CVE Tools
Track your stack

August 2006

558 CVEs published, +5% on July 2006 and −4% on August 2005. CISA added 0 to KEV.

2006 month by month

2006, month by month. Point at another month to read it.
2006: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2006January 2006: 514 CVEsFebruary 2006: 530 CVEsMarch 2006: 590 CVEsApril 2006: 636 CVEsMay 2006: 627 CVEsJune 2006: 651 CVEsJuly 2006: 533 CVEsAugust 2006: 558 CVEsSeptember 2006: 562 CVEsOctober 2006: 554 CVEsNovember 2006: 514 CVEsDecember 2006: 676 CVEs6,945+2%
Critical
265% of the 554 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
301458 products
Top weakness
Code InjectionCWE-94 · 17 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1MicrosoftIe, Internet Explorer, Windows 2000285nonenew
  2. 2AppleMac OS X, Mac OS X Server, Xsan191nonenew
  3. 3IBMInformix Dynamic Server, Websphere Application Server, Informix Dynamic Database Server191nonenew
  4. 4JoomlaJoomla\!, Joomla, Jim Instant Messaging Component180nonenew
  5. 5MamboMambo Gallery Manager, Artlinks Component, Bayesiannaivefilter151nonenew
  6. 6SunSolaris, Java, Sunos152nonenew
  7. 7Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux100nonenew
  8. 8PHPPHP93nonenew
  9. 9DrupalBibliography Module, Drupal, Drupal Easylinks Module80nonenew
  10. 10KnusperleichtFaq, Knusperleicht Filemanager, Knusperleicht Guestbook70nonenew
  11. 11LibtiffLibtiff70nonenew
  12. 12CiscoPix Firewall 515, Pix Firewall 520, Pix Firewall 52560nonenew
  13. 13Gentoo Foundation Inc.Gentoo Linux60nonenew
  14. 14LinuxLinux Kernel60nonenew
  15. 15JetboxJetbox CMS50nonenew
  16. 16MySQLMySQL, Maxdb51nonenew
  17. 17MyweblandMyevent, Mybloggie, Minibloggie50nonenew
  18. 18SOFT330404webserver50nonenew
  19. 19SymantecBrightmail Antispam, Enterprise Security Manager, Norton Personal Firewall50nonenew
  20. 20VwarVirtual War50nonenew
  21. 21Barracuda NetworksBarracuda Spam Firewall40nonenew
  22. 22CanonicalUbuntu Linux41nonenew
  23. 23ChaossoftGaestechaos, Geheimchaos40nonenew
  24. 24CybozuCybozu Office, Cybozu Pocket, Collaborex40nonenew
  25. 25DieselscriptsDiesel Job Site, Diesel Paid Mail, Diesel Pay40nonenew

Severity

How this month's CVEs score on CVSS; 4 have no score yet. Severity is not exploitation.

  • Critical265%
  • High25045%
  • Medium23943%
  • Low397%

Breakouts

Vendors with at least three times their own 12-month median.

  1. PHP99.0×
  2. Libtiff77.0×
  3. Mywebland55.0×
  4. Sony44.0×
  5. Canonical44.0×
  6. IBM193.8×
  7. Symantec53.3×
  8. Deluxebb33.0×

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Joomla18#4
  2. Knusperleicht7#10
  3. Jetbox5#15
  4. Mywebland5#17
  5. Vwar5#20
  6. Chaossoft4#23
  7. Cybozu4#24
  8. Dieselscripts4#25
  9. Mamboxchange4#27
  10. Sony4#29

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-94Code Injection17new
  2. CWE-119Memory Buffer Bounds13new
  3. CWE-2648new
  4. CWE-20Improper Input Validation7new
  5. CWE-3996new
  6. CWE-89SQL Injection6new
  7. CWE-79XSS5new
  8. CWE-1893new
  9. CWE-200Information Exposure3new
  10. CWE-287Improper Authentication3new
  11. CWE-22Path Traversal1new
  12. CWE-2551new
  13. CWE-416Use After Free1new
  14. CWE-434Unrestricted File Upload1new
  15. CWE-591new
  16. CWE-787Out-of-bounds Write1new
  17. CWE-862Missing Authorization1new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store