month report
September 2001
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
September 2001 closed with 490 published CVEs. 31 criticals, microsoft led volume, mostly via internet explorer. Biggest breakout: sgi at ×8.8 their 12-month median. Top weakness class — CWE-20 (2 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
490
— MoM— YoY
Severity mix
31 / 188
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.0%
0 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
—
n=0
Within 7 days
—%
Within 30 days
—%
Days → KEV (median)
—
n=0
Weakness × Vendor
What's spreading where in September 2001
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — September 2001
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #30dec3 CVE
- #373com2 CVE
- #39auto ftp2 CVE
- #40behold software2 CVE
- #42bsd2 CVE
- #43cactus software2 CVE
- #48gftp2 CVE
- #50hummingbird2 CVE
- #51hylafax2 CVE
- #52inso2 CVE
Top vendors
Ranked by distinct CVE count this period.
- 56 CVE3 critCVSS 5.7×3.7PoC 6internet explorer (12) · internet information server (11) · windows nt (10)
- 26 CVE2 critCVSS 6.2×6.5PoC 4sunos (16) · solaris (5) · solstice adminsuite (5)
- 22 CVE1 critCVSS 6.4×8.8PoC 4irix (21) · quake 1 server (1)
- 20 CVE1 critCVSS 5.5×3.6hp-ux (17) · jetdirect (2) · apollo domain os (1)
- 16 CVE1 critCVSS 6.3×5.3ios (6) · resource manager (2) · vpn 3005 concentrator (1)
- 15 CVE2 critCVSS 6.5PoC 4linux (12) · red hat enterprise linux (4)
- 13 CVE1 critCVSS 5.7PoC 1aix (8) · tivoli opc tracker agent (2) · http server ssl module common (1)
- 10 CVE1 critCVSS 5.6PoC 2freebsd (10)
- 9 CVE1 critCVSS 6.7PoC 1mandrake linux (9) · mandrake linux corporate server (1)
- 9 CVECVSS 7.2unix (5) · openserver enterprise system (5) · open desktop (5)
- 9 CVE1 critCVSS 6.6PoC 1slackware linux (9)
- 8 CVECVSS 5.0PoC 2debian linux (8)
- 8 CVE1 critCVSS 6.4PoC 2imail (7) · ws ftp pro (1)
- 8 CVECVSS 5.4PoC 1linux kernel (8)
- 7 CVECVSS 5.8×3.5PoC 1kde (6) · kde beta 3 (1)
- 6 CVECVSS 4.7PoC 3macos (5) · appleshare mail server (1)
- 6 CVECVSS 5.9×3.0unix (3) · ultrix (2) · digital openvms axp (1)
- 5 CVE3 critCVSS 8.5×3.3http server (5)
- 5 CVE1 critCVSS 6.5×5.0PoC 1formhandler.cgi (2) · download.cgi (1) · matt wright guestbook (1)
- 5 CVECVSS 6.0PoC 1communicator (1) · directory server (1) · enterprise server (1)
- 5 CVE1 critCVSS 6.9PoC 1netware (2) · web server (1) · bordermanager (1)
- 5 CVE1 critCVSS 6.4PoC 1http server (2) · web listener (2) · database assistant (1)
- 4 CVECVSS 6.9PoC 1linux (4)
- 4 CVECVSS 5.5quake (1) · quake 2 (1) · quake 2 server (1)
- 4 CVECVSS 4.2shockwave flash plugin (2) · dreamweaver (1) · matrix screen saver (1)
- 4 CVECVSS 4.7openbsd (3) · openssh (1)
- 4 CVE1 critCVSS 8.2PoC 1interscan viruswall (3) · virus buster 2001 (1)
- 3 CVE1 critCVSS 6.7arcserve backup (2) · inoculan (1) · inoculateit (1)
