month report
September 2006
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
September 2006 closed with 562 published CVEs. 24 criticals, apple led volume, mostly via quicktime. Biggest breakout: openssl at ×5.0 their 12-month median. Top weakness class — CWE-94 (24 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
562
— MoM— YoY
Severity mix
24 / 246
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.2%
1 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
7113.9
n=1
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
—
n=0
Weakness × Vendor
What's spreading where in September 2006
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
94Code Injection119Memory Buffer Bounds399CWE-39979XSS20Improper Input Validation89SQL Injection200Information Exposure22Path Traversal264CWE-264276Incorrect Default Permissionsapple1ibmjoomla1microsoft231moodle21сообщество свободного программного обеспечения1111cisco12mozilla111sunidevspotcomscriptsneosys
Most discussed CVEs — September 2006
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
- 5.0×openssl5 CVE
- 4.0×mybulletinboard4 CVE
- 4.0×cisco10 CVE
- 3.8×ibm15 CVE
- 3.3×symantec5 CVE
- 3.0×broadcom3 CVE
- 3.0×codeworx technologies3 CVE
- 3.0×apple15 CVE
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #3joomla13 CVE
- #11idevspot7 CVE
- #12comscripts6 CVE
- #13neosys6 CVE
- #15andreas gohr5 CVE
- #16david bennett5 CVE
- #19gzip5 CVE
- #24chxo4 CVE
- #26jetbox4 CVE
- #27jupiter cms4 CVE
Top vendors
Ranked by distinct CVE count this period.
- 15 CVECVSS 6.3×3.0PoC 2quicktime (8) · mac os x (7) · mac os x server (6)
- 15 CVE1 critCVSS 6.3×3.8PoC 1aix (10) · director (3) · inventory scout (1)
- 13 CVE1 critCVSS 7.6NEWPoC 2rs gallery2 (2) · classifieds component (1) · com classifieds (1)
- 12 CVE5 critCVSS 7.4PoC 4ie (4) · windows xp (3) · office (3)
- 12 CVE2 critCVSS 5.7moodle (12)
- 11 CVE2 critCVSS 5.9debian gnu/linux (11)
- 10 CVE1 critCVSS 6.3×4.0ios (5) · network access control (2) · ips sensor software (2)
- 9 CVE2 critCVSS 5.4firefox (7) · seamonkey (6) · thunderbird (6)
- 8 CVECVSS 6.6solaris (5) · secure global desktop (2) · sunos (2)
- 7 CVECVSS 6.3PoC 2gentoo linux (7)
- 7 CVECVSS 5.2NEWnixieaffiliate (2) · phplinkexchange (2) · isupport (1)
- 6 CVECVSS 7.0NEWPoC 3phprog (2) · web server creator (2) · annoncev (1)
- 6 CVECVSS 7.0NEWPoC 2neon webmail (6)
- 5 CVECVSS 4.9PoC 1coldfusion (3) · flash player (2) · flex sdk (1)
- 5 CVECVSS 6.5NEWPoC 1dokuwiki (5)
- 5 CVECVSS 5.4NEWPoC 1php-post (5)
- 5 CVECVSS 5.9drupal pathauto module (1) · drupal pubcookie module (1) · drupal userreview module (1)
- 5 CVECVSS 5.4mailman (4) · gnutls (1)
- 5 CVECVSS 6.5NEWgzip (5)
- 5 CVECVSS 6.9PoC 1ws ftp server (4) · ipswitch collaboration suite (1) · imail plus (1)
- 5 CVECVSS 6.1linux kernel (5)
- 5 CVE1 critCVSS 6.8×5.0PoC 1openssl (5)
- 5 CVECVSS 5.2×3.3PoC 1client security (3) · norton antivirus (3) · host ids (1)
