CVE Tools
Track your stack

November 2006

514 CVEs published, −7% on October 2006 and −28% on November 2005. CISA added 0 to KEV.

2006 month by month

2006, month by month. Point at another month to read it.
2006: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2006January 2006: 514 CVEsFebruary 2006: 530 CVEsMarch 2006: 590 CVEsApril 2006: 636 CVEsMay 2006: 627 CVEsJune 2006: 651 CVEsJuly 2006: 533 CVEsAugust 2006: 558 CVEsSeptember 2006: 562 CVEsOctober 2006: 554 CVEsNovember 2006: 514 CVEsDecember 2006: 676 CVEs6,945+2%
Critical
326% of the 511 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
337405 products
Top weakness
Memory Buffer BoundsCWE-119 · 13 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1AppleMac OS X, Mac OS X Server, Remote Desktop242nonenew
  2. 2MicrosoftWindows 2000, Windows Xp, Ie141nonenew
  3. 3LinuxLinux Kernel110nonenew
  4. 4Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux91nonenew
  5. 5Gentoo Foundation Inc.Gentoo Linux80nonenew
  6. 6MozillaFirefox, Seamonkey, Thunderbird70nonenew
  7. 7IBMInformix Client Sdk, Informix Dynamic Server, Informix I-connect62nonenew
  8. 8FreebsdFreebsd50nonenew
  9. 9Free PHP ScriptsFree Image Hosting, Free File Hosting50nonenew
  10. 10SapSap Web Application Server, Sap R 350nonenew
  11. 11SunIplanet Messaging Server Messenger Express, Java System Messenger Express, Java System Web Server50nonenew
  12. 12TikiTikiwiki Cms\/groupware50nonenew
  13. 13AiocpAiocp40nonenew
  14. 14CiscoSecure Desktop, Security Agent Management Center40nonenew
  15. 15Dynamic DataworxNucommunity, Nurealestate, Nuschool40nonenew
  16. 16EnlightenmentImlib240nonenew
  17. 17FreewebshopFreewebshop40nonenew
  18. 18GnuGv, Radius, Tar41nonenew
  19. 19GrisoftAvg Antivirus42nonenew
  20. 20NovellEdirectory, Imanager40nonenew
  21. 21PunbbPunbb40nonenew
  22. 22Red HatRed Hat Enterprise Linux, Fedora Core40nonenew
  23. 23Sisfo KampusSisfo Kampus40nonenew
  24. 24SophosAnti-virus, Endpoint Security, Sophos Anti-virus40nonenew
  25. 25XenisXenis.creator CMS40nonenew

Severity

How this month's CVEs score on CVSS; 3 have no score yet. Severity is not exploitation.

  • Critical326%
  • High22845%
  • Medium22744%
  • Low245%

Breakouts

Vendors with at least three times their own 12-month median.

  1. Linux113.7×
  2. Mozilla73.5×

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Free PHP Scripts5#9
  2. Sap5#10
  3. Tiki5#12
  4. Aiocp4#13
  5. Dynamic Dataworx4#15
  6. Freewebshop4#17
  7. Grisoft4#19
  8. Sisfo Kampus4#23
  9. Xenis4#25
  10. 20 20 Applications3#26

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-119Memory Buffer Bounds13new
  2. CWE-79XSS12new
  3. CWE-89SQL Injection11new
  4. CWE-94Code Injection8new
  5. CWE-3997new
  6. CWE-1895new
  7. CWE-22Path Traversal5new
  8. CWE-20Improper Input Validation4new
  9. CWE-400Resource Consumption3new
  10. CWE-200Information Exposure2new
  11. CWE-2642new
  12. CWE-120Buffer Overflow1new
  13. CWE-125Out-of-bounds Read1new
  14. CWE-171new
  15. CWE-190Integer Overflow1new
  16. CWE-3101new
  17. CWE-3691new
  18. CWE-434Unrestricted File Upload1new
  19. CWE-591new
  20. CWE-6171new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store