month report
June 2009
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
June 2009 closed with 452 published CVEs. 101 criticals, apple led volume, mostly via safari. Top weakness class — CWE-79 (72 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
452
— MoM— YoY
Severity mix
101 / 112
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.1%
5 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
6104.1
n=5
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
4746
n=3
Detection gap
KEV pressure, no Nuclei coverage
June 2009 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 3microsoft35 CVE
Weakness × Vendor
What's spreading where in June 2009
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
79XSS89SQL Injection22Path Traversal119Memory Buffer Bounds287Improper Authentication399CWE-39994Code Injection200Information Exposure264CWE-26420Improper Input Validationapple97494733microsoft13586223ibm12122adobe93mozilla25123sun112111canonical1cisco311elvinbts22111сообщество свободного программного обеспечения321apache1121debian1
Most discussed CVEs — June 2009
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #9elvinbts8 CVE
- #18virtuenetz5 CVE
- #20fuzzylime4 CVE
- #26aaronoutpost3 CVE
- #27campusvirtualcomputrade3 CVE
- #28campware.org3 CVE
- #30david degner3 CVE
- #34php.s33 CVE
- #35skybluecanvas3 CVE
- #36strongswan3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 63 CVE21 critCVSS 6.5PoC 20safari (41) · iphone os (14) · ipod touch (12)
- 35 CVE17 critCVSS 8.3KEV 3PoC 2windows 2000 (10) · office (10) · internet explorer (10)
- 17 CVE6 critCVSS 6.6websphere application server (6) · db2 (5) · rational clearquest (2)
- 16 CVE16 critCVSS 9.3acrobat (14) · acrobat reader (14) · shockwave player (2)
- 16 CVE8 critCVSS 7.9PoC 5firefox (15) · seamonkey (10) · thunderbird (8)
- 15 CVE4 critCVSS 6.3PoC 3opensolaris (8) · solaris (6) · one web server (2)
- 8 CVECVSS 6.2PoC 7ubuntu linux (8)
- 8 CVECVSS 5.8adaptive security appliance (3) · ironport asyncos (1) · ironport email security appliances (1)
- 8 CVECVSS 5.9NEWPoC 5elvinbts (8)
- 8 CVE5 critCVSS 8.5PoC 8debian gnu/linux (8)
- 7 CVECVSS 5.5PoC 2tomcat (4) · apr-util (3) · http server (3)
- 6 CVECVSS 6.2PoC 4debian linux (6)
- 6 CVECVSS 5.5PoC 1dokeos (6)
- 6 CVECVSS 4.0PoC 2drupal (1) · nodequeue (1) · quiz (1)
- 5 CVECVSS 6.1PoC 5joomla (3) · com school (1) · com casinobase (1)
- 5 CVECVSS 6.6opera browser (4) · opera (1)
- 5 CVECVSS 5.3PoC 5torrenttrader classic (5)
- 5 CVECVSS 6.9NEWPoC 5virtue news manager (2) · virtue book store (1) · virtue classifieds (1)
- 4 CVECVSS 6.1PoC 2fedora (4)
- 4 CVE2 critCVSS 8.6NEWPoC 4fuzzylime \(cms\) (2) · fuzzylime cms (2)
- 4 CVECVSS 4.8gentoo linux (4)
- 4 CVE2 critCVSS 7.8PoC 2chrome (4)
- 4 CVECVSS 6.8PoC 3linux kernel (4) · kernel (2)
- 4 CVECVSS 4.6org.apache.tomcat:tomcat (4)
- 4 CVECVSS 6.7PoC 1openssl (2) · enterprise linux desktop (1) · enterprise linux eus (1)
