month report
July 2009
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
July 2009 closed with 449 published CVEs. 74 criticals, oracle led volume, mostly via database server. Top weakness class — CWE-89 (75 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
449
— MoM— YoY
Severity mix
74 / 146
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.6%
7 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
6083.0
n=7
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
5386
n=2
Weakness × Vendor
What's spreading where in July 2009
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
89SQL Injection79XSS119Memory Buffer Bounds264CWE-26494Code Injection22Path Traversal399CWE-399189CWE-18920Improper Input Validation287Improper Authenticationoracleсообщество свободного программного обеспечения14144microsoft1238311sun21mozilla12144xigla11adobe321cisco113apple11121axesstel12datachecknh52hp1
Most discussed CVEs — July 2009
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #10axesstel7 CVE
- #11datachecknh7 CVE
- #17forkosh5 CVE
- #19max kervin5 CVE
- #22cms.tut.su4 CVE
- #24huawei4 CVE
- #26ordasoft4 CVE
- #29avatic3 CVE
- #30bistudio3 CVE
- #31censura3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 29 CVE3 critCVSS 5.4database server (12) · e-business suite (5) · jd edwards enterpriseone (3)
- 26 CVE12 critCVSS 7.8PoC 5debian gnu/linux (26)
- 20 CVE11 critCVSS 8.5KEV 1PoC 3windows xp (8) · internet explorer (7) · windows 2000 (6)
- 18 CVE1 critCVSS 5.5solaris (9) · opensolaris (9) · ray server software (3)
- 17 CVE10 critCVSS 8.1PoC 5firefox (16) · thunderbird (7) · seamonkey (4)
- 11 CVECVSS 7.5PoC 11absolute banner manager.net (1) · absolute content rotator (1) · absolute control panel xe (1)
- 10 CVE6 critCVSS 8.1KEV 1PoC 1flash player (9) · flex (8) · air (8)
- 8 CVE2 critCVSS 7.6catalyst 3750g (3) · cisco 1500 wireless lan controller (3) · cisco 2000 wireless lan controller (3)
- 7 CVE2 critCVSS 6.9PoC 2safari (5) · ipod touch (2) · mac os x (2)
- 7 CVE1 critCVSS 6.9NEWmv 410r (7)
- 7 CVECVSS 6.7NEWPoC 1linkpal (2) · sitepal (2) · gallerypal fe (1)
- 7 CVE1 critCVSS 7.7procurve threat management services zl module (4) · openview network node manager (1) · oncplus (1)
- 7 CVE1 critCVSS 7.5tivoli identity manager (2) · websphere application server (2) · proventia network mail security system vitual appliance (1)
- 7 CVECVSS 6.5PoC 2linux kernel (7) · kernel (1)
- 6 CVECVSS 6.5PoC 1ubuntu linux (6)
- 6 CVECVSS 6.5PoC 1debian linux (6)
- 5 CVE3 critCVSS 8.9NEWPoC 2mathtex (3) · mimetex (2)
- 5 CVE2 critCVSS 7.3PoC 1chrome (4) · android (1) · v8 (1)
- 5 CVECVSS 6.2NEWPoC 5kervinet forum (5)
- 5 CVECVSS 5.4wireshark (5)
- 5 CVECVSS 5.0Nuclei 5PoC 3wordpress (5) · wordpress mu (4)
- 4 CVECVSS 6.1NEWPoC 4cms chainuk (4)
- 4 CVECVSS 6.3PoC 1fedora (4)
- 4 CVE1 critCVSS 7.6NEWd100 firmware (2) · d100 (2)
- 4 CVE1 critCVSS 6.5dhcp (3) · bind (1)
- 4 CVECVSS 7.5NEWPoC 4com booklibrary (1) · com medialibrary (1) · com realestatemanager (1)
- 4 CVECVSS 6.9PoC 1enterprise linux server (2) · enterprise linux desktop (2) · enterprise linux eus (2)