- 4 CVECVSS 6.1NEWfeedsplitter (4)
- 4 CVECVSS 4.7hp-ux (4)
- 4 CVECVSS 5.7NEWjetbox cms (4)
- 4 CVECVSS 5.5NEWjupiter cms (4)
- 4 CVECVSS 7.3NEWPoC 4jacome php-revista (4)
- 4 CVECVSS 5.9×4.0PoC 1mybulletinboard (4)
- 4 CVECVSS 6.5PoC 2openssh (4)
- 4 CVECVSS 5.7NEWPoC 3siteatschool (4)
- 4 CVECVSS 6.5NEWPoC 4softbb (4)
- 4 CVECVSS 6.0NEWPoC 1newsscript (4)
- 3 CVECVSS 6.9NEWPoC 3php blue dragon (3)
- 3 CVECVSS 6.0×3.0etrust security command center (3) · etrust audit policy manager (1) · etrust audit client (1)
- 3 CVECVSS 5.6NEW×3.0PoC 2dcp-portal (3)
- 3 CVECVSS 4.8cubecart (3)
- 3 CVECVSS 5.5PoC 1e107 (3)
- 3 CVECVSS 5.6NEWPoC 2bandsite cms (3)
- 3 CVECVSS 5.0NEWadodb (2) · adodb date library (1)
- 3 CVECVSS 7.3PoC 1com comprofiler component (1) · jim component (1) · prince clan chess component (1)
- 3 CVECVSS 6.4NEWmembrepass (3)
- 3 CVECVSS 6.7PoC 1suse linux enterprise (2) · opensuse (1)
- 3 CVE3 critCVSS 9.9NEWsimple http scanner (3)
- 3 CVECVSS 5.7NEWpanda platinum internet security (3)
- 3 CVECVSS 5.6NEWwili-cms (3)
- 3 CVECVSS 4.8NEWPoC 2vcap (3)
- 3 CVECVSS 6.0NEWws ftp server (3)
- 3 CVE2 critCVSS 9.2NEWPoC 1sips (3)
- 3 CVECVSS 6.7NEWmysource classic (2) · mysource matrix (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | apple | 15 | · | · | · | ×3.0PoC 2 | quicktime (8) · mac os x (7) · mac os x server (6) | — | |
| 2 | ibm | 15 | 1 | · | · | ×3.8PoC 1 | aix (10) · director (3) · inventory scout (1) | — | |
| 3 | joomla | 13 | 1 | · | · | NEWPoC 2 | rs gallery2 (2) · classifieds component (1) · com classifieds (1) | — | |
| 4 | microsoft | 12 | 5 | · | · | PoC 4 | ie (4) · windows xp (3) · office (3) | — | |
| 5 | moodle | 12 | 2 | · | · | moodle (12) | — | ||
| 6 | сообщество свободного программного обеспечения | 11 | 2 | · | · | debian gnu/linux (11) | — | ||
| 7 | cisco | 10 | 1 | · | · | ×4.0 | ios (5) · network access control (2) · ips sensor software (2) | — | |
| 8 | mozilla | 9 | 2 | · | · | firefox (7) · seamonkey (6) · thunderbird (6) | — | ||
| 9 | sun | 8 | · | · | · | solaris (5) · secure global desktop (2) · sunos (2) | — | ||
| 10 | gentoo foundation inc. | 7 | · | · | · | PoC 2 | gentoo linux (7) | — | |
| 11 | idevspot | 7 | · | · | · | NEW | nixieaffiliate (2) · phplinkexchange (2) · isupport (1) | — | |
| 12 | comscripts | 6 | · | · | · | NEWPoC 3 | phprog (2) · web server creator (2) · annoncev (1) | — | |
| 13 | neosys | 6 | · | · | · | NEWPoC 2 | neon webmail (6) | — | |
| 14 | adobe | 5 | · | · | · | PoC 1 | coldfusion (3) · flash player (2) · flex sdk (1) | — | |
| 15 | andreas gohr | 5 | · | · | · | NEWPoC 1 | dokuwiki (5) | — | |
| 16 | david bennett | 5 | · | · | · | NEWPoC 1 | php-post (5) | — | |
| 17 | drupal | 5 | · | · | · | drupal pathauto module (1) · drupal pubcookie module (1) · drupal userreview module (1) | — | ||
| 18 | gnu | 5 | · | · | · | mailman (4) · gnutls (1) | — | ||
