month report
October 2009
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
October 2009 closed with 353 published CVEs. 93 criticals, oracle led volume, mostly via database server. Top weakness class — CWE-79 (50 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
353
— MoM— YoY
Severity mix
93 / 80
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.3%
1 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
5978.1
n=1
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
6063
n=1
Detection gap
KEV pressure, no Nuclei coverage
October 2009 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1adobe25 CVE
Weakness × Vendor
What's spreading where in October 2009
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
79XSS89SQL Injection119Memory Buffer Bounds189CWE-18994Code Injection22Path Traversal20Improper Input Validation264CWE-264399CWE-399200Information Exposureoraclemicrosoft3711212adobe44614mozilla121linux21113сообщество свободного программного обеспечения51ibm4111canonical2fedoraproject2poppler51foolabs41glyphandcog41
Most discussed CVEs — October 2009
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #10poppler6 CVE
- #12foolabs5 CVE
- #13glyphandcog5 CVE
- #16emc4 CVE
- #21achievo3 CVE
- #24freewebscriptz3 CVE
- #26kreotek3 CVE
- #27maniacomputer3 CVE
- #28nullam3 CVE
- #29opendocman3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 37 CVE4 critCVSS 4.9database server (16) · e-business suite (8) · bea product suite (4)
- 28 CVE17 critCVSS 8.9windows server 2008 (23) · windows vista (23) · windows xp (22)
- 25 CVE18 critCVSS 8.1KEV 1acrobat (25) · acrobat reader (20)
- 14 CVE11 critCVSS 9.0firefox (14) · seamonkey (3)
- 13 CVECVSS 5.3PoC 3linux kernel (13)
- 12 CVE7 critCVSS 7.0PoC 5debian gnu/linux (12) · perl (1)
- 9 CVE4 critCVSS 7.5PoC 3aix (3) · informix client sdk (1) · informix connect runtime (1)
- 6 CVECVSS 3.9PoC 1ubuntu linux (6)
- 6 CVECVSS 4.8PoC 1fedora (6)
- 6 CVE5 critCVSS 8.5NEWPoC 5poppler (6)
- 6 CVE2 critCVSS 4.6enterprise linux workstation (3) · enterprise linux server (3) · red hat enterprise linux (3)
- 5 CVE4 critCVSS 8.3NEWPoC 5xpdf (5)
- 5 CVE4 critCVSS 8.3NEWPoC 5xpdfreader (5)
- 5 CVECVSS 4.4PoC 1opensuse (5)
- 4 CVECVSS 7.0PoC 4xencenterweb (4)
- 4 CVE3 critCVSS 8.6NEWcaptiva pixtools distributed imaging (1) · documentum applicationxtender (1) · documentum applicationxtender workflow manager (1)
- 4 CVECVSS 6.1PoC 2runcms (4)
- 4 CVECVSS 4.1PoC 1linux enterprise server (3) · linux enterprise desktop (3) · linux enterprise software development kit (2)
- 4 CVECVSS 5.8PoC 1fusion (2) · workstation (1) · ace (1)
- 4 CVE1 critCVSS 5.9wireshark (4)
- 3 CVECVSS 6.4NEWPoC 1achievo (3)
- 3 CVE1 critCVSS 7.2http server (1) · openoffice.org (1) · portable runtime (1)
- 3 CVECVSS 7.1PoC 2avast antivirus professional (3) · avast antivirus home (3)
- 3 CVECVSS 4.5NEWPoC 1hubscript (2) · freelancers (1)
