January 2014
579 CVEs published, +17% on December 2013 and +31% on January 2013. CISA added 0 to KEV.
2014 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2014 | January 2014: 579 CVEs | February 2014: 445 CVEs | March 2014: 545 CVEs | April 2014: 676 CVEs | May 2014: 555 CVEs | June 2014: 448 CVEs | July 2014: 656 CVEs | August 2014: 407 CVEs | September 2014: 1,156 CVEs | October 2014: 1,418 CVEs | November 2014: 505 CVEs | December 2014: 618 CVEs | 8,008+50% |
- Critical
- 6311% of the 558 with a CVSS score
- Added to CISA KEV
- 01 of this month's CVEs are in KEV, listed a median 2969 days after publication
- Vendors
- 242597 products
- Top weakness
- XSSCWE-79 · 80 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleJre, Jdk, MySQL12110nonenew
- 2CiscoSecure Access Control System, Context Directory Agent, Mediasense384nonenew
- 3Red HatEnterprise Linux Desktop, Enterprise Linux Workstation, Enterprise Linux Server340nonenew
- 4DebianDebian Linux, Axiom, Localepurge220nonenew
- 5IBMQradar Security Information and Event Manager, Websphere Application Server, Lotus Quickr For Domino211nonenew
- 6HPStorage Data Protector, Jdk, Jre169nonenew
- 7CanonicalUbuntu Linux, Ubuntu150nonenew
- 8GoogleChrome, Picasa151nonenew
- 9Gentoo Foundation Inc.Gentoo Linux142nonenew
- 10LinuxLinux Kernel140nonenew
- 11OpensuseOpensuse130nonenew
- 12MariaDBMariaDB100nonenew
- 13WordPressWordPress100nonenew
- 14PyPINova, Httplib2, Apache-libcloud90nonenew
- 15Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Libxml2, Linux90nonenew
- 16MavenOrg.springframework:spring-oxm, Com.smartbear.soapui:soapui, Com.jamonapi:jamon81nonenew
- 17RubygemsFat_free_crm, Paratrooper-newrelic, Paratrooper-pingdom80nonenew
- 18AdobeAcrobat, Adobe Air Sdk, Acrobat Reader761new
- 19ApacheCloudstack, Ofbiz, Santuario Xml Security For Java70nonenew
- 20SunSunos70nonenew
- 21XenXen70nonenew
- 22AtmailAtmail64nonenew
- 23JuniperJunos, SRX240, SRX10060nonenew
- 24MicrosoftWord, Office Compatibility Pack, Word Viewer63nonenew
- 25VMwareSpring Framework, Esx, ESXi60nonenew
Severity
How this month's CVEs score on CVSS; 21 have no score yet. Severity is not exploitation.
- Critical63
- High82
- Medium337
- Low76
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS80
- CWE-26455
- CWE-20Improper Input Validation46
- CWE-119Memory Buffer Bounds40
- CWE-89SQL Injection24
- CWE-200Information Exposure20
- CWE-352CSRF18
- CWE-22Path Traversal16
- CWE-31014
- CWE-39912
- CWE-25511
- CWE-287Improper Authentication11
- CWE-599
- CWE-416Use After Free5
- CWE-94Code Injection5
- CWE-1894
- CWE-362Race Condition4
- CWE-78OS Command Injection3
- CWE-134Format String2
- CWE-1912
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Databases12920% of sector-tagged CVEs
- Operating Systems10616% of sector-tagged CVEs
- Enterprise Software7211% of sector-tagged CVEs
- Networking Infrastructure6810% of sector-tagged CVEs
- Web & CMS Plugins6710% of sector-tagged CVEs
- OSS Libraries569% of sector-tagged CVEs
- Security Products274% of sector-tagged CVEs
- 7 smaller sectors108
- Not yet classified25
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 264 | 20Improper Input Validation | 119Memory Buffer Bounds | 89SQL Injection | 200Information Exposure | 352CSRF | 22Path Traversal | 310 | 399 |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | 1 | 1 | ||||||||
| Oracle Corp. | 1 | 1 | ||||||||
| Cisco | 8 | 11 | 11 | 1 | 1 | 1 | ||||
| Red Hat | 1 | 6 | 1 | 1 | 1 | 1 | 1 | |||
| Debian | 1 | 1 | 1 | |||||||
| IBM | 3 | 3 | 4 | 2 | 1 | 1 | 1 | 3 | ||
| HP | ||||||||||
| Canonical | 1 | 1 | ||||||||
| 1 | 1 | 4 | 1 | 1 | ||||||
| Linux | 1 | 9 | 1 | 3 | ||||||
| Gentoo Foundation Inc. | 1 | 5 | 2 | |||||||
| Opensuse | 2 | 1 | 1 | 1 |