- 3 CVECVSS 7.2PoC 1insight management agent (1) · management agents for servers (1) · microcom 6000 firmware (1)
- 3 CVECVSS 6.5NEWdec openvms (2) · dec openvms axp (1) · dec openvms vax (1)
- 3 CVECVSS 7.2ews (3)
- 3 CVECVSS 5.9icq (1) · icq 98a (1) · icq web front (1)
- 3 CVECVSS 5.1×3.0PoC 1eudora (2) · eudora light (1) · qpopper (1)
- 3 CVECVSS 5.5PoC 1ssh2 (2) · ssh (1)
- 3 CVE1 critCVSS 6.4suse linux (3)
- 3 CVECVSS 3.4imap (1) · imapd (1) · pine (1)
- 2 CVECVSS 7.5NEWsuperstack ii hub (1) · total control netserver card (1)
- 2 CVECVSS 6.3coldfusion (1) · coldfusion server (1)
- 2 CVECVSS 6.0NEWauto ftp (2)
- 2 CVECVSS 5.0NEWPoC 1web page counter (2)
- 2 CVECVSS 7.2patrol agent (2)
- 2 CVECVSS 4.7NEWbsd (2)
- 2 CVECVSS 4.7NEWshell-lock (2)
- 2 CVECVSS 5.0firewall-1 (2)
- 2 CVECVSS 5.0alibaba (1) · csm proxy (1)
- 2 CVECVSS 7.3ipfilter (2)
- 2 CVECVSS 6.0elm (2)
- 2 CVECVSS 6.0NEWftp client (1) · gftp (1)
- 2 CVECVSS 5.9bash (1) · fingerd (1)
- 2 CVECVSS 6.3NEWexceed (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 56 | 3 | · | · | ×3.7PoC 6 | internet explorer (12) · internet information server (11) · windows nt (10) | — | |
| 2 | sun | 26 | 2 | · | · | ×6.5PoC 4 | sunos (16) · solaris (5) · solstice adminsuite (5) | — | |
| 3 | sgi | 22 | 1 | · | · | ×8.8PoC 4 | irix (21) · quake 1 server (1) | — | |
| 4 | hp | 20 | 1 | · | · | ×3.6 | hp-ux (17) · jetdirect (2) · apollo domain os (1) | — | |
| 5 | cisco | 16 | 1 | · | · | ×5.3 | ios (6) · resource manager (2) · vpn 3005 concentrator (1) | — | |
| 6 | redhat | 15 | 2 | · | · | PoC 4 | linux (12) · red hat enterprise linux (4) | — | |
| 7 | ibm | 13 | 1 | · | · | PoC 1 | aix (8) · tivoli opc tracker agent (2) · http server ssl module common (1) | — | |
| 8 | freebsd | 10 | 1 | · | · | PoC 2 | freebsd (10) | — | |
| 9 | mandrakesoft | 9 | 1 | · | · | PoC 1 | mandrake linux (9) · mandrake linux corporate server (1) | — | |
| 10 | sco | 9 | · | · | · | unix (5) · openserver enterprise system (5) · open desktop (5) | — | ||
| 11 | slackware | 9 | 1 | · | · | PoC 1 | slackware linux (9) | — | |
| 12 | debian | 8 | · | · | · | PoC 2 | debian linux (8) | — | |
| 13 | ipswitch | 8 | 1 | · | · | PoC 2 | imail (7) · ws ftp pro (1) | — | |
| 14 | linux | 8 | · | · | · | PoC 1 | linux kernel (8) | — | |
| 15 | kde | 7 | · | · | · | ×3.5PoC 1 | kde (6) · kde beta 3 (1) | — | |
| 16 | apple | 6 | · | · | · | PoC 3 | macos (5) · appleshare mail server (1) | — | |
| 17 | digital | 6 | · | · | · | ×3.0 | unix (3) · ultrix (2) · digital openvms axp (1) | — | |
| 18 | apache | 5 | 3 | · | · | ×3.3 | http server (5) | — | |
| 19 | matt wright | 5 | 1 | · | · | ×5.0PoC 1 | formhandler.cgi (2) · download.cgi (1) · matt wright guestbook (1) | — | |
| 20 | netscape | 5 | · | · | · | PoC 1 | communicator (1) · directory server (1) · enterprise server (1) | — | |