- 3 CVECVSS 6.2PoC 1http server (2) · roller (1)
- 3 CVECVSS 4.8NEWPoC 1aardvark topsites php (3)
- 3 CVE1 critCVSS 6.7NEWarma (3) · arma 2 (3)
- 3 CVECVSS 5.4NEWPoC 2censura (3)
- 3 CVE1 critCVSS 7.3licensing (1) · presentation server (1) · web interface (1)
- 3 CVECVSS 5.0drupal (3)
- 3 CVECVSS 4.3NEWPoC 1esbaseadmin (1) · esnews (1) · espartenaires (1)
- 3 CVECVSS 4.3NEWPoC 2online guestbook pro (3)
- 3 CVECVSS 7.5NEWPoC 3com livechat (3)
- 3 CVECVSS 6.2NEWPoC 1netbsd (3)
- 3 CVECVSS 5.0edirectory (3)
- 3 CVECVSS 7.0PoC 2suse linux enterprise (2) · opensuse (1)
- 3 CVECVSS 7.0NEWopenexr (3)
- 3 CVECVSS 5.7opensuse (3)
- 3 CVECVSS 4.5PoC 1opera browser (3)
- 3 CVECVSS 5.4NEWPoC 2hutscripts php website script (2) · hotscripts type php clone script (1)
- 3 CVE2 critCVSS 8.9NEWblackberry professional software (2) · blackberry enterprise server (2) · blackberry 8800 (1)
- 3 CVECVSS 5.4linux enterprise server (2) · linux enterprise (1) · linux enterprise debuginfo (1)
- 3 CVECVSS 6.1NEWPoC 3virtue online test generator (3)
- 3 CVE1 critCVSS 7.4NEWtekradius (3)
- 3 CVECVSS 7.0NEWPoC 2осон основа оnyx (3)
- 2 CVECVSS 7.5NEWPoC 1adbnewssender (2)
- 2 CVECVSS 6.3NEWPoC 2admin news tools (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 29 | 3 | · | · | database server (12) · e-business suite (5) · jd edwards enterpriseone (3) | — | ||
| 2 | сообщество свободного программного обеспечения | 26 | 12 | · | · | PoC 5 | debian gnu/linux (26) | — | |
| 3 | microsoft | 20 | 11 | 1 | · | KEV 1PoC 3 | windows xp (8) · internet explorer (7) · windows 2000 (6) | — | |
| 4 | sun | 18 | 1 | · | · | solaris (9) · opensolaris (9) · ray server software (3) | — | ||
| 5 | mozilla | 17 | 10 | · | · | PoC 5 | firefox (16) · thunderbird (7) · seamonkey (4) | — | |
| 6 | xigla | 11 | · | · | · | PoC 11 | absolute banner manager.net (1) · absolute content rotator (1) · absolute control panel xe (1) | — | |
| 7 | adobe | 10 | 6 | 1 | · | KEV 1PoC 1 | flash player (9) · flex (8) · air (8) | — | |
| 8 | cisco | 8 | 2 | · | · | catalyst 3750g (3) · cisco 1500 wireless lan controller (3) · cisco 2000 wireless lan controller (3) | — | ||
| 9 | apple | 7 | 2 | · | · | PoC 2 | safari (5) · ipod touch (2) · mac os x (2) | — | |
| 10 | axesstel | 7 | 1 | · | · | NEW | mv 410r (7) | — | |
| 11 | datachecknh | 7 | · | · | · | NEWPoC 1 | linkpal (2) · sitepal (2) · gallerypal fe (1) | — | |
| 12 | hp | 7 | 1 | · | · | procurve threat management services zl module (4) · openview network node manager (1) · oncplus (1) | — | ||
| 13 | ibm | 7 | 1 | · | · | tivoli identity manager (2) · websphere application server (2) · proventia network mail security system vitual appliance (1) | — | ||
| 14 | linux | 7 | · | · | · | PoC 2 | linux kernel (7) · kernel (1) | — | |
| 15 | canonical | 6 | · | · | · | PoC 1 | ubuntu linux (6) | — | |
| 16 | debian | 6 | · | · | · | PoC 1 | debian linux (6) | — | |
| 17 | forkosh | 5 | 3 | · | · | NEWPoC 2 | mathtex (3) · mimetex (2) | — | |
