CVE Tools
Track your stack

October 2009

353 CVEs published, −39% on September 2009 and −35% on October 2008. CISA added 0 to KEV.

2009 month by month

2009, month by month. Point at another month to read it.
2009: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2009January 2009: 469 CVEsFebruary 2009: 689 CVEsMarch 2009: 566 CVEsApril 2009: 570 CVEsMay 2009: 367 CVEsJune 2009: 452 CVEsJuly 2009: 449 CVEsAugust 2009: no snapshotSeptember 2009: 576 CVEsOctober 2009: 353 CVEsNovember 2009: 311 CVEsDecember 2009: 445 CVEs5,24711 of 12 months11/12
Critical
9326% of the 353 with a CVSS score
Added to CISA KEV
01 of this month's CVEs are in KEV, listed a median 6063 days after publication
Vendors
182342 products
Top weakness
XSSCWE-79 · 50 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1OracleDatabase Server, E-business Suite, Bea Product Suite374nonenew
  2. 2MicrosoftWindows Server 2008, Windows Vista, Windows Xp2817nonenew
  3. 3AdobeAcrobat, Acrobat Reader25181new
  4. 4MozillaFirefox, Seamonkey1411nonenew
  5. 5LinuxLinux Kernel130nonenew
  6. 6Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Perl127nonenew
  7. 7IBMAix, Informix Client Sdk, Informix Connect Runtime94nonenew
  8. 8CanonicalUbuntu Linux60nonenew
  9. 9FedoraprojectFedora60nonenew
  10. 10PopplerPoppler65nonenew
  11. 11Red HatEnterprise Linux Workstation, Enterprise Linux Server, Red Hat Enterprise Linux62nonenew
  12. 12FoolabsXpdf54nonenew
  13. 13GlyphandcogXpdfreader54nonenew
  14. 14OpensuseOpensuse50nonenew
  15. 15CitrixXencenterweb40nonenew
  16. 16EmcCaptiva Pixtools Distributed Imaging, Documentum Applicationxtender, Documentum Applicationxtender Workflow Manager43nonenew
  17. 17RuncmsRuncms40nonenew
  18. 18SuseLinux Enterprise Server, Linux Enterprise Desktop, Linux Enterprise Software Development Kit40nonenew
  19. 19VMwareFusion, Workstation, Ace40nonenew
  20. 20WiresharkWireshark41nonenew
  21. 21AchievoAchievo30nonenew
  22. 22ApacheHTTP Server, Openoffice.org, Portable Runtime31nonenew
  23. 23AvastAvast Antivirus Professional, Avast Antivirus Home30nonenew
  24. 24FreewebscriptzHubscript, Freelancers30nonenew
  25. 25HPCM8050 Mfp, CM8060 Mfp, Color Laserjet 3000n31nonenew

Severity

How this month's CVEs score on CVSS. Severity is not exploitation.

  • Critical9326%
  • High8023%
  • Medium15945%
  • Low216%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Poppler6#10
  2. Foolabs5#12
  3. Glyphandcog5#13
  4. Emc4#16
  5. Achievo3#21
  6. Freewebscriptz3#24
  7. Kreotek3#26
  8. Maniacomputer3#27
  9. Nullam3#28
  10. Opendocman3#29

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-79XSS50new
  2. CWE-89SQL Injection35new
  3. CWE-119Memory Buffer Bounds32new
  4. CWE-18923new
  5. CWE-94Code Injection20new
  6. CWE-22Path Traversal18new
  7. CWE-20Improper Input Validation16new
  8. CWE-26413new
  9. CWE-39910new
  10. CWE-200Information Exposure9new
  11. CWE-3108new
  12. CWE-352CSRF5new
  13. CWE-134Format String3new
  14. CWE-163new
  15. CWE-287Improper Authentication3new
  16. CWE-2552new
  17. CWE-416Use After Free2new
  18. CWE-476NULL Pointer Dereference2new
  19. CWE-732Incorrect Permissions2new
  20. CWE-120Buffer Overflow1new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store