- 3 CVECVSS 6.2NEWPoC 2asp inline corporate calendar (3)
- 3 CVECVSS 6.2NEWPoC 3campus virtual-lms (3)
- 3 CVECVSS 6.2NEWPoC 3campsite (3)
- 3 CVECVSS 5.5netscaler access gateway (1) · netscaler access gateway firmware (1) · secure gateway (1)
- 3 CVECVSS 6.2NEWPoC 3phpcollegeexchange (3)
- 3 CVECVSS 7.8PoC 3dg632 (3) · dg632 firmware (1)
- 3 CVECVSS 6.8PoC 3opensuse (3)
- 3 CVECVSS 6.6PoC 3opensuse (3)
- 3 CVECVSS 4.5NEWphp-i-board (2) · tree bbs (1)
- 3 CVECVSS 5.0NEWskybluecanvas (3)
- 3 CVECVSS 5.0NEWstrongswan (3)
- 3 CVECVSS 5.8PoC 3linux enterprise (2) · linux enterprise server (2) · linux enterprise desktop (1)
- 2 CVECVSS 5.2NEWPoC 24images (2)
- 2 CVE1 critCVSS 8.4NEWPoC 2wl54ap2 (2) · wl54ap3 (2)
- 2 CVECVSS 5.8NEWnodequeue (1) · views (1)
- 2 CVECVSS 5.5NEWjira (2)
- 2 CVECVSS 7.5NEWPoC 1phpbugtracker (2)
- 2 CVE1 critCVSS 8.3NEWPoC 27ammel (2)
- 2 CVECVSS 7.5NEWNuclei 2PoC 1firestats (2)
- 2 CVE2 critCVSS 9.3NEWfoxit reader (2) · jpeg2000 jbig2 decoder add-on (1) · jpeg2000\/jbig2 decoder add-on (1)
- 2 CVECVSS 4.3freebsd (2)
- 2 CVECVSS 6.3NEWPoC 2fretsweb (2)
- 2 CVE1 critCVSS 7.0discovery\&dependency mapping inventory (1) · openview network node manager (1)
- 2 CVE1 critCVSS 8.8NEWPoC 2db top sites (2)
- 2 CVECVSS 4.7NEWPoC 2kasseler cms (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | apple | 63 | 21 | · | · | PoC 20 | safari (41) · iphone os (14) · ipod touch (12) | — | |
| 2 | microsoft | 35 | 17 | 3 | · | KEV 3PoC 2 | windows 2000 (10) · office (10) · internet explorer (10) | — | |
| 3 | ibm | 17 | 6 | · | · | websphere application server (6) · db2 (5) · rational clearquest (2) | — | ||
| 4 | adobe | 16 | 16 | · | · | acrobat (14) · acrobat reader (14) · shockwave player (2) | — | ||
| 5 | mozilla | 16 | 8 | · | · | PoC 5 | firefox (15) · seamonkey (10) · thunderbird (8) | — | |
| 6 | sun | 15 | 4 | · | · | PoC 3 | opensolaris (8) · solaris (6) · one web server (2) | — | |
| 7 | canonical | 8 | · | · | · | PoC 7 | ubuntu linux (8) | — | |
| 8 | cisco | 8 | · | · | · | adaptive security appliance (3) · ironport asyncos (1) · ironport email security appliances (1) | — | ||
| 9 | elvinbts | 8 | · | · | · | NEWPoC 5 | elvinbts (8) | — | |
| 10 | сообщество свободного программного обеспечения | 8 | 5 | · | · | PoC 8 | debian gnu/linux (8) | — | |
| 11 | apache | 7 | · | · | · | PoC 2 | tomcat (4) · apr-util (3) · http server (3) | — | |
| 12 | debian | 6 | · | · | · | PoC 4 | debian linux (6) | — | |
| 13 | dokeos | 6 | · | · | · | PoC 1 | dokeos (6) | — | |
| 14 | drupal | 6 | · | · | · | PoC 2 | drupal (1) · nodequeue (1) · quiz (1) | — | |
| 15 | joomla | 5 | · | · | · | PoC 5 | joomla (3) · com school (1) · com casinobase (1) | — | |
| 16 | opera | 5 | · | · | · | opera browser (4) · opera (1) | — | ||
| 17 | torrenttrader | 5 | · | · | · | PoC 5 | torrenttrader classic (5) | — | |
