month report
March 2009
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
March 2009 closed with 566 published CVEs. 91 criticals, sun led volume, mostly via opensolaris. Top weakness class — CWE-89 (97 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
566
— MoM— YoY
Severity mix
91 / 176
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.1%
6 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
6197.2
n=6
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
4751
n=2
Detection gap
KEV pressure, no Nuclei coverage
March 2009 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1adobe5 CVE
Weakness × Vendor
What's spreading where in March 2009
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
89SQL Injection79XSS119Memory Buffer Bounds20Improper Input Validation264CWE-26494Code Injection399CWE-39922Path Traversal287Improper Authentication200Information Exposuresun5325261ibm2522131сообщество свободного программного обеспечения1212mozilla181cisco121drupal25debian2111microsoft61linux111hp21novell inc.1111osgeo4111
Most discussed CVEs — March 2009
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #12osgeo7 CVE
- #14umn7 CVE
- #16bookelves5 CVE
- #17ocean12tech5 CVE
- #20brian wilson4 CVE
- #22dnnsoftware4 CVE
- #24igniterealtime4 CVE
- #30adserversolutions3 CVE
- #32apachefriends3 CVE
- #33chaozz3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 43 CVE9 critCVSS 6.5PoC 6opensolaris (12) · java system identity manager (11) · solaris (10)
- 20 CVE7 critCVSS 6.8PoC 3websphere application server (8) · tivoli storage manager (4) · director (2)
- 13 CVE9 critCVSS 8.6PoC 4firefox (13) · seamonkey (7) · thunderbird (7)
- 12 CVE2 critCVSS 7.3ios (7) · cisco ios (3) · ios xr (2)
- 12 CVE4 critCVSS 6.7KEV 1Nuclei 1PoC 7debian gnu/linux (11) · linux (1) · nss-ldap (1)
- 11 CVE1 critCVSS 5.5PoC 1drupal (3) · print (2) · plus1 (1)
- 10 CVE1 critCVSS 5.7KEV 1Nuclei 2PoC 3debian linux (7) · horde (2) · horde groupware (2)
- 10 CVE2 critCVSS 6.9PoC 1windows server 2003 (8) · windows 2000 (8) · windows server 2008 (8)
- 8 CVECVSS 4.9PoC 1linux kernel (8)
- 7 CVE1 critCVSS 6.4laserjet 9500mfp (2) · color laserjet 5500 (2) · color laserjet 5550 (2)
- 7 CVECVSS 5.0opensuse (4) · suse linux enterprise (3)
- 7 CVE5 critCVSS 8.9NEWPoC 1mapserver (7)
- 7 CVE1 critCVSS 5.7PoC 3red hat enterprise linux (3) · cman (2) · enterprise linux workstation (1)
- 7 CVE5 critCVSS 8.9NEWPoC 1mapserver (7)
- 5 CVE4 critCVSS 9.3KEV 1PoC 1acrobat reader (5) · acrobat (2) · reader (1)
- 5 CVECVSS 5.7NEWPoC 3kipper (5)
- 5 CVECVSS 6.9NEWPoC 5membership manager pro (2) · contact manager pro (2) · faq manager pro (1)
- 5 CVECVSS 5.7PoC 1opensuse (5)
- 4 CVE2 critCVSS 7.0itunes (2) · safari (2)
- 4 CVECVSS 7.5NEWPoC 4ol\'bookmarks (4)
- 4 CVE1 critCVSS 6.5KEV 1Nuclei 1PoC 1ubuntu linux (3) · ubuntu (1)
- 4 CVECVSS 5.7NEWdotnetnuke (4)
- 4 CVECVSS 6.8PoC 2gentoo linux (4)
- 4 CVECVSS 6.3NEWPoC 4openfire (4)
- 4 CVE1 critCVSS 7.4bouncycastle:bcprov-jdk14 (1) · bouncycastle:bcprov-jdk15 (1) · bouncycastle:bcprov-jdk16 (1)
