month report
September 2008
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
September 2008 closed with 455 published CVEs — +0.4% YoY . 87 criticals, apple led volume, mostly via mac os x. Biggest breakout: freebsd at ×5.0 their 12-month median. Top weakness class — CWE-89 (77 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
455
— MoM+0.4% YoY
Severity mix
87 / 156
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.4%
2 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
6378.1
n=2
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
—
n=0
Weakness × Vendor
What's spreading where in September 2008
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
89SQL Injection79XSS20Improper Input Validation119Memory Buffer Bounds264CWE-264200Information Exposure399CWE-39922Path Traversal59CWE-59189CWE-189apple11763104cisco312сообщество свободного программного обеспечения2282221microsoft34134mozilla2251321debian1112231canonical1111211vmware1111hp1121linux231ibm1121opera1111
Most discussed CVEs — September 2008
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #16hans oesterholt4 CVE
- #20zanfi solutions4 CVE
- #21attachmax3 CVE
- #22cannot3 CVE
- #23clamav3 CVE
- #24friendly technologies3 CVE
- #25gallery3 CVE
- #29myphpnuke3 CVE
- #31nooms3 CVE
- #35source workshop3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 40 CVE16 critCVSS 7.1PoC 2mac os x (19) · mac os x server (17) · quicktime (11)
- 25 CVE3 critCVSS 7.6×4.5PoC 1ios (18) · adaptive security appliance 5500 (5) · unified callmanager (2)
- 22 CVE6 critCVSS 6.9PoC 7debian gnu/linux (22)
- 20 CVE11 critCVSS 8.8PoC 9windows xp (8) · windows vista (6) · sql server (6)
- 18 CVE7 critCVSS 7.6×4.5PoC 4firefox (17) · seamonkey (12) · thunderbird (9)
- 17 CVE4 critCVSS 6.8×3.8PoC 6debian linux (13) · python-dns (2) · citadel server (1)
- 11 CVE5 critCVSS 7.5×4.4PoC 4ubuntu linux (11)
- 10 CVE2 critCVSS 6.2PoC 3red hat enterprise linux (4) · cman (1) · enterprise ipa (1)
- 10 CVE7 critCVSS 9.2PoC 1server (9) · player (8) · ace (8)
- 9 CVE1 critCVSS 3.9openvms (4) · openview network node manager (2) · hpsi acf2 connector (1)
- 9 CVE1 critCVSS 5.9PoC 6linux kernel (9)
- 8 CVE1 critCVSS 6.3aix (2) · db2 (2) · db2 universal database (1)
- 8 CVE2 critCVSS 6.8opera browser (7) · opera (1)
- 6 CVECVSS 4.9talk (2) · link to us (1) · mailsave (1)
- 5 CVECVSS 7.2×5.0freebsd (5)
- 4 CVECVSS 4.7NEWPoC 4cmme (4)
- 4 CVECVSS 6.5joomla (3) · com mailto (1)
- 4 CVECVSS 6.5solaris (3) · opensolaris (2) · management center (1)
- 4 CVE1 critCVSS 5.4wireshark (4)
- 4 CVECVSS 7.4NEWPoC 4autodealers cms autonline (2) · zanfi cms lite (2) · jaw portal (1)
- 3 CVECVSS 6.7NEWPoC 3dolphin (3)
- 3 CVECVSS 6.4NEWPoC 3php infoboard (3)
- 3 CVE1 critCVSS 6.7NEWclamav (3)
- 3 CVE1 critCVSS 7.6NEWPoC 3friendly pppoe client (3)
- 3 CVECVSS 4.4NEWgallery (3)
