CVE Tools
Track your stack

September 2009

576 CVEs published, +27% on September 2008. CISA added 0 to KEV.

2009 month by month

2009, month by month. Point at another month to read it.
2009: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2009January 2009: 469 CVEsFebruary 2009: 689 CVEsMarch 2009: 566 CVEsApril 2009: 570 CVEsMay 2009: 367 CVEsJune 2009: 452 CVEsJuly 2009: 449 CVEsAugust 2009: no snapshotSeptember 2009: 576 CVEsOctober 2009: 353 CVEsNovember 2009: 311 CVEsDecember 2009: 445 CVEs5,24711 of 12 months11/12
Critical
10218% of the 574 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
338485 products
Top weakness
SQL InjectionCWE-89 · 93 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1AppleMac OS X Server, Mac OS X, iPhone OS295nonenew
  2. 2IBMWebsphere Application Server, Websphere Mq, DB2233nonenew
  3. 3MozillaFirefox, Bugzilla1610nonenew
  4. 4CiscoIOS, Nexus 7000, Ace Web Application Firewall140nonenew
  5. 5MicrosoftWindows Vista, Windows Server 2008, Windows 2000136nonenew
  6. 6OperaOpera Browser100nonenew
  7. 7LinuxLinux Kernel90nonenew
  8. 8SunOpensolaris, Solaris, Openoffice.org91nonenew
  9. 9Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux92nonenew
  10. 10HPPerformance Insight, Operations Manager, Storageworks MSL8096 Tape Library83nonenew
  11. 11SymantecAltiris Deployment Solution, Antivirus, Brightmail Appliance83nonenew
  12. 12OracleApplication Server, E-business Suite, E-business Suite 11i71nonenew
  13. 13VtigerVtiger Crm72nonenew
  14. 14AlmondsoftAlmond Classifieds, Com Aclassf, Affiliate Network Classifieds50nonenew
  15. 15AnantasoftGazelle CMS50nonenew
  16. 16BpowerhouseBpgames, Bpholidaylettings, Bplawyercasedocuments50nonenew
  17. 17CanonicalUbuntu Linux51nonenew
  18. 18FedoraprojectFedora50nonenew
  19. 19GoogleChrome50nonenew
  20. 20Jce-techAffiliate Master Datafeed Parser, Auction Rss Content Script, PHP Calendars Script50nonenew
  21. 21Red HatRed Hat Enterprise Linux52nonenew
  22. 22SuseLinux Enterprise Server, Linux Enterprise Desktop, Linux Enterprise50nonenew
  23. 23ZenasPaolink, Pao-bacheca Guestbook, Paobacheca Guestbook51nonenew
  24. 24AdobeAcrobat, Acrobat Reader, Photoshop Elements42nonenew
  25. 25BrilapsMostlyce40nonenew

Severity

How this month's CVEs score on CVSS; 2 have no score yet. Severity is not exploitation.

  • Critical10218%
  • High18132%
  • Medium27448%
  • Low173%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Vtiger7#13
  2. Almondsoft5#14
  3. Anantasoft5#15
  4. Bpowerhouse5#16
  5. Jce-tech5#20
  6. Zenas5#23
  7. Brilaps4#25
  8. Horde4#27
  9. Mambo-foundation4#28
  10. Pidgin4#31

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-89SQL Injection93new
  2. CWE-79XSS92new
  3. CWE-119Memory Buffer Bounds60new
  4. CWE-26437new
  5. CWE-94Code Injection35new
  6. CWE-22Path Traversal23new
  7. CWE-20Improper Input Validation17new
  8. CWE-39917new
  9. CWE-31015new
  10. CWE-287Improper Authentication14new
  11. CWE-200Information Exposure12new
  12. CWE-352CSRF12new
  13. CWE-134Format String7new
  14. CWE-1894new
  15. CWE-2553new
  16. CWE-362Race Condition3new
  17. CWE-400Resource Consumption3new
  18. CWE-732Incorrect Permissions3new
  19. CWE-3382new
  20. CWE-78OS Command Injection2new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store