CVE Tools
Track your stack

January 2009

469 CVEs published, −12% on December 2008 and −7% on January 2008. CISA added 0 to KEV.

2009 month by month

2009, month by month. Point at another month to read it.
2009: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2009January 2009: 469 CVEsFebruary 2009: 689 CVEsMarch 2009: 566 CVEsApril 2009: 570 CVEsMay 2009: 367 CVEsJune 2009: 452 CVEsJuly 2009: 449 CVEsAugust 2009: no snapshotSeptember 2009: 576 CVEsOctober 2009: 353 CVEsNovember 2009: 311 CVEsDecember 2009: 445 CVEs5,24711 of 12 months11/12
Critical
7215% of the 466 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
256390 products
Top weakness
SQL InjectionCWE-89 · 87 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1OracleSecure Backup, Database 10g, Peoplesoft Enterprise415nonenew
  2. 2SunOpensolaris, Solaris, Java System Access Manager224nonenew
  3. 3MicrosoftWindows Xp, Windows Server 2003, Windows 2000165nonenew
  4. 4Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Libaudiofile164nonenew
  5. 5AppleQuicktime, Safari, Cups148nonenew
  6. 6CiscoIronport Postx, Ironport Encryption Appliance, Ons 15600100nonenew
  7. 7LinuxLinux Kernel71nonenew
  8. 8CodeavalancheArticles, Directory, Freeforall60nonenew
  9. 9Gentoo Foundation Inc.Gentoo Linux60nonenew
  10. 10KatywhittonBlogit\!, Rankem60nonenew
  11. 11ActivewebsoftwaresActive Price Comparison, Active Web Mail, Active Business Directory50nonenew
  12. 12DebianDebian Linux50nonenew
  13. 13GnomeEog, Epiphany, Gnumeric50nonenew
  14. 14IBMDB2 Universal Database, Aix, Hardware Management Console51nonenew
  15. 15ModxcmsModxcms50nonenew
  16. 16TYPO3TYPO3, Freecap Captcha Extension51nonenew
  17. 17Asp-devXm Events Diary, Internal E-mail System40nonenew
  18. 18IcashClick\&email, Click\&rank40nonenew
  19. 19JoomlaCom Paxgallery, Com Pccookbook, Com Waticketsystem40nonenew
  20. 20JoomlahbsHotel Booking Reservation System, Com 5starhotels, Com Allhotels40nonenew
  21. 21MozillaFirefox, Libxul, Seamonkey40nonenew
  22. 22Red HatCertificate System, Dogtag Certificate System, Red Hat Enterprise Linux41nonenew
  23. 23TigrisWebsvn40nonenew
  24. 24CanonicalUbuntu Linux30nonenew
  25. 25ConstructrConstructr-cms30nonenew

Severity

How this month's CVEs score on CVSS; 3 have no score yet. Severity is not exploitation.

  • Critical7215%
  • High15132%
  • Medium22348%
  • Low204%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Codeavalanche6#8
  2. Katywhitton6#10
  3. Activewebsoftwares5#11
  4. Modxcms5#15
  5. TYPO35#16
  6. Asp-dev4#17
  7. Icash4#18
  8. Joomlahbs4#20
  9. Tigris4#23
  10. Constructr3#25

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-89SQL Injection87new
  2. CWE-26449new
  3. CWE-79XSS43new
  4. CWE-119Memory Buffer Bounds42new
  5. CWE-22Path Traversal38new
  6. CWE-20Improper Input Validation29new
  7. CWE-287Improper Authentication25new
  8. CWE-94Code Injection15new
  9. CWE-200Information Exposure11new
  10. CWE-39911new
  11. CWE-1898new
  12. CWE-2556new
  13. CWE-596new
  14. CWE-165new
  15. CWE-3104new
  16. CWE-352CSRF4new
  17. CWE-362Race Condition3new
  18. CWE-426Untrusted Search Path2new
  19. CWE-120Buffer Overflow1new
  20. CWE-134Format String1new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store