- 3 CVE1 critCVSS 5.9×3.0PoC 1adns (1) · ed (1) · grub legacy (1)
- 3 CVECVSS 4.3PoC 1horde (2) · turba contact manager h3 (1)
- 3 CVECVSS 6.4mybb (3)
- 3 CVECVSS 6.4NEWPoC 3myphpnuke (3)
- 3 CVE1 critCVSS 8.0×3.0netbsd (3)
- 3 CVECVSS 4.5NEWnooms (3)
- 3 CVE1 critCVSS 7.4PoC 1iprint client (1) · linux desktop (1) · novell forum (1)
- 3 CVECVSS 4.4mysql (3)
- 3 CVECVSS 7.5PoC 3pforum (1) · plink (1) · pnews (1)
- 3 CVECVSS 7.3NEWPoC 3reciprocal links manager (1) · web directory script (1) · words tag script (1)
- 3 CVECVSS 7.5NEWPoC 3agent zone (1) · phpvid (1) · shaadi zone (1)
- 3 CVECVSS 6.4NEWPoC 1webcms portal edition (3)
- 3 CVE1 critCVSS 7.3NEWzoneminder (3)
- 2 CVE1 critCVSS 8.1NEWPoC 2beatcraft (1) · mixcraft (1)
- 2 CVECVSS 5.9NEWPoC 2addalink (2)
- 2 CVE1 critCVSS 7.2PoC 1acrobat (1) · illustrator (1)
- 2 CVECVSS 7.5PoC 2aj hyip (2)
- 2 CVECVSS 6.3NEWbitlbee (2)
- 2 CVECVSS 5.5NEWblogn (2)
- 2 CVECVSS 4.0NEWPoC 2brim (2)
- 2 CVECVSS 6.0NEWPoC 2deslock (2)
- 2 CVECVSS 7.5NEWPoC 2acg ptp (1) · e-gold script shop (1)
- 2 CVECVSS 5.2NEWdotproject (2)
- 2 CVECVSS 5.9PoC 1chrome (1) · google apps (1)
- 2 CVE1 critCVSS 5.7bios (1) · indeo (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | apple | 40 | 16 | · | · | PoC 2 | mac os x (19) · mac os x server (17) · quicktime (11) | — | |
| 2 | cisco | 25 | 3 | · | · | ×4.5PoC 1 | ios (18) · adaptive security appliance 5500 (5) · unified callmanager (2) | — | |
| 3 | сообщество свободного программного обеспечения | 22 | 6 | · | · | PoC 7 | debian gnu/linux (22) | — | |
| 4 | microsoft | 20 | 11 | · | · | PoC 9 | windows xp (8) · windows vista (6) · sql server (6) | — | |
| 5 | mozilla | 18 | 7 | · | · | ×4.5PoC 4 | firefox (17) · seamonkey (12) · thunderbird (9) | — | |
| 6 | debian | 17 | 4 | · | · | ×3.8PoC 6 | debian linux (13) · python-dns (2) · citadel server (1) | — | |
| 7 | canonical | 11 | 5 | · | · | ×4.4PoC 4 | ubuntu linux (11) | — | |
| 8 | redhat | 10 | 2 | · | · | PoC 3 | red hat enterprise linux (4) · cman (1) · enterprise ipa (1) | — | |
| 9 | vmware | 10 | 7 | · | · | PoC 1 | server (9) · player (8) · ace (8) | — | |
| 10 | hp | 9 | 1 | · | · | openvms (4) · openview network node manager (2) · hpsi acf2 connector (1) | — | ||
| 11 | linux | 9 | 1 | · | · | PoC 6 | linux kernel (9) | — | |
| 12 | ibm | 8 | 1 | · | · | aix (2) · db2 (2) · db2 universal database (1) | — | ||
| 13 | opera | 8 | 2 | · | · | opera browser (7) · opera (1) | — | ||
| 14 | drupal | 6 | · | · | · | talk (2) · link to us (1) · mailsave (1) | — | ||
| 15 | freebsd | 5 | · | · | · | ×5.0 | freebsd (5) | — | |
| 16 | hans oesterholt | 4 | · | · | · | NEWPoC 4 | cmme (4) | — | |
| 17 | joomla | 4 | · | · | · | joomla (3) · com mailto (1) | — | ||
| 18 | sun | 4 | · | · | · | solaris (3) · opensolaris (2) · management center (1) | — | ||
| 19 | wireshark | 4 | 1 | · | · | wireshark (4) | — | ||