| 19 | gzip | 5 | · | · | · | NEW | gzip (5) | — | |
| 20 | ipswitch | 5 | · | · | · | PoC 1 | ws ftp server (4) · ipswitch collaboration suite (1) · imail plus (1) | — | |
| 21 | linux | 5 | · | · | · | linux kernel (5) | — | ||
| 22 | openssl | 5 | 1 | · | · | ×5.0PoC 1 | openssl (5) | — | |
| 23 | symantec | 5 | · | · | · | ×3.3PoC 1 | client security (3) · norton antivirus (3) · host ids (1) | — | |
| 24 | chxo | 4 | · | · | · | NEW | feedsplitter (4) | — | |
| 25 | hp | 4 | · | · | · | hp-ux (4) | — | ||
| 26 | jetbox | 4 | · | · | · | NEW | jetbox cms (4) | — | |
| 27 | jupiter cms | 4 | · | · | · | NEW | jupiter cms (4) | — | |
| 28 | longino | 4 | · | · | · | NEWPoC 4 | jacome php-revista (4) | — | |
| 29 | mybulletinboard | 4 | · | · | · | ×4.0PoC 1 | mybulletinboard (4) | — | |
| 30 | openbsd | 4 | · | · | · | PoC 2 | openssh (4) | — | |
| 31 | siteatschool | 4 | · | · | · | NEWPoC 3 | siteatschool (4) | — | |
| 32 | softbb | 4 | · | · | · | NEWPoC 4 | softbb (4) | — | |
| 33 | stefan ernst | 4 | · | · | · | NEWPoC 1 | newsscript (4) | — | |
| 34 | blue dragon | 3 | · | · | · | NEWPoC 3 | php blue dragon (3) | — | |
| 35 | broadcom | 3 | · | · | · | ×3.0 | etrust security command center (3) · etrust audit policy manager (1) · etrust audit client (1) | — | |
| 36 | codeworx technologies | 3 | · | · | · | NEW×3.0PoC 2 | dcp-portal (3) | — | |
| 37 | devellion | 3 | · | · | · | cubecart (3) | — | ||
| 38 | e107 | 3 | · | · | · | PoC 1 | e107 (3) | — | |
| 39 | grayscale | 3 | · | · | · | NEWPoC 2 | bandsite cms (3) | — | |
| 40 | john lim | 3 | · | · | · | NEW | adodb (2) · adodb date library (1) | — | |
| 41 | mambo | 3 | · | · | · | PoC 1 | com comprofiler component (1) · jim component (1) · prince clan chess component (1) | — | |
| 42 | membrepass | 3 | · | · | · | NEW | membrepass (3) | — | |
| 43 | novell inc. | 3 | · | · | · | PoC 1 | suse linux enterprise (2) · opensuse (1) | — | |
| 44 | paisterist | 3 | 3 | · | · | NEW | simple http scanner (3) | — | |
| 45 | panda security | 3 | · | · | · | NEW | panda platinum internet security (3) | — | |
| 46 | patrick michaelis | 3 | · | · | · | NEW | wili-cms (3) | — | |
| 47 | paul smith computer services | 3 | · | · | · | NEWPoC 2 | vcap (3) | — | |
| 48 | progress | 3 | · | · | · | NEW | ws ftp server (3) | — | |
| 49 | sips | 3 | 2 | · | · | NEWPoC 1 | sips (3) | — | |
| 50 | squiz | 3 | · | · | · | NEW | mysource classic (2) · mysource matrix (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins210 CVE5 crit121 vendorsCVSS 6.6moodle (12) · dokuwiki (5) · jacome php-revista (4)
- Enterprise Software59 CVE2 crit26 vendorsCVSS 7.4aix (10) · hp-ux (4) · ws ftp server (4)
- Operating Systems56 CVE10 crit18 vendorsCVSS 7.4debian gnu/linux (11) · gentoo linux (7) · linux kernel (5)
- OSS Libraries32 CVE2 crit15 vendorsCVSS 7.5openssl (5) · php-post (5) · mailman (4)
- 2 crit11 vendorsCVSS 10.0ios (5) · ips sensor software (2) · network access control (2)