- 3 CVE1 critCVSS 4.5PoC 1cm8050 mfp (1) · cm8060 mfp (1) · color laserjet 3000n (1)
- 3 CVECVSS 5.6NEWPoC 3phpbms (3)
- 3 CVECVSS 5.9NEWPoC 3mcshoutbox (3)
- 3 CVECVSS 6.4NEWPoC 3nullam blog (3)
- 3 CVECVSS 6.4NEWopendocman (3)
- 3 CVECVSS 6.4NEWPoC 3opial (3)
- 3 CVE1 critCVSS 6.2NEWapache-solr-for-typo3/solr (1) · phpmyadmin/phpmyadmin (1) · sjbr/sr-freecap (1)
- 3 CVECVSS 6.0NEWsimplenews statistics (3)
- 3 CVECVSS 4.5solaris (2) · virtualbox (1) · opensolaris (1)
- 3 CVECVSS 4.2NEWPoC 3xerver (3)
- 2 CVE1 critCVSS 6.8NEWPoC 2mp3 audio mixer (2)
- 2 CVECVSS 5.9NEWPoC 1clear content (2)
- 2 CVECVSS 4.7NEWPoC 1amiro.cms (2)
- 2 CVE1 critCVSS 6.7etrust intrusion detection (2) · etrust secure content manager (2) · internet security suite (2)
- 2 CVE1 critCVSS 6.8anti-virus (2) · anti-virus for the enterprise (2) · anti-virus gateway (2)
- 2 CVECVSS 5.9NEWPoC 2battle blog (2)
- 2 CVE2 critCVSS 9.3NEWPoC 2epicdj (1) · epicvj (1)
- 2 CVECVSS 4.5PoC 1gentoo linux (2)
- 2 CVECVSS 4.3android (2)
- 2 CVE2 critCVSS 10.0NEWPoC 2httpdx (2)
- 2 CVECVSS 5.9NEWPoC 2cmsphp (2)
- 2 CVE2 critCVSS 9.3NEWPoC 1alleycode html editor (2)
- 2 CVECVSS 6.5NEWPoC 2d.net cms (2)
- 2 CVECVSS 3.9NEWog vocab (1) · organic groups (1)
- 2 CVECVSS 6.8NEWmutt (2)
- 2 CVECVSS 5.9openbsd (1) · openssh (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 37 | 4 | · | · | database server (16) · e-business suite (8) · bea product suite (4) | — | ||
| 2 | microsoft | 28 | 17 | · | · | windows server 2008 (23) · windows vista (23) · windows xp (22) | — | ||
| 3 | adobe | 25 | 18 | 1 | · | KEV 1 | acrobat (25) · acrobat reader (20) | — | |
| 4 | mozilla | 14 | 11 | · | · | firefox (14) · seamonkey (3) | — | ||
| 5 | linux | 13 | · | · | · | PoC 3 | linux kernel (13) | — | |
| 6 | сообщество свободного программного обеспечения | 12 | 7 | · | · | PoC 5 | debian gnu/linux (12) · perl (1) | — | |
| 7 | ibm | 9 | 4 | · | · | PoC 3 | aix (3) · informix client sdk (1) · informix connect runtime (1) | — | |
| 8 | canonical | 6 | · | · | · | PoC 1 | ubuntu linux (6) | — | |
| 9 | fedoraproject | 6 | · | · | · | PoC 1 | fedora (6) | — | |
| 10 | poppler | 6 | 5 | · | · | NEWPoC 5 | poppler (6) | — | |
| 11 | redhat | 6 | 2 | · | · | enterprise linux workstation (3) · enterprise linux server (3) · red hat enterprise linux (3) | — | ||
| 12 | foolabs | 5 | 4 | · | · | NEWPoC 5 | xpdf (5) | — | |
| 13 | glyphandcog | 5 | 4 | · | · | NEWPoC 5 | xpdfreader (5) | — | |
| 14 | opensuse | 5 | · | · | · | PoC 1 | opensuse (5) | — | |
| 15 | citrix | 4 | · | · | · | PoC 4 | xencenterweb (4) | — | |
| 16 | emc | 4 | 3 | · | · | NEW | captiva pixtools distributed imaging (1) · documentum applicationxtender (1) · documentum applicationxtender workflow manager (1) | — | |
| 17 | runcms | 4 | · | · | · | PoC 2 | runcms (4) | — | |