| 18 | virtuenetz | 5 | · | · | · | NEWPoC 5 | virtue news manager (2) · virtue book store (1) · virtue classifieds (1) | — | |
| 19 | fedoraproject | 4 | · | · | · | PoC 2 | fedora (4) | — | |
| 20 | fuzzylime | 4 | 2 | · | · | NEWPoC 4 | fuzzylime \(cms\) (2) · fuzzylime cms (2) | — | |
| 21 | gentoo foundation inc. | 4 | · | · | · | gentoo linux (4) | — | ||
| 22 | 4 | 2 | · | · | PoC 2 | chrome (4) | — | ||
| 23 | linux | 4 | · | · | · | PoC 3 | linux kernel (4) · kernel (2) | — | |
| 24 | maven | 4 | · | · | · | org.apache.tomcat:tomcat (4) | — | ||
| 25 | redhat | 4 | · | · | · | PoC 1 | openssl (2) · enterprise linux desktop (1) · enterprise linux eus (1) | — | |
| 26 | aaronoutpost | 3 | · | · | · | NEWPoC 2 | asp inline corporate calendar (3) | — | |
| 27 | campusvirtualcomputrade | 3 | · | · | · | NEWPoC 3 | campus virtual-lms (3) | — | |
| 28 | campware.org | 3 | · | · | · | NEWPoC 3 | campsite (3) | — | |
| 29 | citrix | 3 | · | · | · | netscaler access gateway (1) · netscaler access gateway firmware (1) · secure gateway (1) | — | ||
| 30 | david degner | 3 | · | · | · | NEWPoC 3 | phpcollegeexchange (3) | — | |
| 31 | netgear | 3 | · | · | · | PoC 3 | dg632 (3) · dg632 firmware (1) | — | |
| 32 | novell inc. | 3 | · | · | · | PoC 3 | opensuse (3) | — | |
| 33 | opensuse | 3 | · | · | · | PoC 3 | opensuse (3) | — | |
| 34 | php.s3 | 3 | · | · | · | NEW | php-i-board (2) · tree bbs (1) | — | |
| 35 | skybluecanvas | 3 | · | · | · | NEW | skybluecanvas (3) | — | |
| 36 | strongswan | 3 | · | · | · | NEW | strongswan (3) | — | |
| 37 | suse | 3 | · | · | · | PoC 3 | linux enterprise (2) · linux enterprise server (2) · linux enterprise desktop (1) | — | |
| 38 | 4homepages | 2 | · | · | · | NEWPoC 2 | 4images (2) | — | |
| 39 | a-link | 2 | 1 | · | · | NEWPoC 2 | wl54ap2 (2) · wl54ap3 (2) | — | |
| 40 | angrydonuts | 2 | · | · | · | NEW | nodequeue (1) · views (1) | — | |
| 41 | atlassian | 2 | · | · | · | NEW | jira (2) | — | |
| 42 | benjamin curtis | 2 | · | · | · | NEWPoC 1 | phpbugtracker (2) | — | |
| 43 | egyplus | 2 | 1 | · | · | NEWPoC 2 | 7ammel (2) | — | |
| 44 | firestats | 2 | · | · | 2 | NEWNuclei 2PoC 1 | firestats (2) | — | |
| 45 | foxitsoftware | 2 | 2 | · | · | NEW | foxit reader (2) · jpeg2000 jbig2 decoder add-on (1) · jpeg2000\/jbig2 decoder add-on (1) | — | |
| 46 | freebsd | 2 | · | · | · | freebsd (2) | — | ||
| 47 | fretsweb project | 2 | · | · | · | NEWPoC 2 | fretsweb (2) | — | |
| 48 | hp | 2 | 1 | · | · | discovery\&dependency mapping inventory (1) · openview network node manager (1) | — | ||
| 49 | jnmsolutions | 2 | 1 | · | · | NEWPoC 2 | db top sites (2) | — | |
| 50 | kasseler-cms | 2 | · | · | · | NEWPoC 2 | kasseler cms (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins89 CVE7 crit52 vendorsCVSS 7.6torrenttrader classic (5) · tomcat (4) · apr-util (3)
- Operating Systems80 CVE74 crit22 KEV19 vendorsCVSS 8.3internet explorer (10) · office (10) · windows 2000 (10)
