CVE Tools
Track your stack

January 2006

514 CVEs published, −26% on December 2005 and 2.9× January 2005. CISA added 0 to KEV.

2006 month by month

2006, month by month. Point at another month to read it.
2006: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2006January 2006: 514 CVEsFebruary 2006: 530 CVEsMarch 2006: 590 CVEsApril 2006: 636 CVEsMay 2006: 627 CVEsJune 2006: 651 CVEsJuly 2006: 533 CVEsAugust 2006: 558 CVEsSeptember 2006: 562 CVEsOctober 2006: 554 CVEsNovember 2006: 514 CVEsDecember 2006: 676 CVEs6,945+2%
Critical
4910% of the 509 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
326463 products
Top weakness
SQL InjectionCWE-89 · 19 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1OracleDatabase Server, Application Server, E-business Suite4033nonenew
  2. 2LinuxLinux Kernel162nonenew
  3. 3Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux140nonenew
  4. 4BeaWeblogic Server120nonenew
  5. 5AppleQuicktime, Airport Express, Airport Extreme80nonenew
  6. 6MicrosoftWindows Xp, Windows 2000, Windows 2003 Server82nonenew
  7. 7CiscoCall Manager, Aironet AP1230AG, Aironet AP1240AG70nonenew
  8. 8FreebsdFreebsd71nonenew
  9. 9Red HatRed Hat Enterprise Linux, Enterprise Linux Desktop, Fedora Core73nonenew
  10. 10Gentoo Foundation Inc.Gentoo Linux61nonenew
  11. 11IBMLotus Domino, Lotus Domino Enterprise Server, Lotus Notes61nonenew
  12. 12RockliffeMailsite61nonenew
  13. 13SunSolaris, Sunos, Grid Engine60nonenew
  14. 14XpdfXpdf61nonenew
  15. 15GentooLinux, App-crypt Pinentry, Nview51nonenew
  16. 16MybulletinboardMybulletinboard50nonenew
  17. 17PHPPHP, Pear51nonenew
  18. 18SuseSuse Linux51nonenew
  19. 19KdeKdegraphics, Koffice, Kpdf41nonenew
  20. 20RimBlackberry Enterprise Server, Blackberry Desktop Manager, Blackberry Device Software40nonenew
  21. 21ScoOpenserver41nonenew
  22. 22UbuntuUbuntu Linux41nonenew
  23. 23427bbFourtwosevenbb30nonenew
  24. 24BluecoatWebproxy, Winproxy, Proxyav30nonenew
  25. 25BroadcomBrightstor Arcserve Backup Laptops Desktops, Unicenter Remote Control, Brightstor Mobile Backup31nonenew

Severity

How this month's CVEs score on CVSS; 5 have no score yet. Severity is not exploitation.

  • Critical4910%
  • High17534%
  • Medium25550%
  • Low306%

Breakouts

Vendors with at least three times their own 12-month median.

  1. Cisco77.0×
  2. Freebsd77.0×
  3. Xpdf66.0×
  4. Kde44.0×
  5. Trustix33.0×

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Rockliffe6#12
  2. Mybulletinboard5#16
  3. Rim4#20
  4. 427bb3#23
  5. Citypost3#27
  6. E-post Corporation3#31
  7. Hummingbird3#32
  8. Incogen3#33
  9. John Lim3#34
  10. Joomla3#35

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-89SQL Injection19new
  2. CWE-119Memory Buffer Bounds14new
  3. CWE-39913new
  4. CWE-79XSS9new
  5. CWE-94Code Injection7new
  6. CWE-1895new
  7. CWE-134Format String4new
  8. CWE-20Improper Input Validation3new
  9. CWE-200Information Exposure3new
  10. CWE-22Path Traversal3new
  11. CWE-287Improper Authentication2new
  12. CWE-2641new
  13. CWE-3101new
  14. CWE-591new
  15. CWE-770Allocation Without Limits1new
  16. CWE-78OS Command Injection1new
  17. CWE-801new
  18. CWE-8241new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store