April 2015
558 CVEs published, +22% on March 2015 and −17% on April 2014. CISA added 0 to KEV.
2015 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2015 | January 2015: 737 CVEs | February 2015: 496 CVEs | March 2015: 457 CVEs | April 2015: 558 CVEs | May 2015: 417 CVEs | June 2015: 499 CVEs | July 2015: 644 CVEs | August 2015: 625 CVEs | September 2015: 499 CVEs | October 2015: 739 CVEs | November 2015: 368 CVEs | December 2015: 567 CVEs | 6,606−18% |
- Critical
- 6111% of the 538 with a CVSS score
- Added to CISA KEV
- 07 of this month's CVEs are in KEV, listed a median 2508 days after publication
- Vendors
- 171469 products
- Top weakness
- XSSCWE-79 · 61 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleMySQL, Solaris, Jre877nonenew
- 2AppleiPhone OS, Mac OS X, tvOS7611new
- 3CanonicalUbuntu Linux, Ubuntu522nonenew
- 4DebianDebian Linux, Dbd-firebird, Dpkg513nonenew
- 5OpensuseOpensuse, Evergreen48211new
- 6Red HatEnterprise Linux Workstation Supplementary, Enterprise Linux Server Supplementary Eus, Enterprise Linux Server Supplementary39191new
- 7CiscoUnity Connection, IOS XE, Unified Communications Domain Manager3821new
- 8SuseSuse Linux Enterprise Desktop, Suse Linux Workstation Extension, Linux Enterprise Server3618nonenew
- 9MicrosoftInternet Explorer, Windows Server 2008, Windows Server 2012 R227143new
- 10AdobeFlash Player, Coldfusion24201new
- 11IBMWebsphere Application Server, Domino, Tivoli Storage Manager Fastback235nonenew
- 12GoogleChrome, Google Chrome, V8200nonenew
- 13MozillaFirefox, Thunderbird, Firefox Esr190nonenew
- 14FedoraprojectFedora121nonenew
- 15MediawikiMediawiki, Scribunto, Checkuser120nonenew
- 16HPSystem Management Homepage, Easy Tools, Capture and Route Software103nonenew
- 17NovellSuse Linux Enterprise Desktop, Suse Linux Enterprise Server, Suse Linux Enterprise Software Development Kit1021new
- 18SapNetweaver Enterprise Portal, Mobile Platform, Afaria100nonenew
- 19MariaDBMariaDB80nonenew
- 20ApacheSubversion, Flex, Openoffice70nonenew
- 21InductiveautomationIgnition60nonenew
- 22GnuGlibc, Mailman, Libtasn152nonenew
- 23JuniperJunos, Junos Space50nonenew
- 24MagentoMagento50nonenew
- 25XenXen50nonenew
Severity
How this month's CVEs score on CVSS; 20 have no score yet. Severity is not exploitation.
- Critical61
- High96
- Medium305
- Low76
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS61
- CWE-200Information Exposure56
- CWE-26445
- CWE-352CSRF32
- CWE-119Memory Buffer Bounds31
- CWE-20Improper Input Validation30
- CWE-39925
- CWE-1718
- CWE-22Path Traversal12
- CWE-284Improper Access Control10
- CWE-3109
- CWE-89SQL Injection8
- CWE-197
- CWE-2544
- CWE-362Race Condition4
- CWE-94Code Injection4
- CWE-1893
- CWE-2553
- CWE-287Improper Authentication3
- CWE-787Out-of-bounds Write3
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems14822% of sector-tagged CVEs
- Mobile Apps9715% of sector-tagged CVEs
- Databases9414% of sector-tagged CVEs
- Web & CMS Plugins599% of sector-tagged CVEs
- Networking Infrastructure568% of sector-tagged CVEs
- Enterprise Software548% of sector-tagged CVEs
- Consumer Software518% of sector-tagged CVEs
- 7 smaller sectors80
- Not yet classified22
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 200Information Exposure | 264 | 352CSRF | 119Memory Buffer Bounds | 20Improper Input Validation | 399 | 17 | 22Path Traversal | 284Improper Access Control |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | 1 | 2 | 1 | |||||||
| Apple | 19 | 4 | 5 | 15 | 1 | 2 | 1 | 3 | ||
| Canonical | 1 | 8 | 10 | 1 | 6 | 2 | 2 | |||
| Debian | 3 | 7 | 11 | 1 | 3 | 1 | 2 | |||
| Opensuse | 3 | 5 | 5 | 1 | 2 | 5 | 1 | |||
| Oracle Corp. | ||||||||||
| Red Hat | 2 | 1 | 2 | 1 | 1 | 1 | 1 | |||
| Cisco | 5 | 1 | 3 | 3 | 6 | 8 | 1 | 2 | ||
| Suse | 2 | 1 | 1 | |||||||
| Microsoft | 3 | 6 | 1 | 8 | ||||||
| Adobe | 1 | 3 | 1 | |||||||
| IBM | 2 | 4 | 4 | 1 | 3 | 1 | 1 | 1 |