| 18 | 5 | 2 | · | · | PoC 1 | chrome (4) · android (1) · v8 (1) | — | ||
| 19 | max kervin | 5 | · | · | · | NEWPoC 5 | kervinet forum (5) | — | |
| 20 | wireshark | 5 | · | · | · | wireshark (5) | — | ||
| 21 | wordpress | 5 | · | · | 5 | Nuclei 5PoC 3 | wordpress (5) · wordpress mu (4) | — | |
| 22 | cms.tut.su | 4 | · | · | · | NEWPoC 4 | cms chainuk (4) | — | |
| 23 | fedoraproject | 4 | · | · | · | PoC 1 | fedora (4) | — | |
| 24 | huawei | 4 | 1 | · | · | NEW | d100 firmware (2) · d100 (2) | — | |
| 25 | isc | 4 | 1 | · | · | dhcp (3) · bind (1) | — | ||
| 26 | ordasoft | 4 | · | · | · | NEWPoC 4 | com booklibrary (1) · com medialibrary (1) · com realestatemanager (1) | — | |
| 27 | redhat | 4 | · | · | · | PoC 1 | enterprise linux server (2) · enterprise linux desktop (2) · enterprise linux eus (2) | — | |
| 28 | apache | 3 | · | · | · | PoC 1 | http server (2) · roller (1) | — | |
| 29 | avatic | 3 | · | · | · | NEWPoC 1 | aardvark topsites php (3) | — | |
| 30 | bistudio | 3 | 1 | · | · | NEW | arma (3) · arma 2 (3) | — | |
| 31 | censura | 3 | · | · | · | NEWPoC 2 | censura (3) | — | |
| 32 | citrix | 3 | 1 | · | · | licensing (1) · presentation server (1) · web interface (1) | — | ||
| 33 | drupal | 3 | · | · | · | drupal (3) | — | ||
| 34 | editeurscripts | 3 | · | · | · | NEWPoC 1 | esbaseadmin (1) · esnews (1) · espartenaires (1) | — | |
| 35 | esoftpro | 3 | · | · | · | NEWPoC 2 | online guestbook pro (3) | — | |
| 36 | joompolitan | 3 | · | · | · | NEWPoC 3 | com livechat (3) | — | |
| 37 | netbsd | 3 | · | · | · | NEWPoC 1 | netbsd (3) | — | |
| 38 | novell | 3 | · | · | · | edirectory (3) | — | ||
| 39 | novell inc. | 3 | · | · | · | PoC 2 | suse linux enterprise (2) · opensuse (1) | — | |
| 40 | openexr | 3 | · | · | · | NEW | openexr (3) | — | |
| 41 | opensuse | 3 | · | · | · | opensuse (3) | — | ||
| 42 | opera | 3 | · | · | · | PoC 1 | opera browser (3) | — | |
| 43 | resalecode | 3 | · | · | · | NEWPoC 2 | hutscripts php website script (2) · hotscripts type php clone script (1) | — | |
| 44 | rim | 3 | 2 | · | · | NEW | blackberry professional software (2) · blackberry enterprise server (2) · blackberry 8800 (1) | — | |
| 45 | suse | 3 | · | · | · | linux enterprise server (2) · linux enterprise (1) · linux enterprise debuginfo (1) | — | ||
| 46 | virtuenetz | 3 | · | · | · | NEWPoC 3 | virtue online test generator (3) | — | |
| 47 | yasinkaplan | 3 | 1 | · | · | NEW | tekradius (3) | — | |
| 48 | ао "нппкт" | 3 | · | · | · | NEWPoC 2 | осон основа оnyx (3) | — | |
| 49 | adbnewssender | 2 | · | · | · | NEWPoC 1 | adbnewssender (2) | — | |
| 50 | adminnewstools | 2 | · | · | · | NEWPoC 2 | admin news tools (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins122 CVE3 crit77 vendorsCVSS 6.7movable type (5) · wordpress (5) · cms chainuk (4)
- Operating Systems89 CVE46 crit2 KEV22 vendorsCVSS 8.5debian gnu/linux (26) · linux kernel (7) · debian linux (6)
- Consumer Software41 CVE38 crit3 KEV13 vendorsCVSS 8.0firefox (16) · thunderbird (7) · seamonkey (4)
