CVE Tools
Track your stack

July 2009

449 CVEs published, −1% on June 2009 and −14% on July 2008. CISA added 0 to KEV.

2009 month by month

2009, month by month. Point at another month to read it.
2009: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2009January 2009: 469 CVEsFebruary 2009: 689 CVEsMarch 2009: 566 CVEsApril 2009: 570 CVEsMay 2009: 367 CVEsJune 2009: 452 CVEsJuly 2009: 449 CVEsAugust 2009: no snapshotSeptember 2009: 576 CVEsOctober 2009: 353 CVEsNovember 2009: 311 CVEsDecember 2009: 445 CVEs5,24711 of 12 months11/12
Critical
7417% of the 446 with a CVSS score
Added to CISA KEV
02 of this month's CVEs are in KEV, listed a median 5386 days after publication
Vendors
240381 products
Top weakness
SQL InjectionCWE-89 · 75 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1OracleDatabase Server, E-business Suite, Jd Edwards Enterpriseone293nonenew
  2. 2Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux2612nonenew
  3. 3MicrosoftWindows Xp, Internet Explorer, Windows 200020111new
  4. 4SunSolaris, Opensolaris, Ray Server Software181nonenew
  5. 5MozillaFirefox, Thunderbird, Seamonkey1710nonenew
  6. 6XiglaAbsolute Banner Manager.net, Absolute Content Rotator, Absolute Control Panel XE110nonenew
  7. 7AdobeFlash Player, Flex, Air1061new
  8. 8CiscoCatalyst 3750g, Cisco 1500 Wireless Lan Controller, Cisco 2000 Wireless Lan Controller82nonenew
  9. 9AppleSafari, Ipod Touch, Mac OS X72nonenew
  10. 10AxesstelMv 410r71nonenew
  11. 11DatachecknhLinkpal, Sitepal, Gallerypal Fe70nonenew
  12. 12HPProcurve Threat Management Services Zl Module, Openview Network Node Manager, Oncplus71nonenew
  13. 13IBMTivoli Identity Manager, Websphere Application Server, Proventia Network Mail Security System Vitual Appliance71nonenew
  14. 14LinuxLinux Kernel, Kernel70nonenew
  15. 15CanonicalUbuntu Linux60nonenew
  16. 16DebianDebian Linux60nonenew
  17. 17ForkoshMathtex, Mimetex53nonenew
  18. 18GoogleChrome, Android, V852nonenew
  19. 19Max KervinKervinet Forum50nonenew
  20. 20WiresharkWireshark50nonenew
  21. 21WordPressWordPress, WordPress Mu50nonenew
  22. 22Cms.tut.suCMS Chainuk40nonenew
  23. 23FedoraprojectFedora40nonenew
  24. 24HuaweiD100 Firmware, D10041nonenew
  25. 25ISCDhcp, Bind41nonenew

Severity

How this month's CVEs score on CVSS; 3 have no score yet. Severity is not exploitation.

  • Critical7417%
  • High14633%
  • Medium21548%
  • Low112%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Axesstel7#10
  2. Datachecknh7#11
  3. Forkosh5#17
  4. Max Kervin5#19
  5. Cms.tut.su4#22
  6. Huawei4#24
  7. Ordasoft4#26
  8. Avatic3#29
  9. Bistudio3#30
  10. Censura3#31

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-89SQL Injection75new
  2. CWE-79XSS61new
  3. CWE-119Memory Buffer Bounds41new
  4. CWE-26427new
  5. CWE-94Code Injection27new
  6. CWE-22Path Traversal23new
  7. CWE-39921new
  8. CWE-18918new
  9. CWE-20Improper Input Validation18new
  10. CWE-287Improper Authentication18new
  11. CWE-168new
  12. CWE-200Information Exposure7new
  13. CWE-2557new
  14. CWE-787Out-of-bounds Write4new
  15. CWE-362Race Condition3new
  16. CWE-400Resource Consumption3new
  17. CWE-134Format String2new
  18. CWE-295Improper Certificate Validation2new
  19. CWE-3102new
  20. CWE-352CSRF2new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store