| 18 | suse | 4 | · | · | · | PoC 1 | linux enterprise server (3) · linux enterprise desktop (3) · linux enterprise software development kit (2) | — | |
| 19 | vmware | 4 | · | · | · | PoC 1 | fusion (2) · workstation (1) · ace (1) | — | |
| 20 | wireshark | 4 | 1 | · | · | wireshark (4) | — | ||
| 21 | achievo | 3 | · | · | · | NEWPoC 1 | achievo (3) | — | |
| 22 | apache | 3 | 1 | · | · | http server (1) · openoffice.org (1) · portable runtime (1) | — | ||
| 23 | avast | 3 | · | · | · | PoC 2 | avast antivirus professional (3) · avast antivirus home (3) | — | |
| 24 | freewebscriptz | 3 | · | · | · | NEWPoC 1 | hubscript (2) · freelancers (1) | — | |
| 25 | hp | 3 | 1 | · | · | PoC 1 | cm8050 mfp (1) · cm8060 mfp (1) · color laserjet 3000n (1) | — | |
| 26 | kreotek | 3 | · | · | · | NEWPoC 3 | phpbms (3) | — | |
| 27 | maniacomputer | 3 | · | · | · | NEWPoC 3 | mcshoutbox (3) | — | |
| 28 | nullam | 3 | · | · | · | NEWPoC 3 | nullam blog (3) | — | |
| 29 | opendocman | 3 | · | · | · | NEW | opendocman (3) | — | |
| 30 | opial | 3 | · | · | · | NEWPoC 3 | opial (3) | — | |
| 31 | packagist | 3 | 1 | · | · | NEW | apache-solr-for-typo3/solr (1) · phpmyadmin/phpmyadmin (1) · sjbr/sr-freecap (1) | — | |
| 32 | sjoerd arendsen | 3 | · | · | · | NEW | simplenews statistics (3) | — | |
| 33 | sun | 3 | · | · | · | solaris (2) · virtualbox (1) · opensolaris (1) | — | ||
| 34 | xerver | 3 | · | · | · | NEWPoC 3 | xerver (3) | — | |
| 35 | acoustica | 2 | 1 | · | · | NEWPoC 2 | mp3 audio mixer (2) | — | |
| 36 | allisclear | 2 | · | · | · | NEWPoC 1 | clear content (2) | — | |
| 37 | amirocms | 2 | · | · | · | NEWPoC 1 | amiro.cms (2) | — | |
| 38 | broadcom | 2 | 1 | · | · | etrust intrusion detection (2) · etrust secure content manager (2) · internet security suite (2) | — | ||
| 39 | ca | 2 | 1 | · | · | anti-virus (2) · anti-virus for the enterprise (2) · anti-virus gateway (2) | — | ||
| 40 | davethewebguy | 2 | · | · | · | NEWPoC 2 | battle blog (2) | — | |
| 41 | epicdjsoftware | 2 | 2 | · | · | NEWPoC 2 | epicdj (1) · epicvj (1) | — | |
| 42 | gentoo foundation inc. | 2 | · | · | · | PoC 1 | gentoo linux (2) | — | |
| 43 | 2 | · | · | · | android (2) | — | |||
| 44 | jasper | 2 | 2 | · | · | NEWPoC 2 | httpdx (2) | — | |
| 45 | jean-michel wyttenbach | 2 | · | · | · | NEWPoC 2 | cmsphp (2) | — | |
| 46 | konae | 2 | 2 | · | · | NEWPoC 1 | alleycode html editor (2) | — | |
| 47 | marcin manek | 2 | · | · | · | NEWPoC 2 | d.net cms (2) | — | |
| 48 | moshe weitzman | 2 | · | · | · | NEW | og vocab (1) · organic groups (1) | — | |
| 49 | mutt | 2 | · | · | · | NEW | mutt (2) | — | |
| 50 | openbsd | 2 | · | · | · | openbsd (1) · openssh (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems69 CVE227 crit19 vendorsCVSS 8.9linux kernel (13) · debian gnu/linux (12) · fedora (6)
- Consumer Software55 CVE57 crit2 KEV10 vendorsCVSS 8.9acrobat (25) · acrobat reader (20) · openoffice.org (2)
