CVE Tools
Track your stack

September 2006

562 CVEs published, +1% on August 2006 and +78% on September 2005. CISA added 0 to KEV.

2006 month by month

2006, month by month. Point at another month to read it.
2006: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2006January 2006: 514 CVEsFebruary 2006: 530 CVEsMarch 2006: 590 CVEsApril 2006: 636 CVEsMay 2006: 627 CVEsJune 2006: 651 CVEsJuly 2006: 533 CVEsAugust 2006: 558 CVEsSeptember 2006: 562 CVEsOctober 2006: 554 CVEsNovember 2006: 514 CVEsDecember 2006: 676 CVEs6,945+2%
Critical
244% of the 557 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
334440 products
Top weakness
Code InjectionCWE-94 · 24 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1AppleQuicktime, Mac OS X, Mac OS X Server150nonenew
  2. 2IBMAix, Director, Inventory Scout151nonenew
  3. 3JoomlaRs Gallery2, Classifieds Component, Com Classifieds131nonenew
  4. 4MicrosoftIe, Windows Xp, Office125nonenew
  5. 5MoodleMoodle122nonenew
  6. 6Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux112nonenew
  7. 7CiscoIOS, Network Access Control, Ips Sensor Software101nonenew
  8. 8MozillaFirefox, Seamonkey, Thunderbird92nonenew
  9. 9SunSolaris, Secure Global Desktop, Sunos80nonenew
  10. 10Gentoo Foundation Inc.Gentoo Linux70nonenew
  11. 11IdevspotNixieaffiliate, Phplinkexchange, Isupport70nonenew
  12. 12ComscriptsPhprog, Web Server Creator, Annoncev60nonenew
  13. 13NeosysNeon Webmail60nonenew
  14. 14AdobeColdfusion, Flash Player, Flex Sdk50nonenew
  15. 15Andreas GohrDokuwiki50nonenew
  16. 16David BennettPhp-post50nonenew
  17. 17DrupalDrupal Pathauto Module, Drupal Pubcookie Module, Drupal Userreview Module50nonenew
  18. 18GnuMailman, Gnutls50nonenew
  19. 19GzipGzip50nonenew
  20. 20IpswitchWs Ftp Server, Ipswitch Collaboration Suite, Imail Plus50nonenew
  21. 21LinuxLinux Kernel50nonenew
  22. 22OpenSSLOpenSSL51nonenew
  23. 23SymantecClient Security, Norton Antivirus, Host Ids50nonenew
  24. 24ChxoFeedsplitter40nonenew
  25. 25HPHp-ux40nonenew

Severity

How this month's CVEs score on CVSS; 5 have no score yet. Severity is not exploitation.

  • Critical244%
  • High24644%
  • Medium25946%
  • Low285%

Breakouts

Vendors with at least three times their own 12-month median.

  1. OpenSSL55.0×
  2. Mybulletinboard44.0×
  3. Cisco104.0×
  4. IBM153.8×
  5. Symantec53.3×
  6. Broadcom33.0×
  7. Codeworx Technologies33.0×
  8. Apple153.0×

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Joomla13#3
  2. Idevspot7#11
  3. Comscripts6#12
  4. Neosys6#13
  5. Andreas Gohr5#15
  6. David Bennett5#16
  7. Gzip5#19
  8. Chxo4#24
  9. Jetbox4#26
  10. Jupiter CMS4#27

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-94Code Injection24new
  2. CWE-119Memory Buffer Bounds7new
  3. CWE-3997new
  4. CWE-79XSS7new
  5. CWE-20Improper Input Validation5new
  6. CWE-89SQL Injection5new
  7. CWE-200Information Exposure2new
  8. CWE-22Path Traversal1new
  9. CWE-2641new
  10. CWE-276Incorrect Default Permissions1new
  11. CWE-3101new
  12. CWE-362Race Condition1new
  13. CWE-415Double Free1new
  14. CWE-434Unrestricted File Upload1new
  15. CWE-476NULL Pointer Dereference1new
  16. CWE-6171new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store