- Consumer Software23 CVE5 crit7 vendorsCVSS 7.5firefox (7) · seamonkey (6) · thunderbird (6)
- Security Products20 CVE3 crit12 vendorsCVSS 8.6client security (3) · norton antivirus (3) · panda platinum internet security (3)
- Mobile Apps16 CVE2 vendorsCVSS 6.3quicktime (8) · mac os x (7) · mac os x server (6)
- Communications16 CVE10 vendorsCVSS 7.5neon webmail (6) · mailenable enterprise (1) · mailenable professional (1)
- Cloud & SaaS8 CVE5 vendorsCVSS 6.9etrust security command center (3) · access gateway (1) · etrust audit client (1)
- DevTools & CI2 CVE2 vendorsCVSS 5.7webmin (1) · xampp (1)
- ICS / OT / IoT2 CVE2 vendorsCVSS 7.8deluxebb (1)
- Hardware Firmware2 CVE2 vendorsCVSS 7.5imagerunner 2620 (1) · imagerunner 5020 (1) · imagerunner 6870 (1)
- Unclassified84 CVE4 crit60 vendorsCVSS 6.2jupiter cms (4) · sips (3) · tr forum (3)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 5 | 210 | 5 | · | 121 | 147 | 6.6 | moodle (12) · dokuwiki (5) · jacome php-revista (4) |
| Enterprise Software▸ 6 | 59 | 2 | · | 26 | 34 | 7.4 | aix (10) · hp-ux (4) · ws ftp server (4) |
| Operating Systems▸ 3 | 56 | 10 | · | 18 | 32 | 7.4 | debian gnu/linux (11) · gentoo linux (7) · linux kernel (5) |
| OSS Libraries▸ 4 | 32 | 2 | · | 15 | 20 | 7.5 | openssl (5) · php-post (5) · mailman (4) |
| Networking Infrastructure▸ 4 | 23 | 2 | · | 11 | 18 | 10.0 | ios (5) · ips sensor software (2) · network access control (2) |
| Consumer Software▸ 5 | 23 | 5 | · | 7 | 14 | 7.5 | firefox (7) · seamonkey (6) · thunderbird (6) |
| Security Products▸ 4 | 20 | 3 | · | 12 | 24 | 8.6 | client security (3) · norton antivirus (3) · panda platinum internet security (3) |
| Mobile Apps▸ 2 | 16 | · | · | 2 | 5 | 6.3 | quicktime (8) · mac os x (7) · mac os x server (6) |
| Communications▸ 3 | 16 | · | · | 10 | 12 | 7.5 | neon webmail (6) · mailenable enterprise (1) · mailenable professional (1) |
| Cloud & SaaS▸ 2 | 8 | · | · | 5 | 9 | 6.9 | etrust security command center (3) · access gateway (1) · etrust audit client (1) |
| DevTools & CI▸ 1 | 2 | · | · | 2 | 2 | 5.7 | webmin (1) · xampp (1) |
| ICS / OT / IoT▸ 2 | 2 | · | · | 2 | 5 | 7.8 | deluxebb (1) |
| Hardware Firmware▸ 2 | 2 | · | · | 2 | 8 | 7.5 | imagerunner 2620 (1) · imagerunner 5020 (1) · imagerunner 6870 (1) |
| Unclassified | 84 | 4 | · | 60 | 66 | 6.2 | jupiter cms (4) · sips (3) · tr forum (3) |
Weakness × Sector
Which weaknesses hit which solution categories in September 2006
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
94Code Injection119Memory Buffer Bounds399CWE-39979XSS20Improper Input Validation89SQL Injection200Information Exposure22Path Traversal264CWE-264276Incorrect Default PermissionsWeb & CMS Plugins184251Operating Systems213211Consumer Software14111OSS Libraries1231Enterprise Software22111Communications12Networking Infrastructure12Security Products11Cloud & SaaSDevTools & CI