensEnterprise Openscape Branch, Openscape Session Border Controller, Scalance W700 Series Firmware82nonenew
Severity
How this month's CVEs score on CVSS; 15 have no score yet. Severity is not exploitation.
- Critical73
- High87
- Medium290
- Low35
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS64
- CWE-26451
- CWE-119Memory Buffer Bounds43
- CWE-94Code Injection31
- CWE-20Improper Input Validation24
- CWE-200Information Exposure23
- CWE-89SQL Injection20
- CWE-39917
- CWE-287Improper Authentication12
- CWE-352CSRF10
- CWE-1899
- CWE-2559
- CWE-3106
- CWE-787Out-of-bounds Write5
- CWE-78OS Command Injection4
- CWE-22Path Traversal3
- CWE-416Use After Free2
- CWE-476NULL Pointer Dereference2
- CWE-122Heap Buffer Overflow1
- CWE-125Out-of-bounds Read1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems12521% of sector-tagged CVEs
- Enterprise Software10217% of sector-tagged CVEs
- Databases8514% of sector-tagged CVEs
- Networking Infrastructure6210% of sector-tagged CVEs
- Web & CMS Plugins6110% of sector-tagged CVEs
- OSS Libraries458% of sector-tagged CVEs
- Security Products417% of sector-tagged CVEs
- Mobile Apps254% of sector-tagged CVEs
- 6 smaller sectors37
- Not yet classified10
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 264 | 119Memory Buffer Bounds | 94Code Injection | 20Improper Input Validation | 200Information Exposure | 89SQL Injection | 399 | 287Improper Authentication | 352CSRF |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | 2 | |||||||||
| Cisco | 10 | 7 | 5 | 1 | 2 | 1 | 3 | 2 | 2 | 3 |
| IBM | 6 | 2 | 2 | 1 | 1 | 9 | 3 | 1 | ||
| Microsoft | 1 | 6 | 3 | 23 | ||||||
| HP | 3 | 2 | 1 | |||||||
| 4 | 4 | 1 | 1 | 5 | ||||||
| Debian | 2 | 2 | 1 | 5 | ||||||
| Opensuse | 1 | 3 | ||||||||
| Apache | 1 | 1 | 1 | 6 | 2 | |||||
| Red Hat | 6 | 1 | 1 | 1 | 1 | 1 | ||||
| Wireshark | 3 | 4 | 3 | |||||||
| Canonical | 1 | 1 |