October 2015
739 CVEs published, +48% on September 2015 and −48% on October 2014. CISA added 0 to KEV.
2015 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2015 | January 2015: 737 CVEs | February 2015: 496 CVEs | March 2015: 457 CVEs | April 2015: 558 CVEs | May 2015: 417 CVEs | June 2015: 499 CVEs | July 2015: 644 CVEs | August 2015: 625 CVEs | September 2015: 499 CVEs | October 2015: 739 CVEs | November 2015: 368 CVEs | December 2015: 567 CVEs | 6,606−18% |
- Critical
- 14720% of the 736 with a CVSS score
- Added to CISA KEV
- 02 of this month's CVEs are in KEV, listed a median 2328 days after publication
- Vendors
- 139399 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 142 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1OracleSolaris, MySQL, Jdk130161new
- 2AppleMac OS X, iPhone OS, OS X1158nonenew
- 3AdobeAcrobat Reader, Acrobat Reader Dc, Adobe Acrobat82291new
- 4GoogleAndroid, Chrome, Google Chrome7448nonenew
- 5IBMWebsphere Extreme Scale, Openpages Grc Platform, Tivoli Service Request Manager444nonenew
- 6CiscoSecure Access Control Server, Cisco Secure Access Control System, Adaptive Security Appliance Software361nonenew
- 7Red HatEnterprise Linux Workstation, Enterprise Linux Server, Enterprise Linux Desktop3502new
- 8MicrosoftInternet Explorer, Windows Vista, Windows 73114nonenew
- 9CanonicalUbuntu Linux, Ubuntu250nonenew
- 10DebianDebian Linux220nonenew
- 11FedoraprojectFedora, 389 Directory Server, Sssd210nonenew
- 12OpensuseOpensuse, Leap, Evergreen2002new
- 13MariaDBMariaDB170nonenew
- 14OwncloudOwncloud, Owncloud Server, Owncloud Desktop Client124nonenew
- 15SapSap Hana, Hana, 3d Visual Enterprise Viewer111nonenew
- 16JuniperJunos, Pulse Connect Secure, Screenos100nonenew
- 17Revive-adserverRevive Adserver100nonenew
- 18LinuxLinux Kernel90nonenew
- 19XenXen80nonenew
- 20Ао «лаборатория Касперского»Kaspersky Anti-virus87nonenew
- 21Infinite Automation SystemsMango Automation70nonenew
- 22JanitzaUmg 508, Umg 509, Umg 51171nonenew
- 23Janitza Electronics GmbhJanitza Umg 509, Janitza Umg 508, Janitza Umg 51171nonenew
- 24JenkinsJenkins70nonenew
- 25MavenOrg.jenkins-ci.main:jenkins-core, Org.apache.httpcomponents:httpclient70nonenew
Severity
How this month's CVEs score on CVSS; 3 have no score yet. Severity is not exploitation.
- Critical147
- High104
- Medium397
- Low88
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds142
- CWE-26464
- CWE-200Information Exposure60
- CWE-79XSS43
- CWE-20Improper Input Validation30
- CWE-39930
- CWE-89SQL Injection20
- CWE-18919
- CWE-25415
- CWE-284Improper Access Control15
- CWE-416Use After Free15
- CWE-1712
- CWE-22Path Traversal11
- CWE-352CSRF10
- CWE-7727
- CWE-94Code Injection6
- CWE-77Command Injection5
- CWE-2554
- CWE-362Race Condition4
- CWE-190Integer Overflow3
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Mobile Apps19023% of sector-tagged CVEs
- Databases14017% of sector-tagged CVEs
- Operating Systems9712% of sector-tagged CVEs
- Consumer Software8711% of sector-tagged CVEs
- Enterprise Software7910% of sector-tagged CVEs
- Networking Infrastructure547% of sector-tagged CVEs
- ICS / OT / IoT344% of sector-tagged CVEs
- 7 smaller sectors124
- Not yet classified10
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 264 | 200Information Exposure | 79XSS | 20Improper Input Validation | 399 | 89SQL Injection | 189 | 254 | 284Improper Access Control |
|---|---|---|---|---|---|---|---|---|---|---|
| Oracle | 2 | 1 | ||||||||
| Apple | 61 | 8 | 15 | 1 | 6 | 2 | 5 | 2 | ||
| Oracle Corp. | 1 | |||||||||
| Adobe | 15 | 5 | ||||||||
| Adobe Systems Inc. | 15 | 5 | ||||||||
| Google Inc | 25 | 14 | 1 | 5 | 17 | 1 | 4 | |||
| 25 | 13 | 1 | 5 | 17 | 1 | 4 | ||||
| Apple Inc. | 15 | 5 | 14 | 1 | 4 | 1 | 4 | 1 | ||
| IBM | 2 | 5 | 8 | 13 | 2 | 1 | 2 | |||
| Cisco | 1 | 9 | 3 | 4 | 3 | 12 | 4 | |||
| Red Hat | 1 | 3 | 2 | 5 | 1 | 1 | ||||
| Microsoft | 7 | 5 | 6 | 3 | 1 |