May 2014
555 CVEs published, −18% on April 2014 and +55% on May 2013. CISA added 0 to KEV.
2014 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2014 | January 2014: 579 CVEs | February 2014: 445 CVEs | March 2014: 545 CVEs | April 2014: 676 CVEs | May 2014: 555 CVEs | June 2014: 448 CVEs | July 2014: 656 CVEs | August 2014: 407 CVEs | September 2014: 1,156 CVEs | October 2014: 1,418 CVEs | November 2014: 505 CVEs | December 2014: 618 CVEs | 8,008+50% |
- Critical
- 428% of the 550 with a CVSS score
- Added to CISA KEV
- 03 of this month's CVEs are in KEV, listed a median 2879 days after publication
- Vendors
- 251602 products
- Top weakness
- CWE-26486 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1CiscoTelepresence Tc Software, Telepresence Te Software, Telepresence System Software618nonenew
- 2IBMMaximo Asset Management, Sametime, Smartcloud Control Desk570nonenew
- 3AppleSafari, Itunes, Mac OS X210nonenew
- 4PyPIProducts.cmfplone, Pywbem, Soappy200nonenew
- 5Red HatRed Hat Enterprise Linux, Rhevm-reports, Enterprise Linux Eus2002new
- 6CanonicalUbuntu Linux, Ltsp Display Manager, Software-properties1911new
- 7GoogleChrome, Google Chrome, Android160nonenew
- 8AdobeAcrobat, Acrobat Reader, Adobe Reader159nonenew
- 9MicrosoftWindows Server 2012 R2, Windows Server 2012, Windows Server 20081561new
- 10DebianDebian Linux, Dpkg, Dpkg-dev1401new
- 11ApacheTomcat, Cloudstack, Cxf120nonenew
- 12Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Linux1201new
- 13MavenOrg.apache.tomcat:tomcat, Org.apache.tomcat:tomcat-coyote, Org.apache.tomcat:tomcat-catalina110nonenew
- 14PackagistMoodle/moodle, Typo3/cms, Typo3/cms-core100nonenew
- 15Gentoo Foundation Inc.Gentoo Linux91nonenew
- 16MediawikiMediawiki90nonenew
- 17OpensuseOpensuse90nonenew
- 18OracleLinux, Openjdk, Solaris921new
- 19TheforemanForeman, Kafo90nonenew
- 20RubygemsOmniauth-facebook, Actionpack, Arabic-prawn811new
- 21CitrixCloudplatform, Netscaler Access Gateway, Netscaler Access Gateway Firmware72nonenew
- 22LinuxLinux Kernel701new
- 23Apache Software FoundationTomcat, Struts60nonenew
- 24FedoraprojectFedora60nonenew
- 25GitLabGitLab, Gitlab-shell60nonenew
Severity
How this month's CVEs score on CVSS; 5 have no score yet. Severity is not exploitation.
- Critical42
- High100
- Medium345
- Low63
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-26486
- CWE-79XSS72
- CWE-20Improper Input Validation64
- CWE-119Memory Buffer Bounds57
- CWE-352CSRF29
- CWE-200Information Exposure27
- CWE-287Improper Authentication26
- CWE-31025
- CWE-89SQL Injection20
- CWE-94Code Injection20
- CWE-22Path Traversal17
- CWE-39917
- CWE-18912
- CWE-2559
- CWE-597
- CWE-78OS Command Injection5
- CWE-190Integer Overflow4
- CWE-400Resource Consumption3
- CWE-122Heap Buffer Overflow2
- CWE-362Race Condition2
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Enterprise Software11518% of sector-tagged CVEs
- Operating Systems9515% of sector-tagged CVEs
- OSS Libraries8513% of sector-tagged CVEs
- Networking Infrastructure7411% of sector-tagged CVEs
- Web & CMS Plugins7311% of sector-tagged CVEs
- Mobile Apps376% of sector-tagged CVEs
- Consumer Software315% of sector-tagged CVEs
- 7 smaller sectors110
- Not yet classified27
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 264 | 79XSS | 20Improper Input Validation | 119Memory Buffer Bounds | 352CSRF | 200Information Exposure | 287Improper Authentication | 310 | 89SQL Injection | 94Code Injection |
|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | 6 | 4 | 29 | 9 | 2 | 1 | 2 | 1 | 1 | 2 |
| IBM | 9 | 16 | 4 | 3 | 9 | 2 | 1 | 1 | ||
| Apple | 1 | 1 | 18 | 1 | ||||||
| PyPI | 3 | 2 | 4 | 1 | 4 | 1 | 2 | |||
| Canonical | 5 | 3 | 1 | 1 | ||||||
| Red Hat | 5 | 1 | 2 | 3 | 1 | |||||
| 2 | 1 | 1 | 1 | |||||||
| Adobe | 6 | 6 | 1 | |||||||
| Microsoft | 2 | 1 | 3 | 2 | 1 | 3 | ||||
| Adobe Systems Inc. | 6 | 5 | 1 | |||||||
| Debian | 1 | 1 | 1 | |||||||
| Microsoft Corp | 2 | 1 | 2 | 2 | 1 | 3 |