- 4 CVECVSS 5.5typo3/cms (2) · phpbb/phpbb (1) · phpmyadmin/phpmyadmin (1)
- 4 CVE1 critCVSS 6.7KEV 1Nuclei 1PoC 1phpmyadmin (4)
- 4 CVECVSS 5.5PoC 1linux enterprise desktop (3) · linux enterprise server (3) · linux enterprise software development kit (1)
- 4 CVE1 critCVSS 6.3tor (4)
- 3 CVECVSS 7.5NEWPoC 3ad management software (1) · affiliate software java (1) · banner exchange software (1)
- 3 CVECVSS 4.8struts (2) · tomcat (1)
- 3 CVECVSS 6.6NEWPoC 2xampp (3)
- 3 CVECVSS 5.0NEWchaozzdb (1) · fireant (1) · fubarforum (1)
- 3 CVE3 critCVSS 9.8NEWfoxit reader (1) · reader (1) · reader3.0 (1)
- 3 CVECVSS 5.0NEWPoC 3bloghelper (1) · pollhelper (1) · quotebook (1)
- 3 CVECVSS 6.4NEWPoC 2pixie cms (3)
- 3 CVE2 critCVSS 7.6PoC 3gimp (3)
- 3 CVECVSS 4.5NEWPoC 2jax guestbook (2) · jax linklists (1)
- 3 CVE2 critCVSS 7.6NEWPoC 3little cms (3)
- 3 CVECVSS 6.7NEWjbook (3)
- 3 CVECVSS 4.2NEWopenssl (3)
- 3 CVE2 critCVSS 8.7opera browser (3)
- 3 CVECVSS 6.0Nuclei 1PoC 2h-sphere (1) · parallels virtuozzo (1) · virtuozzo containers (1)
- 3 CVECVSS 5.8moin (2) · formencode (1)
- 3 CVECVSS 5.4NEWrapidleech (3)
- 3 CVECVSS 6.7NEWPoC 3social site generator (3)
- 3 CVECVSS 6.2NEWPoC 3celerbb (3)
- 3 CVECVSS 6.4NEWPoC 3local classifieds (2) · business survey pro (1)
- 3 CVECVSS 5.6NEWtypo3 (2) · autobeuser (1)
- 3 CVE1 critCVSS 6.2wesnoth (3)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | sun | 43 | 9 | · | · | PoC 6 | opensolaris (12) · java system identity manager (11) · solaris (10) | — | |
| 2 | ibm | 20 | 7 | · | · | PoC 3 | websphere application server (8) · tivoli storage manager (4) · director (2) | — | |
| 3 | mozilla | 13 | 9 | · | · | PoC 4 | firefox (13) · seamonkey (7) · thunderbird (7) | — | |
| 4 | cisco | 12 | 2 | · | · | ios (7) · cisco ios (3) · ios xr (2) | — | ||
| 5 | сообщество свободного программного обеспечения | 12 | 4 | 1 | 1 | KEV 1Nuclei 1PoC 7 | debian gnu/linux (11) · linux (1) · nss-ldap (1) | — | |
| 6 | drupal | 11 | 1 | · | · | PoC 1 | drupal (3) · print (2) · plus1 (1) | — | |
| 7 | debian | 10 | 1 | 1 | 2 | KEV 1Nuclei 2PoC 3 | debian linux (7) · horde (2) · horde groupware (2) | — | |
| 8 | microsoft | 10 | 2 | · | · | PoC 1 | windows server 2003 (8) · windows 2000 (8) · windows server 2008 (8) | — | |
| 9 | linux | 8 | · | · | · | PoC 1 | linux kernel (8) | — | |
| 10 | hp | 7 | 1 | · | · | laserjet 9500mfp (2) · color laserjet 5500 (2) · color laserjet 5550 (2) | — | ||
| 11 | novell inc. | 7 | · | · | · | opensuse (4) · suse linux enterprise (3) | — | ||
| 12 | osgeo | 7 | 5 | · | · | NEWPoC 1 | mapserver (7) | — | |
| 13 | redhat | 7 | 1 | · | · | PoC 3 | red hat enterprise linux (3) · cman (2) · enterprise linux workstation (1) | — | |
| 14 | umn | 7 | 5 | · | · | NEWPoC 1 | mapserver (7) | — | |
| 15 | adobe | 5 | 4 | 1 | · | KEV 1PoC 1 | acrobat reader (5) · acrobat (2) · reader (1) | — | |
| 16 | bookelves | 5 | · | · | · | NEWPoC 3 | kipper (5) | — | |
| 17 | ocean12tech | 5 | · | · | · | NEWPoC 5 | membership manager pro (2) · contact manager pro (2) · faq manager pro (1) | — | |