| 20 | zanfi solutions | 4 | · | · | · | NEWPoC 4 | autodealers cms autonline (2) · zanfi cms lite (2) · jaw portal (1) | — | |
| 21 | attachmax | 3 | · | · | · | NEWPoC 3 | dolphin (3) | — | |
| 22 | cannot | 3 | · | · | · | NEWPoC 3 | php infoboard (3) | — | |
| 23 | clamav | 3 | 1 | · | · | NEW | clamav (3) | — | |
| 24 | friendly technologies | 3 | 1 | · | · | NEWPoC 3 | friendly pppoe client (3) | — | |
| 25 | gallery | 3 | · | · | · | NEW | gallery (3) | — | |
| 26 | gnu | 3 | 1 | · | · | ×3.0PoC 1 | adns (1) · ed (1) · grub legacy (1) | — | |
| 27 | horde | 3 | · | · | · | PoC 1 | horde (2) · turba contact manager h3 (1) | — | |
| 28 | mybb | 3 | · | · | · | mybb (3) | — | ||
| 29 | myphpnuke | 3 | · | · | · | NEWPoC 3 | myphpnuke (3) | — | |
| 30 | netbsd | 3 | 1 | · | · | ×3.0 | netbsd (3) | — | |
| 31 | nooms | 3 | · | · | · | NEW | nooms (3) | — | |
| 32 | novell | 3 | 1 | · | · | PoC 1 | iprint client (1) · linux desktop (1) · novell forum (1) | — | |
| 33 | oracle | 3 | · | · | · | mysql (3) | — | ||
| 34 | powie | 3 | · | · | · | PoC 3 | pforum (1) · plink (1) · pnews (1) | — | |
| 35 | source workshop | 3 | · | · | · | NEWPoC 3 | reciprocal links manager (1) · web directory script (1) · words tag script (1) | — | |
| 36 | vastal | 3 | · | · | · | NEWPoC 3 | agent zone (1) · phpvid (1) · shaadi zone (1) | — | |
| 37 | webcms | 3 | · | · | · | NEWPoC 1 | webcms portal edition (3) | — | |
| 38 | zoneminder | 3 | 1 | · | · | NEW | zoneminder (3) | — | |
| 39 | acoustica | 2 | 1 | · | · | NEWPoC 2 | beatcraft (1) · mixcraft (1) | — | |
| 40 | addalink | 2 | · | · | · | NEWPoC 2 | addalink (2) | — | |
| 41 | adobe | 2 | 1 | · | · | PoC 1 | acrobat (1) · illustrator (1) | — | |
| 42 | aj square | 2 | · | · | · | PoC 2 | aj hyip (2) | — | |
| 43 | bitlbee | 2 | · | · | · | NEW | bitlbee (2) | — | |
| 44 | blogn | 2 | · | · | · | NEW | blogn (2) | — | |
| 45 | brim-project | 2 | · | · | · | NEWPoC 2 | brim (2) | — | |
| 46 | deslock | 2 | · | · | · | NEWPoC 2 | deslock (2) | — | |
| 47 | discountedscripts | 2 | · | · | · | NEWPoC 2 | acg ptp (1) · e-gold script shop (1) | — | |
| 48 | dotproject | 2 | · | · | · | NEW | dotproject (2) | — | |
| 49 | 2 | · | · | · | PoC 1 | chrome (1) · google apps (1) | — | ||
| 50 | intel | 2 | 1 | · | · | bios (1) · indeo (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins87 CVE2 crit59 vendorsCVSS 10.0joomla (3) · myphpnuke (3) · webcms portal edition (3)
- Operating Systems83 CVE100 crit22 vendorsCVSS 8.8debian gnu/linux (22) · debian linux (13) · ubuntu linux (11)
- Consumer Software47 CVE24 crit17 vendorsCVSS 9.3firefox (17) · seamonkey (12) · thunderbird (9)
- Mobile Apps42 CVE27 crit2 vendorsCVSS 7.1mac os x (19) · mac os x server (17) · quicktime (11)
- 6 crit14 vendorsCVSS 7.6ios (18) · adaptive security appliance 5500 (5) · linksys wrt350n (2)
