CVE Tools
Track your stack

August 2013

360 CVEs published, −28% on July 2013 and −51% on August 2012. CISA added 0 to KEV.

2013 month by month

2013, month by month. Point at another month to read it.
2013: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2013January 2013: 443 CVEsFebruary 2013: 410 CVEsMarch 2013: 446 CVEsApril 2013: 434 CVEsMay 2013: 358 CVEsJune 2013: 370 CVEsJuly 2013: 500 CVEsAugust 2013: 360 CVEsSeptember 2013: 475 CVEsOctober 2013: 634 CVEsNovember 2013: 399 CVEsDecember 2013: 495 CVEs5,324−1%
Critical
4914% of the 357 with a CVSS score
Added to CISA KEV
01 of this month's CVEs are in KEV, listed a median 3107 days after publication
Vendors
151387 products
Top weakness
XSSCWE-79 · 71 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1IBMLotus Domino, Websphere Application Server, Cognos Business Intelligence352nonenew
  2. 2CiscoUnified Communications Manager, Prime Central For Hosted Collaboration Solution Assurance, IOS XR292nonenew
  3. 3MicrosoftInternet Explorer, Windows 7, Windows 81911nonenew
  4. 4PaloaltonetworksPan-os, Netconnect, Globalprotect1913nonenew
  5. 5OpensuseOpensuse160nonenew
  6. 6MozillaFirefox, Seamonkey, Thunderbird155nonenew
  7. 7Red HatEnterprise Virtualization, Enterprise Linux, Jboss Enterprise Application Platform130nonenew
  8. 8ApacheXml Security For C\+\+, Cxf, Ofbiz121nonenew
  9. 9CanonicalUbuntu Linux, Ubuntu120nonenew
  10. 10DebianDebian Linux110nonenew
  11. 11PuppetPuppet Enterprise, Puppet110nonenew
  12. 12XenXen110nonenew
  13. 13BestpracticalRt90nonenew
  14. 14PyPISwift, Pip, Qpid-python90nonenew
  15. 15Gentoo Foundation Inc.Gentoo Linux70nonenew
  16. 16GoogleChrome70nonenew
  17. 17MyrephpMyre Business Directory, Myre Realty Manager, Myre Vacation Rental60nonenew
  18. 18NiLabwindows, Measurementstudio, Labview63nonenew
  19. 19SymantecBackup Exec, Encryption Desktop, Pgp Desktop60nonenew
  20. 20HP3com Router, 5500-24g-4sfp Hi Switch With 2 Interface Slots, 5500-24g Dc Ei Switch52nonenew
  21. 21MavenOrg.apache.cxf:cxf-rt-frontend-jaxrs, Org.apache.cxf:cxf-rt-transports-http, Org.apache.santuario:xmlsec50nonenew
  22. 22PuttyPutty50nonenew
  23. 23Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux50nonenew
  24. 24BigtreecmsBigtree CMS40nonenew
  25. 25BitcoinBitcoin Core, Bitcoind, Bitcoin-qt40nonenew

Severity

How this month's CVEs score on CVSS; 3 have no score yet. Severity is not exploitation.

  • Critical4914%
  • High8123%
  • Medium18452%
  • Low4312%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Paloaltonetworks19#4
  2. Puppet11#11
  3. Xen11#12
  4. Bestpractical9#13
  5. Myrephp6#17
  6. Ni6#18
  7. Putty5#22
  8. Bigtreecms4#24
  9. Bitcoin4#25
  10. Cacti4#26

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-79XSS71new
  2. CWE-119Memory Buffer Bounds47new
  3. CWE-26430new
  4. CWE-20Improper Input Validation28new
  5. CWE-39922new
  6. CWE-89SQL Injection19new
  7. CWE-200Information Exposure18new
  8. CWE-22Path Traversal13new
  9. CWE-31012new
  10. CWE-78OS Command Injection12new
  11. CWE-25511new
  12. CWE-352CSRF11new
  13. CWE-18910new
  14. CWE-94Code Injection7new
  15. CWE-287Improper Authentication6new
  16. CWE-284Improper Access Control2new
  17. CWE-592new
  18. CWE-134Format String1new
  19. CWE-161new
  20. CWE-362Race Condition1new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

The lighter the cell, the more CVEs. Point at one to read it.

August 2013: weakness classes by vendor and by sector: By vendor
By vendor79XSS119Memory Buffer Bounds26420Improper Input Validation39989SQL Injection200Information Exposure22Path Traversal31078OS Command Injection
IBM18221331
Cisco1432911
Microsoft11521
Paloaltonetworks1111112
Opensuse1314111
Mozilla23311
Red Hat1311
Apache23313
Canonical1521
Debian1113111
Puppet232
Xen23111

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store