| 18 | opensuse | 5 | · | · | · | PoC 1 | opensuse (5) | — | |
| 19 | apple | 4 | 2 | · | · | itunes (2) · safari (2) | — | ||
| 20 | brian wilson | 4 | · | · | · | NEWPoC 4 | ol\'bookmarks (4) | — | |
| 21 | canonical | 4 | 1 | 1 | 1 | KEV 1Nuclei 1PoC 1 | ubuntu linux (3) · ubuntu (1) | — | |
| 22 | dnnsoftware | 4 | · | · | · | NEW | dotnetnuke (4) | — | |
| 23 | gentoo foundation inc. | 4 | · | · | · | PoC 2 | gentoo linux (4) | — | |
| 24 | igniterealtime | 4 | · | · | · | NEWPoC 4 | openfire (4) | — | |
| 25 | maven | 4 | 1 | · | · | bouncycastle:bcprov-jdk14 (1) · bouncycastle:bcprov-jdk15 (1) · bouncycastle:bcprov-jdk16 (1) | — | ||
| 26 | packagist | 4 | · | · | · | typo3/cms (2) · phpbb/phpbb (1) · phpmyadmin/phpmyadmin (1) | — | ||
| 27 | phpmyadmin | 4 | 1 | 1 | 1 | KEV 1Nuclei 1PoC 1 | phpmyadmin (4) | — | |
| 28 | suse | 4 | · | · | · | PoC 1 | linux enterprise desktop (3) · linux enterprise server (3) · linux enterprise software development kit (1) | — | |
| 29 | tor | 4 | 1 | · | · | tor (4) | — | ||
| 30 | adserversolutions | 3 | · | · | · | NEWPoC 3 | ad management software (1) · affiliate software java (1) · banner exchange software (1) | — | |
| 31 | apache | 3 | · | · | · | struts (2) · tomcat (1) | — | ||
| 32 | apachefriends | 3 | · | · | · | NEWPoC 2 | xampp (3) | — | |
| 33 | chaozz | 3 | · | · | · | NEW | chaozzdb (1) · fireant (1) · fubarforum (1) | — | |
| 34 | foxitsoftware | 3 | 3 | · | · | NEW | foxit reader (1) · reader (1) · reader3.0 (1) | — | |
| 35 | freedville | 3 | · | · | · | NEWPoC 3 | bloghelper (1) · pollhelper (1) · quotebook (1) | — | |
| 36 | getpixie | 3 | · | · | · | NEWPoC 2 | pixie cms (3) | — | |
| 37 | gimp | 3 | 2 | · | · | PoC 3 | gimp (3) | — | |
| 38 | jax scripts | 3 | · | · | · | NEWPoC 2 | jax guestbook (2) · jax linklists (1) | — | |
| 39 | littlecms | 3 | 2 | · | · | NEWPoC 3 | little cms (3) | — | |
| 40 | nexusjnr | 3 | · | · | · | NEW | jbook (3) | — | |
| 41 | openssl | 3 | · | · | · | NEW | openssl (3) | — | |
| 42 | opera | 3 | 2 | · | · | opera browser (3) | — | ||
| 43 | parallels | 3 | · | · | 1 | Nuclei 1PoC 2 | h-sphere (1) · parallels virtuozzo (1) · virtuozzo containers (1) | — | |
| 44 | pypi | 3 | · | · | · | moin (2) · formencode (1) | — | ||
| 45 | rapidleech | 3 | · | · | · | NEW | rapidleech (3) | — | |
| 46 | socialsitegenerator | 3 | · | · | · | NEWPoC 3 | social site generator (3) | — | |
| 47 | stewart howe | 3 | · | · | · | NEWPoC 3 | celerbb (3) | — | |
| 48 | turnkeyforms | 3 | · | · | · | NEWPoC 3 | local classifieds (2) · business survey pro (1) | — | |
| 49 | typo3 | 3 | · | · | · | NEW | typo3 (2) · autobeuser (1) | — | |
| 50 | wesnoth | 3 | 1 | · | · | wesnoth (3) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins176 CVE13 crit114 vendorsCVSS 9.2kipper (5) · dotnetnuke (4) · drupal (3)
- Operating Systems103 CVE29 crit3 KEV29 vendorsCVSS 6.9opensolaris (12) · java system identity manager (11) · solaris (10)
- Consumer Software52 CVE42 crit2 KEV26 vendorsCVSS 8.6acrobat reader (6) · ol\'bookmarks (4) · gimp (3)
