CVE Tools
Track your stack

January 2010

319 CVEs published, −28% on December 2009 and −32% on January 2009. CISA added 0 to KEV.

2010 month by month

2010, month by month. Point at another month to read it.
2010: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2010January 2010: 319 CVEsFebruary 2010: 308 CVEsMarch 2010: 515 CVEsApril 2010: 520 CVEsMay 2010: 408 CVEsJune 2010: 493 CVEsJuly 2010: 344 CVEsAugust 2010: 383 CVEsSeptember 2010: 301 CVEsOctober 2010: 435 CVEsNovember 2010: 280 CVEsDecember 2010: 361 CVEs4,667−18%
Critical
6219% of the 319 with a CVSS score
Added to CISA KEV
03 of this month's CVEs are in KEV, listed a median 4529 days after publication
Vendors
172276 products
Top weakness
SQL InjectionCWE-89 · 58 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1OracleDatabase Server, Bea Product Suite, Application Server234nonenew
  2. 2SunJava System Web Server, Iplanet Messaging Server, One Messaging Server163nonenew
  3. 3AdobeAcrobat, Acrobat Reader, Shockwave Player1291new
  4. 4TYPO3Bb Simplejobs, DL3 Tt News Alerts, Job Reports120nonenew
  5. 5MicrosoftInternet Explorer, Windows Xp, Windows 20001172new
  6. 6IBMLotus Inotes, Lotus Domino, DB295nonenew
  7. 7LinuxLinux Kernel91nonenew
  8. 8RealnetworksHelix Player, Realplayer, Realplayer Enterprise99nonenew
  9. 9Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux70nonenew
  10. 10CiscoUnified Meetingplace, IOS XR, Ciscoworks Internetwork Performance Monitor63nonenew
  11. 11DebianDebian Linux51nonenew
  12. 12Red HatEnterprise Linux, Enterprise Linux Desktop, Enterprise Linux Eus50nonenew
  13. 13GnuGzip, Bash, Glibc40nonenew
  14. 14HPPower Manager, Web Jetadmin, Openview Storage Data Protector43nonenew
  15. 15JoomlaCom Artistavenue, Com Casino, Com Dhforum40nonenew
  16. 16MavenOrg.apache.tomcat:tomcat, Org.mortbay.jetty:jetty40nonenew
  17. 17MortbayJetty40nonenew
  18. 18ZenphotoZenphoto40nonenew
  19. 19ApacheTomcat30nonenew
  20. 20AppleMac OS X, Mac OS X Server, Safari30nonenew
  21. 21BitscriptsBits Video Script30nonenew
  22. 22GoogleGoogle Sketchup, Chrome32nonenew
  23. 23ISCBind30nonenew
  24. 24Jce-techPHP Calendars Script30nonenew
  25. 25KingstonDatatraveler Blackbox, Datatraveler Elite, Datatraveler Secure30nonenew

Severity

How this month's CVEs score on CVSS. Severity is not exploitation.

  • Critical6219%
  • High10232%
  • Medium13944%
  • Low165%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Oracle23#1
  2. Sun16#2
  3. Adobe12#3
  4. TYPO312#4
  5. Microsoft11#5
  6. IBM9#6
  7. Linux9#7
  8. Realnetworks9#8
  9. Сообщество Свободного Программного Обеспечения7#9
  10. Cisco6#10

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-89SQL Injection58new
  2. CWE-79XSS53new
  3. CWE-119Memory Buffer Bounds33new
  4. CWE-26421new
  5. CWE-20Improper Input Validation17new
  6. CWE-94Code Injection16new
  7. CWE-200Information Exposure11new
  8. CWE-22Path Traversal11new
  9. CWE-1899new
  10. CWE-2556new
  11. CWE-3996new
  12. CWE-3105new
  13. CWE-164new
  14. CWE-416Use After Free3new
  15. CWE-287Improper Authentication2new
  16. CWE-352CSRF2new
  17. CWE-12841new
  18. CWE-134Format String1new
  19. CWE-1601new
  20. CWE-312Cleartext Storage1new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store