| Year | CVEs |
|---|---|
| 2019 | 807 |
| 2018 | 672 |
| 2017 | 698 |
| 2016 | 491 |
| 2015 | 568 |
| 2014 | 374 |
| 2013 | 345 |
| 2012 | 172 |
| 2011 | 253 |
| 2010 | 317 |
| Month-Year | CVEs |
|---|---|
| 12-2019 | 0 |
| 11-2019 | 69 |
| 10-2019 | 57 |
| 09-2019 | 81 |
| 08-2019 | 88 |
| 07-2019 | 78 |
| 06-2019 | 88 |
| 05-2019 | 80 |
| 04-2019 | 137 |
| 03-2019 | 77 |
| 02-2019 | 0 |
| 01-2019 | 52 |
| CVSS Range | CVEs |
|---|---|
| CVSS < 3 | 79 |
| 3 < CVSS <= 5 | 250 |
| 5 < CVSS <= 7.5 | 192 |
| CVSS > 7.5 | 286 |
| Vector | CVEs |
|---|---|
| NETWORK | 543 |
| LOCAL | 239 |
| ADJACENT_NETWORK | 25 |
| Complexity | CVEs |
|---|---|
| LOW | 351 |
| MEDIUM | 330 |
| HIGH | 126 |
| Authentication | CVEs |
|---|---|
| NONE | 697 |
| SINGLE_INSTANCE | 99 |
| SINGLE | 11 |
| MULTIPLE_INSTANCES | 0 |
| Confidentiality | CVEs |
|---|---|
| COMPLETE | 379 |
| PARTIAL | 298 |
| NONE | 130 |
| Integrity | CVEs |
|---|---|
| COMPLETE | 380 |
| NONE | 222 |
| PARTIAL | 205 |
| Availability | CVEs |
|---|---|
| COMPLETE | 413 |
| NONE | 258 |
| PARTIAL | 136 |
| # | CVEs | CWE ID | CWE Name |
|---|---|---|---|
| #1 | 246 | 119 | Improper Restriction of Operations within the Bounds of a Memory Buffer |
| #2 | 140 | 200 | Information Exposure |
| #3 | 117 | 264 | Permissions, Privileges, and Access Controls |
| #4 | 86 | 20 | Improper Input Validation |
| #5 | 33 | 79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| #6 | 29 | 269 | Improper Privilege Management |
| #7 | 22 | 254 | Security Features |
| #8 | 16 | 19 | Data Handling |
| #9 | 9 | 611 | Improper Restriction of XML External Entity Reference ('XXE') |
| #10 | 6 | 284 | Improper Access Control |