- Enterprise Software35 CVE6 crit17 vendorsCVSS 8.6openvms (4) · aix (2) · db2 (2)
- OSS Libraries19 CVE5 crit17 vendorsCVSS 7.5libxml2 (2) · mono (2) · adns (1)
- Security Products15 CVE5 crit9 vendorsCVSS 7.3wireshark (4) · deslock (2) · sharity (1)
- Communications13 CVE1 crit10 vendorsCVSS 6.0horde (2) · postfix (1) · securitygateway (1)
- Cloud & SaaS12 CVE28 crit3 vendorsCVSS 9.0server (9) · ace (8) · player (8)
- Databases9 CVE1 crit6 vendorsCVSS 7.5opendb (2) · phpmyadmin (2) · osads alliance database (1)
- ICS / OT / IoT6 CVE2 crit4 vendorsCVSS 10.0zoneminder (3) · camera life (1) · pager enterprise (1)
- Hardware Firmware5 CVE1 crit3 vendorsCVSS 6.388w8361w-bem1 (2) · bios (1) · indeo (1)
- DevTools & CI5 CVE1 crit5 vendorsCVSS 8.6mercurial (1) · viewvc (1)
- Unclassified49 CVE8 crit36 vendorsCVSS 6.2cmme (4) · gallery (3) · nooms (3)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 5 | 87 | 2 | · | 59 | 73 | 10.0 | joomla (3) · myphpnuke (3) · webcms portal edition (3) |
| Operating Systems▸ 4 | 83 | 100 | · | 22 | 66 | 8.8 | debian gnu/linux (22) · debian linux (13) · ubuntu linux (11) |
| Consumer Software▸ 5 | 47 | 24 | · | 17 | 24 | 9.3 | firefox (17) · seamonkey (12) · thunderbird (9) |
| Mobile Apps▸ 2 | 42 | 27 | · | 2 | 11 | 7.1 | mac os x (19) · mac os x server (17) · quicktime (11) |
| Networking Infrastructure▸ 5 | 39 | 6 | · | 14 | 19 | 7.6 | ios (18) · adaptive security appliance 5500 (5) · linksys wrt350n (2) |
| Enterprise Software▸ 5 | 35 | 6 | · | 17 | 38 | 8.6 | openvms (4) · aix (2) · db2 (2) |
| OSS Libraries▸ 5 | 19 | 5 | · | 17 | 19 | 7.5 | libxml2 (2) · mono (2) · adns (1) |
| Security Products▸ 3 | 15 | 5 | · | 9 | 10 | 7.3 | wireshark (4) · deslock (2) · sharity (1) |
| Communications▸ 3 | 13 | 1 | · | 10 | 11 | 6.0 | horde (2) · postfix (1) · securitygateway (1) |
| Cloud & SaaS▸ 2 | 12 | 28 | · | 3 | 8 | 9.0 | server (9) · ace (8) · player (8) |
| Databases▸ 2 | 9 | 1 | · | 6 | 5 | 7.5 | opendb (2) · phpmyadmin (2) · osads alliance database (1) |
| ICS / OT / IoT▸ 2 | 6 | 2 | · | 4 | 4 | 10.0 | zoneminder (3) · camera life (1) · pager enterprise (1) |
| Hardware Firmware▸ 2 | 5 | 1 | · | 3 | 4 | 6.3 | 88w8361w-bem1 (2) · bios (1) · indeo (1) |
| DevTools & CI▸ 3 | 5 | 1 | · | 5 | 5 | 8.6 | mercurial (1) · viewvc (1) |
| Unclassified | 49 | 8 | · | 36 | 41 | 6.2 | cmme (4) · gallery (3) · nooms (3) |
Weakness × Sector
Which weaknesses hit which solution categories in September 2008
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
89SQL Injection79XSS20Improper Input Validation119Memory Buffer Bounds264CWE-264200Information Exposure399CWE-39922Path Traversal59CWE-59189CWE-189Operating Systems381820716289Web & CMS Plugins53235441021Consumer Software74812645217Networking Infrastructure14224112OSS Libraries1225231141Enterprise Software861121Communications42243231Security Products132442Databases2231112Cloud & SaaS11111