- Web & CMS Plugins47 CVE4 crit31 vendorsCVSS 7.5runcms (4) · nullam blog (3) · amiro.cms (2)
- Databases39 CVE4 crit2 vendorsCVSS 5.9database server (16) · e-business suite (8) · bea product suite (4)
- Enterprise Software32 CVE27 crit14 vendorsCVSS 7.5aix (3) · anti-virus (2) · anti-virus for the enterprise (2)
- Security Products22 CVE4 crit11 vendorsCVSS 7.5shared sign-on (2) · captiva pixtools distributed imaging (1) · dex (1)
- OSS Libraries20 CVE13 crit13 vendorsCVSS 8.1poppler (6) · xpdf (5) · gd graphics library (1)
- Cloud & SaaS12 CVE13 crit5 vendorsCVSS 9.9xencenterweb (4) · anti-virus (2) · anti-virus for the enterprise (2)
- 6 vendorsCVSS 7.5xerver (3) · proftpd (1)
- Communications6 CVE3 crit6 vendorsCVSS 9.3adium (1) · com ajaxchat (1) · pidgin (1)
- Mobile Apps4 CVE3 vendorsCVSS 5.1android (2) · com djcatalog (1)
- ICS / OT / IoT2 CVE2 vendorsCVSS 6.4pi server (1)
- Unclassified49 CVE12 crit40 vendorsCVSS 6.6phpbms (3) · alleycode html editor (2) · clear content (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 69 | 227 | · | 19 | 66 | 8.9 | linux kernel (13) · debian gnu/linux (12) · fedora (6) |
| Consumer Software▸ 5 | 55 | 57 | 2 | 10 | 12 | 8.9 | acrobat (25) · acrobat reader (20) · openoffice.org (2) |
| Web & CMS Plugins▸ 5 | 47 | 4 | · | 31 | 35 | 7.5 | runcms (4) · nullam blog (3) · amiro.cms (2) |
| Databases▸ 2 | 39 | 4 | · | 2 | 10 | 5.9 | database server (16) · e-business suite (8) · bea product suite (4) |
| Enterprise Software▸ 5 | 32 | 27 | · | 14 | 78 | 7.5 | aix (3) · anti-virus (2) · anti-virus for the enterprise (2) |
| Security Products▸ 6 | 22 | 4 | · | 11 | 17 | 7.5 | shared sign-on (2) · captiva pixtools distributed imaging (1) · dex (1) |
| OSS Libraries▸ 4 | 20 | 13 | · | 13 | 18 | 8.1 | poppler (6) · xpdf (5) · gd graphics library (1) |
| Cloud & SaaS▸ 2 | 12 | 13 | · | 5 | 23 | 9.9 | xencenterweb (4) · anti-virus (2) · anti-virus for the enterprise (2) |
| Networking Infrastructure▸ 4 | 9 | · | · | 6 | 6 | 7.5 | xerver (3) · proftpd (1) |
| Communications▸ 3 | 6 | 3 | · | 6 | 8 | 9.3 | adium (1) · com ajaxchat (1) · pidgin (1) |
| Mobile Apps▸ 2 | 4 | · | · | 3 | 3 | 5.1 | android (2) · com djcatalog (1) |
| ICS / OT / IoT▸ 2 | 2 | · | · | 2 | 2 | 6.4 | pi server (1) |
| Unclassified | 49 | 12 | · | 40 | 41 | 6.6 | phpbms (3) · alleycode html editor (2) · clear content (2) |
Weakness × Sector
Which weaknesses hit which solution categories in October 2009
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS89SQL Injection119Memory Buffer Bounds189CWE-18994Code Injection22Path Traversal20Improper Input Validation264CWE-264399CWE-399200Information ExposureConsumer Software117128736Operating Systems413112553Web & CMS Plugins22152310124Enterprise Software910212321OSS Libraries616952111Databases11242Security Products513321Networking Infrastructure222121Cloud & SaaS11112DevTools & CI2331