CVE Tools
Track your stack

March 2009

566 CVEs published, −18% on February 2009 and +8% on March 2008. CISA added 0 to KEV.

2009 month by month

2009, month by month. Point at another month to read it.
2009: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2009January 2009: 469 CVEsFebruary 2009: 689 CVEsMarch 2009: 566 CVEsApril 2009: 570 CVEsMay 2009: 367 CVEsJune 2009: 452 CVEsJuly 2009: 449 CVEsAugust 2009: no snapshotSeptember 2009: 576 CVEsOctober 2009: 353 CVEsNovember 2009: 311 CVEsDecember 2009: 445 CVEs5,24711 of 12 months11/12
Critical
9116% of the 553 with a CVSS score
Added to CISA KEV
02 of this month's CVEs are in KEV, listed a median 4750.5 days after publication
Vendors
354654 products
Top weakness
SQL InjectionCWE-89 · 97 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1SunOpensolaris, Java System Identity Manager, Solaris439nonenew
  2. 2IBMWebsphere Application Server, Tivoli Storage Manager, Director207nonenew
  3. 3MozillaFirefox, Seamonkey, Thunderbird139nonenew
  4. 4CiscoIOS, Cisco IOS, IOS XR122nonenew
  5. 5Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Linux, Nss-ldap1241new
  6. 6DrupalDrupal, Print, PLUS1111nonenew
  7. 7DebianDebian Linux, Horde, Horde Groupware1011new
  8. 8MicrosoftWindows Server 2003, Windows 2000, Windows Server 2008102nonenew
  9. 9LinuxLinux Kernel80nonenew
  10. 10HPLaserjet 9500mfp, Color Laserjet 5500, Color Laserjet 555071nonenew
  11. 11Novell Inc.Opensuse, Suse Linux Enterprise70nonenew
  12. 12OsgeoMapserver75nonenew
  13. 13Red HatRed Hat Enterprise Linux, Cman, Enterprise Linux Workstation71nonenew
  14. 14UmnMapserver75nonenew
  15. 15AdobeAcrobat Reader, Acrobat, Reader541new
  16. 16BookelvesKipper50nonenew
  17. 17Ocean12techMembership Manager Pro, Contact Manager Pro, Faq Manager Pro50nonenew
  18. 18OpensuseOpensuse50nonenew
  19. 19AppleItunes, Safari42nonenew
  20. 20Brian WilsonOl\'bookmarks40nonenew
  21. 21CanonicalUbuntu Linux, Ubuntu411new
  22. 22DnnsoftwareDotnetnuke40nonenew
  23. 23Gentoo Foundation Inc.Gentoo Linux40nonenew
  24. 24IgniterealtimeOpenfire40nonenew
  25. 25MavenBouncycastle:bcprov-jdk14, Bouncycastle:bcprov-jdk15, Bouncycastle:bcprov-jdk1641nonenew

Severity

How this month's CVEs score on CVSS; 13 have no score yet. Severity is not exploitation.

  • Critical9116%
  • High17632%
  • Medium27349%
  • Low132%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Osgeo7#12
  2. Umn7#14
  3. Bookelves5#16
  4. Ocean12tech5#17
  5. Brian Wilson4#20
  6. Dnnsoftware4#22
  7. Igniterealtime4#24
  8. Adserversolutions3#30
  9. Apachefriends3#32
  10. Chaozz3#33

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-89SQL Injection97new
  2. CWE-79XSS77new
  3. CWE-119Memory Buffer Bounds47new
  4. CWE-20Improper Input Validation47new
  5. CWE-26446new
  6. CWE-94Code Injection34new
  7. CWE-39928new
  8. CWE-22Path Traversal25new
  9. CWE-287Improper Authentication15new
  10. CWE-200Information Exposure14new
  11. CWE-18912new
  12. CWE-352CSRF11new
  13. CWE-134Format String7new
  14. CWE-166new
  15. CWE-2555new
  16. CWE-594new
  17. CWE-3103new
  18. CWE-78OS Command Injection3new
  19. CWE-190Integer Overflow2new
  20. CWE-362Race Condition2new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store