| 21 | novell | 5 | 1 | · | · | PoC 1 | netware (2) · web server (1) · bordermanager (1) | — | |
| 22 | oracle | 5 | 1 | · | · | PoC 1 | http server (2) · web listener (2) · database assistant (1) | — | |
| 23 | conectiva | 4 | · | · | · | PoC 1 | linux (4) | — | |
| 24 | id software | 4 | · | · | · | quake (1) · quake 2 (1) · quake 2 server (1) | — | ||
| 25 | macromedia | 4 | · | · | · | shockwave flash plugin (2) · dreamweaver (1) · matrix screen saver (1) | — | ||
| 26 | openbsd | 4 | · | · | · | openbsd (3) · openssh (1) | — | ||
| 27 | trendmicro | 4 | 1 | · | · | PoC 1 | interscan viruswall (3) · virus buster 2001 (1) | — | |
| 28 | broadcom | 3 | 1 | · | · | arcserve backup (2) · inoculan (1) · inoculateit (1) | — | ||
| 29 | compaq | 3 | · | · | · | PoC 1 | insight management agent (1) · management agents for servers (1) · microcom 6000 firmware (1) | — | |
| 30 | dec | 3 | · | · | · | NEW | dec openvms (2) · dec openvms axp (1) · dec openvms vax (1) | — | |
| 31 | excite | 3 | · | · | · | ews (3) | — | ||
| 32 | mirabilis | 3 | · | · | · | icq (1) · icq 98a (1) · icq web front (1) | — | ||
| 33 | qualcomm | 3 | · | · | · | ×3.0PoC 1 | eudora (2) · eudora light (1) · qpopper (1) | — | |
| 34 | ssh | 3 | · | · | · | PoC 1 | ssh2 (2) · ssh (1) | — | |
| 35 | suse | 3 | 1 | · | · | suse linux (3) | — | ||
| 36 | university of washington | 3 | · | · | · | imap (1) · imapd (1) · pine (1) | — | ||
| 37 | 3com | 2 | · | · | · | NEW | superstack ii hub (1) · total control netserver card (1) | — | |
| 38 | allaire | 2 | · | · | · | coldfusion (1) · coldfusion server (1) | — | ||
| 39 | auto ftp | 2 | · | · | · | NEW | auto ftp (2) | — | |
| 40 | behold software | 2 | · | · | · | NEWPoC 1 | web page counter (2) | — | |
| 41 | bmc | 2 | · | · | · | patrol agent (2) | — | ||
| 42 | bsd | 2 | · | · | · | NEW | bsd (2) | — | |
| 43 | cactus software | 2 | · | · | · | NEW | shell-lock (2) | — | |
| 44 | checkpoint | 2 | · | · | · | firewall-1 (2) | — | ||
| 45 | computer software manufaktur | 2 | · | · | · | alibaba (1) · csm proxy (1) | — | ||
| 46 | darren reed | 2 | · | · | · | ipfilter (2) | — | ||
| 47 | elm development group | 2 | · | · | · | elm (2) | — | ||
| 48 | gftp | 2 | · | · | · | NEW | ftp client (1) · gftp (1) | — | |
| 49 | gnu | 2 | · | · | · | bash (1) · fingerd (1) | — | ||
| 50 | hummingbird | 2 | · | · | · | NEW | exceed (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems197 CVE15 crit29 vendorsCVSS 6.3irix (21) · sunos (16) · freebsd (10)
- 5 crit35 vendorsCVSS 8.1ios (6) · resource manager (2) · aironet 340 (1)
- Enterprise Software54 CVE5 crit14 vendorsCVSS 8.3hp-ux (17) · aix (8) · imail (7)
- Communications28 CVE1 crit18 vendorsCVSS 7.5ews (3) · internet anywhere mail server (2) · emailclub (1)
- Web & CMS Plugins28 CVE5 crit18 vendorsCVSS 7.5http server (5) · formhandler.cgi (2) · web page counter (2)