- Enterprise Software51 CVE13 crit19 vendorsCVSS 9.3websphere application server (8) · tivoli storage manager (4) · 8100c digital sender (2)
- OSS Libraries38 CVE15 crit18 vendorsCVSS 7.5mapserver (7) · little cms (3) · openssl (3)
- 2 crit12 vendorsCVSS 6.5ios (7) · cisco ios (3) · ios xr (2)
- Communications19 CVE7 crit13 vendorsCVSS 7.9openfire (4) · miranda im (2) · pro chat rooms (2)
- Security Products10 CVE8 crit6 vendorsCVSS 9.0tor (4)
- Databases9 CVE2 crit2 KEV6 vendorsCVSS 6.5phpmyadmin (5) · greensql-console (2)
- DevTools & CI7 CVE1 crit4 vendorsCVSS 6.9xampp (3) · phprunner (2) · hex workshop (1)
- Cloud & SaaS7 CVE4 vendorsCVSS 5.7esx (2) · server (2) · virtualcenter (2)
- Mobile Apps5 CVE2 crit2 vendorsCVSS 7.0itunes (2) · safari (2)
- Hardware Firmware4 CVE1 crit3 vendorsCVSS 10.0enhanced support facility (1) · jasmine2000 (1)
- ICS / OT / IoT3 CVE1 crit2 vendorsCVSS 9.1liveaudio activex control (1) · livex activex control (1)
- Unclassified64 CVE6 crit50 vendorsCVSS 6.7jbook (3) · rapidleech (3) · 6rbscript (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 5 | 176 | 13 | · | 114 | 142 | 9.2 | kipper (5) · dotnetnuke (4) · drupal (3) |
| Operating Systems▸ 3 | 103 | 29 | 3 | 29 | 67 | 6.9 | opensolaris (12) · java system identity manager (11) · solaris (10) |
| Consumer Software▸ 5 | 52 | 42 | 2 | 26 | 33 | 8.6 | acrobat reader (6) · ol\'bookmarks (4) · gimp (3) |
| Enterprise Software▸ 4 | 51 | 13 | · | 19 | 189 | 9.3 | websphere application server (8) · tivoli storage manager (4) · 8100c digital sender (2) |
| OSS Libraries▸ 6 | 38 | 15 | · | 18 | 28 | 7.5 | mapserver (7) · little cms (3) · openssl (3) |
| Networking Infrastructure▸ 5 | 23 | 2 | · | 12 | 27 | 6.5 | ios (7) · cisco ios (3) · ios xr (2) |
| Communications▸ 3 | 19 | 7 | · | 13 | 15 | 7.9 | openfire (4) · miranda im (2) · pro chat rooms (2) |
| Security Products▸ 4 | 10 | 8 | · | 6 | 12 | 9.0 | tor (4) |
| Databases▸ 2 | 9 | 2 | 2 | 6 | 5 | 6.5 | phpmyadmin (5) · greensql-console (2) |
| DevTools & CI▸ 1 | 7 | 1 | · | 4 | 4 | 6.9 | xampp (3) · phprunner (2) · hex workshop (1) |
| Cloud & SaaS▸ 1 | 7 | · | · | 4 | 11 | 5.7 | esx (2) · server (2) · virtualcenter (2) |
| Mobile Apps▸ 2 | 5 | 2 | · | 2 | 3 | 7.0 | itunes (2) · safari (2) |
| Hardware Firmware▸ 2 | 4 | 1 | · | 3 | 4 | 10.0 | enhanced support facility (1) · jasmine2000 (1) |
| ICS / OT / IoT▸ 2 | 3 | 1 | · | 2 | 3 | 9.1 | liveaudio activex control (1) · livex activex control (1) |
| Unclassified | 64 | 6 | · | 50 | 54 | 6.7 | jbook (3) · rapidleech (3) · 6rbscript (2) |
Weakness × Sector
Which weaknesses hit which solution categories in March 2009
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
89SQL Injection79XSS119Memory Buffer Bounds20Improper Input Validation264CWE-26494Code Injection399CWE-39922Path Traversal287Improper Authentication200Information ExposureWeb & CMS Plugins67427923181166Operating Systems2513611011OSS Libraries2511721222Consumer Software42147231132Enterprise Software5554531251Communications16532541Networking Infrastructure235151Security Products512311Databases2111111DevTools & CI111111