- Mobile Apps68 CVE29 crit3 vendorsCVSS 8.1safari (41) · iphone os (14) · ipod touch (12)
- Enterprise Software46 CVE8 crit17 vendorsCVSS 8.4websphere application server (6) · db2 (5) · jira (2)
- Consumer Software45 CVE56 crit10 vendorsCVSS 9.2firefox (15) · seamonkey (10) · thunderbird (8)
- OSS Libraries21 CVE4 crit15 vendorsCVSS 6.3openssl (3) · pivot (2) · xvid (2)
- 1 crit6 vendorsCVSS 10.0adaptive security appliance (3) · dg632 (3) · dg632 firmware (1)
- Security Products9 CVE2 crit6 vendorsCVSS 7.8openid (2) · softremote (1) · softremote1.4 (1)
- Cloud & SaaS8 CVE1 crit5 vendorsCVSS 8.1ace (1) · esx (1) · esxi (1)
- Communications6 CVE1 crit6 vendorsCVSS 7.2bopup communication server (1) · icq (1) · irssi (1)
- DevTools & CI5 CVE4 vendorsCVSS 7.2skip (2)
- Hardware Firmware3 CVE2 crit2 vendorsCVSS 8.4wl54ap2 (2) · wl54ap3 (2)
- Databases1 CVE1 vendorsCVSS 7.5http server (1)
- Unclassified61 CVE4 crit39 vendorsCVSS 6.4elvinbts (8) · asp inline corporate calendar (3) · campsite (3)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 6 | 89 | 7 | · | 52 | 67 | 7.6 | torrenttrader classic (5) · tomcat (4) · apr-util (3) |
| Operating Systems▸ 3 | 80 | 74 | 22 | 19 | 69 | 8.3 | internet explorer (10) · office (10) · windows 2000 (10) |
| Mobile Apps▸ 2 | 68 | 29 | · | 3 | 10 | 8.1 | safari (41) · iphone os (14) · ipod touch (12) |
| Enterprise Software▸ 4 | 46 | 8 | · | 17 | 30 | 8.4 | websphere application server (6) · db2 (5) · jira (2) |
| Consumer Software▸ 4 | 45 | 56 | · | 10 | 17 | 9.2 | firefox (15) · seamonkey (10) · thunderbird (8) |
| OSS Libraries▸ 3 | 21 | 4 | · | 15 | 15 | 6.3 | openssl (3) · pivot (2) · xvid (2) |
| Networking Infrastructure▸ 4 | 16 | 1 | · | 6 | 13 | 10.0 | adaptive security appliance (3) · dg632 (3) · dg632 firmware (1) |
| Security Products▸ 4 | 9 | 2 | · | 6 | 7 | 7.8 | openid (2) · softremote (1) · softremote1.4 (1) |
| Cloud & SaaS▸ 2 | 8 | 1 | · | 5 | 14 | 8.1 | ace (1) · esx (1) · esxi (1) |
| Communications▸ 3 | 6 | 1 | · | 6 | 6 | 7.2 | bopup communication server (1) · icq (1) · irssi (1) |
| DevTools & CI▸ 4 | 5 | · | · | 4 | 4 | 7.2 | skip (2) |
| Hardware Firmware▸ 2 | 3 | 2 | · | 2 | 3 | 8.4 | wl54ap2 (2) · wl54ap3 (2) |
| Databases▸ 1 | 1 | · | · | 1 | 1 | 7.5 | http server (1) |
| Unclassified | 61 | 4 | · | 39 | 40 | 6.4 | elvinbts (8) · asp inline corporate calendar (3) · campsite (3) |
Weakness × Sector
Which weaknesses hit which solution categories in June 2009
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS89SQL Injection22Path Traversal119Memory Buffer Bounds287Improper Authentication399CWE-39994Code Injection200Information Exposure264CWE-26420Improper Input ValidationConsumer Software103214161716846Web & CMS Plugins2928234625Operating Systems319148856Enterprise Software9103215231OSS Libraries74242432Networking Infrastructure5213333Communications112251Security Products1111ICS / OT / IoT22111Cloud & SaaS111