- Consumer Software28 CVE16 vendorsCVSS 6.3shockwave flash plugin (2) · cddbd (1) · dreamweaver (1)
- Security Products17 CVE1 crit11 vendorsCVSS 7.5interscan viruswall (3) · immunix (1) · inoculan anti-virus server (1)
- OSS Libraries12 CVE8 vendorsCVSS 6.3bash (1) · expressfs (1) · fingerd (1)
- Hardware Firmware8 CVE5 crit6 vendorsCVSS 8.1eudora (2) · eudora light (1) · qpopper (1)
- Databases7 CVE1 crit3 vendorsCVSS 7.5http server (2) · web listener (2) · database assistant (1)
- Mobile Apps7 CVE2 vendorsCVSS 6.4macos (5) · appleshare mail server (1)
- Cloud & SaaS5 CVE1 crit2 vendorsCVSS 6.7arcserve backup (2) · inoculan (1) · inoculateit (1)
- ICS / OT / IoT2 CVE5 crit1 vendorsCVSS 9.0nh2012 (1) · nh2012r (1) · nh2015 (1)
- DevTools & CI1 CVE1 vendorsCVSS 2.1gcc (1)
- Unclassified36 CVE33 vendorsCVSS 5.6elm (2) · exceed (2) · tiger (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 197 | 15 | · | 29 | 79 | 6.3 | irix (21) · sunos (16) · freebsd (10) |
| Networking Infrastructure▸ 5 | 58 | 5 | · | 35 | 61 | 8.1 | ios (6) · resource manager (2) · aironet 340 (1) |
| Enterprise Software▸ 5 | 54 | 5 | · | 14 | 23 | 8.3 | hp-ux (17) · aix (8) · imail (7) |
| Communications▸ 3 | 28 | 1 | · | 18 | 23 | 7.5 | ews (3) · internet anywhere mail server (2) · emailclub (1) |
| Web & CMS Plugins▸ 5 | 28 | 5 | · | 18 | 22 | 7.5 | http server (5) · formhandler.cgi (2) · web page counter (2) |
| Consumer Software▸ 5 | 28 | · | · | 16 | 27 | 6.3 | shockwave flash plugin (2) · cddbd (1) · dreamweaver (1) |
| Security Products▸ 5 | 17 | 1 | · | 11 | 13 | 7.5 | interscan viruswall (3) · immunix (1) · inoculan anti-virus server (1) |
| OSS Libraries▸ 2 | 12 | · | · | 8 | 11 | 6.3 | bash (1) · expressfs (1) · fingerd (1) |
| Hardware Firmware▸ 4 | 8 | 5 | · | 6 | 13 | 8.1 | eudora (2) · eudora light (1) · qpopper (1) |
| Databases▸ 2 | 7 | 1 | · | 3 | 5 | 7.5 | http server (2) · web listener (2) · database assistant (1) |
| Mobile Apps▸ 1 | 7 | · | · | 2 | 3 | 6.4 | macos (5) · appleshare mail server (1) |
| Cloud & SaaS▸ 2 | 5 | 1 | · | 2 | 5 | 6.7 | arcserve backup (2) · inoculan (1) · inoculateit (1) |
| ICS / OT / IoT▸ 1 | 2 | 5 | · | 1 | 7 | 9.0 | nh2012 (1) · nh2012r (1) · nh2015 (1) |
| DevTools & CI▸ 1 | 1 | · | · | 1 | 1 | 2.1 | gcc (1) |
| Unclassified | 36 | · | · | 33 | 34 | 5.6 | elm (2) · exceed (2) · tiger (2) |
Weakness × Sector
Which weaknesses hit which solution categories in September 2001
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
20Improper Input Validation120Buffer Overflow131Incorrect Buffer Size200Information Exposure209Error Message Info Leak264CWE-264307Excessive Auth Attempts310CWE-310346CWE-346401CWE-401Operating Systems111Networking Infrastructure11111Consumer Software1CommunicationsWeb & CMS Plugins1Enterprise Software1OSS Libraries111Security ProductsHardware Firmware1Databases