CVE Tools
Track your stack

June 2009

452 CVEs published, +23% on May 2009 and +3% on June 2008. CISA added 0 to KEV.

2009 month by month

2009, month by month. Point at another month to read it.
2009: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2009January 2009: 469 CVEsFebruary 2009: 689 CVEsMarch 2009: 566 CVEsApril 2009: 570 CVEsMay 2009: 367 CVEsJune 2009: 452 CVEsJuly 2009: 449 CVEsAugust 2009: no snapshotSeptember 2009: 576 CVEsOctober 2009: 353 CVEsNovember 2009: 311 CVEsDecember 2009: 445 CVEs5,24711 of 12 months11/12
Critical
10122% of the 450 with a CVSS score
Added to CISA KEV
03 of this month's CVEs are in KEV, listed a median 4746 days after publication
Vendors
209322 products
Top weakness
XSSCWE-79 · 72 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1AppleSafari, iPhone OS, Ipod Touch6321nonenew
  2. 2MicrosoftWindows 2000, Office, Internet Explorer35173new
  3. 3IBMWebsphere Application Server, DB2, Rational Clearquest176nonenew
  4. 4AdobeAcrobat, Acrobat Reader, Shockwave Player1616nonenew
  5. 5MozillaFirefox, Seamonkey, Thunderbird168nonenew
  6. 6SunOpensolaris, Solaris, One Web Server154nonenew
  7. 7CanonicalUbuntu Linux80nonenew
  8. 8CiscoAdaptive Security Appliance, Ironport Asyncos, Ironport Email Security Appliances80nonenew
  9. 9ElvinbtsElvinbts80nonenew
  10. 10Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux85nonenew
  11. 11ApacheTomcat, Apr-util, HTTP Server70nonenew
  12. 12DebianDebian Linux60nonenew
  13. 13DokeosDokeos60nonenew
  14. 14DrupalDrupal, Nodequeue, Quiz60nonenew
  15. 15JoomlaJoomla, Com School, Com Casinobase50nonenew
  16. 16OperaOpera Browser, Opera50nonenew
  17. 17TorrenttraderTorrenttrader Classic50nonenew
  18. 18VirtuenetzVirtue News Manager, Virtue Book Store, Virtue Classifieds50nonenew
  19. 19FedoraprojectFedora40nonenew
  20. 20FuzzylimeFuzzylime \(Cms\), Fuzzylime CMS42nonenew
  21. 21Gentoo Foundation Inc.Gentoo Linux40nonenew
  22. 22GoogleChrome42nonenew
  23. 23LinuxLinux Kernel, Kernel40nonenew
  24. 24MavenOrg.apache.tomcat:tomcat40nonenew
  25. 25Red HatOpenSSL, Enterprise Linux Desktop, Enterprise Linux Eus40nonenew

Severity

How this month's CVEs score on CVSS; 2 have no score yet. Severity is not exploitation.

  • Critical10122%
  • High11225%
  • Medium21748%
  • Low204%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Elvinbts8#9
  2. Virtuenetz5#18
  3. Fuzzylime4#20
  4. Aaronoutpost3#26
  5. Campusvirtualcomputrade3#27
  6. Campware.org3#28
  7. David Degner3#30
  8. Php.s33#34
  9. Skybluecanvas3#35
  10. strongSwan3#36

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-79XSS72new
  2. CWE-89SQL Injection63new
  3. CWE-22Path Traversal38new
  4. CWE-119Memory Buffer Bounds34new
  5. CWE-287Improper Authentication30new
  6. CWE-39929new
  7. CWE-94Code Injection26new
  8. CWE-200Information Exposure23new
  9. CWE-26422new
  10. CWE-20Improper Input Validation18new
  11. CWE-18914new
  12. CWE-352CSRF7new
  13. CWE-2555new
  14. CWE-362Race Condition4new
  15. CWE-163new
  16. CWE-3103new
  17. CWE-476NULL Pointer Dereference3new
  18. CWE-78OS Command Injection3new
  19. CWE-787Out-of-bounds Write2new
  20. CWE-9082new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store