December 2013
495 CVEs published, +24% on November 2013 and +83% on December 2012. CISA added 0 to KEV.
2013 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2013 | January 2013: 443 CVEs | February 2013: 410 CVEs | March 2013: 446 CVEs | April 2013: 434 CVEs | May 2013: 358 CVEs | June 2013: 370 CVEs | July 2013: 500 CVEs | August 2013: 360 CVEs | September 2013: 475 CVEs | October 2013: 634 CVEs | November 2013: 399 CVEs | December 2013: 495 CVEs | 5,324−1% |
- Critical
- 6012% of the 484 with a CVSS score
- Added to CISA KEV
- 01 of this month's CVEs are in KEV, listed a median 2952 days after publication
- Vendors
- 173553 products
- Top weakness
- XSSCWE-79 · 93 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1IBMSterling B2B Integrator, Sterling File Gateway, Spss Collaboration and Deployment Services480nonenew
- 2FfmpegFfmpeg4616nonenew
- 3CiscoWebex Training Center, Webex Meeting Center, IOS XE380nonenew
- 4Red HatEnterprise Linux Workstation, Enterprise Linux Desktop, Enterprise Linux Server266nonenew
- 5CybozuGaroon, Dezie240nonenew
- 6MicrosoftInternet Explorer, Windows Server 2012, Windows 72481new
- 7Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Linux246nonenew
- 8OpensuseOpensuse, Zypper217nonenew
- 9CanonicalUbuntu Linux, Ubuntu197nonenew
- 10FedoraprojectFedora187nonenew
- 11SuseLinux Enterprise Server, Linux Enterprise Desktop, Suse Linux Enterprise Software Development Kit157nonenew
- 12MozillaFirefox, Seamonkey, Thunderbird137nonenew
- 13AppleSafari, Itunes, Webkit121nonenew
- 14RubygemsActionpack, Sup, Sprout120nonenew
- 15LinuxLinux Kernel110nonenew
- 16NovellSuse Lifecycle Management Server, Identity Manager Roles Based Provisioning Module, Iprint101nonenew
- 17PackagistTypo3/cms-core, Typo3/cms, Joomla/joomla-cms100nonenew
- 18HPService Manager, Service Manager Web Client, Service Manager Web Tier91nonenew
- 19TYPO3TYPO3, Flow90nonenew
- 20ApacheSolr, Roller, Subversion80nonenew
- 21Gentoo Foundation Inc.Gentoo Linux80nonenew
- 22GoogleChrome, V8, Android80nonenew
- 23OracleSolaris, Fusion Middleware71nonenew
- 24DebianDebian Linux, Adequate61nonenew
- 25HotHotbox Router Firmware, Hotbox Router60nonenew
Severity
How this month's CVEs score on CVSS; 11 have no score yet. Severity is not exploitation.
- Critical60
- High70
- Medium302
- Low52
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS93
- CWE-119Memory Buffer Bounds67
- CWE-20Improper Input Validation59
- CWE-26450
- CWE-89SQL Injection23
- CWE-94Code Injection23
- CWE-200Information Exposure21
- CWE-31019
- CWE-352CSRF14
- CWE-287Improper Authentication13
- CWE-18912
- CWE-22Path Traversal12
- CWE-39911
- CWE-416Use After Free4
- CWE-190Integer Overflow3
- CWE-2553
- CWE-78OS Command Injection3
- CWE-362Race Condition2
- CWE-787Out-of-bounds Write2
- CWE-1021Clickjacking1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems12021% of sector-tagged CVEs
- Enterprise Software11019% of sector-tagged CVEs
- OSS Libraries10018% of sector-tagged CVEs
- Networking Infrastructure6111% of sector-tagged CVEs
- Web & CMS Plugins499% of sector-tagged CVEs
- Consumer Software305% of sector-tagged CVEs
- 8 smaller sectors85
- Not yet classified15
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 119Memory Buffer Bounds | 20Improper Input Validation | 264 | 89SQL Injection | 94Code Injection | 200Information Exposure | 310 | 352CSRF | 287Improper Authentication |
|---|---|---|---|---|---|---|---|---|---|---|
| IBM | 16 | 2 | 4 | 6 | 1 | 6 | 2 | 1 | 3 | |
| Ffmpeg | 19 | 7 | ||||||||
| Cisco | 7 | 11 | 4 | 1 | 6 | 1 | 3 | 1 | ||
| Сообщество Свободного Программного Обеспечения | 4 | 6 | 2 | 3 | 1 | 1 | ||||
| Cybozu | 18 | 1 | 1 | 2 | 1 | |||||
| Microsoft | 2 | 7 | 5 | 1 | 1 | 1 | ||||
| Red Hat | 3 | 1 | 1 | 5 | 1 | 1 | 1 | 1 | ||
| Opensuse | 1 | 1 | 1 | 3 | 1 | 2 | 2 | |||
| Canonical | 1 | 2 | 1 | 1 | 1 | 1 | ||||
| Fedoraproject | 1 | 1 | 1 | 1 | 3 | 1 | ||||
| Suse | 1 | 1 | 1 | 1 | 1 | 1 | ||||
| Mozilla | 1 | 1 | 1 | 1 |