- Databases32 CVE3 crit5 vendorsCVSS 6.0database server (12) · e-business suite (5) · bea product suite (3)
- Enterprise Software30 CVE9 crit13 vendorsCVSS 7.8procurve threat management services zl module (4) · tivoli identity manager (2) · websphere application server (2)
- 16 crit10 vendorsCVSS 7.4mv 410r (7) · catalyst 3750g (3) · cisco 1500 wireless lan controller (3)
- Mobile Apps16 CVE9 crit3 vendorsCVSS 7.4chrome (4) · d100 (2) · d100 firmware (2)
- Security Products15 CVE3 crit9 vendorsCVSS 7.5smartfilter (2) · avast antivirus (1) · clamav (1)
- OSS Libraries13 CVE4 crit11 vendorsCVSS 9.8openexr (3) · libtiff (2) · camlimages (1)
- Communications6 CVE6 vendorsCVSS 6.3\@tmail (1) · passwd (1) · v-webmail (1)
- Cloud & SaaS3 CVE1 crit1 vendorsCVSS 7.3licensing (1) · presentation server (1) · web interface (1)
- AI / ML1 CVE1 vendorsCVSS 7.5mlffat (1)
- Hardware Firmware1 CVE1 crit1 vendorsCVSS 9.8storcenter pro firmware (1)
- Unclassified69 CVE9 crit43 vendorsCVSS 6.7aardvark topsites php (3) · censura (3) · mathtex (3)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 5 | 122 | 3 | · | 77 | 97 | 6.7 | movable type (5) · wordpress (5) · cms chainuk (4) |
| Operating Systems▸ 3 | 89 | 46 | 2 | 22 | 57 | 8.5 | debian gnu/linux (26) · linux kernel (7) · debian linux (6) |
| Consumer Software▸ 4 | 41 | 38 | 3 | 13 | 22 | 8.0 | firefox (16) · thunderbird (7) · seamonkey (4) |
| Databases▸ 2 | 32 | 3 | · | 5 | 16 | 6.0 | database server (12) · e-business suite (5) · bea product suite (3) |
| Enterprise Software▸ 3 | 30 | 9 | · | 13 | 34 | 7.8 | procurve threat management services zl module (4) · tivoli identity manager (2) · websphere application server (2) |
| Networking Infrastructure▸ 5 | 27 | 16 | · | 10 | 29 | 7.4 | mv 410r (7) · catalyst 3750g (3) · cisco 1500 wireless lan controller (3) |
| Mobile Apps▸ 2 | 16 | 9 | · | 3 | 10 | 7.4 | chrome (4) · d100 (2) · d100 firmware (2) |
| Security Products▸ 4 | 15 | 3 | · | 9 | 11 | 7.5 | smartfilter (2) · avast antivirus (1) · clamav (1) |
| OSS Libraries▸ 4 | 13 | 4 | · | 11 | 11 | 9.8 | openexr (3) · libtiff (2) · camlimages (1) |
| Communications▸ 3 | 6 | · | · | 6 | 6 | 6.3 | \@tmail (1) · passwd (1) · v-webmail (1) |
| Cloud & SaaS▸ 1 | 3 | 1 | · | 1 | 4 | 7.3 | licensing (1) · presentation server (1) · web interface (1) |
| AI / ML | 1 | · | · | 1 | 1 | 7.5 | mlffat (1) |
| Hardware Firmware▸ 1 | 1 | 1 | · | 1 | 1 | 9.8 | storcenter pro firmware (1) |
| Unclassified | 69 | 9 | · | 43 | 51 | 6.7 | aardvark topsites php (3) · censura (3) · mathtex (3) |
Weakness × Sector
Which weaknesses hit which solution categories in July 2009
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
89SQL Injection79XSS119Memory Buffer Bounds264CWE-26494Code Injection22Path Traversal399CWE-399189CWE-18920Improper Input Validation287Improper AuthenticationWeb & CMS Plugins49362910161316Operating Systems4105816912Consumer Software16192521284Networking Infrastructure441154Enterprise Software10313121OSS Libraries32932251Databases111Communications12152Security Products11212Hardware Firmware