month report
December 2009
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
December 2009 closed with 445 published CVEs. 91 criticals, ibm led volume, mostly via db2. Top weakness class — CWE-79 (93 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
445
— MoM— YoY
Severity mix
91 / 113
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.8%
8 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
5934.6
n=8
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
4558
n=1
Detection gap
KEV pressure, no Nuclei coverage
December 2009 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1adobe11 CVE
Weakness × Vendor
What's spreading where in December 2009
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — December 2009
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #4mozilla13 CVE
- #9moodle9 CVE
- #10fr.simon rundell8 CVE
- #11cutephp6 CVE
- #13scriptsez6 CVE
- #14sql-ledger6 CVE
- #15korn195 CVE
- #16novell inc.5 CVE
- #17zabbix5 CVE
- #19activewebsoftwares4 CVE
Top vendors
Ranked by distinct CVE count this period.
- 22 CVE2 critCVSS 5.9PoC 1db2 (14) · aix (2) · infosphere information server (2)
- 19 CVE14 critCVSS 9.0windows 2000 (12) · windows xp (12) · windows 2003 server (7)
- 18 CVE17 critCVSS 9.8openview network node manager (12) · openview storage data protector (2) · nonstop server (1)
- 13 CVE6 critCVSS 8.1NEWfirefox (13) · seamonkey (11) · thunderbird (5)
- 11 CVE8 critCVSS 8.8KEV 1adobe air (7) · flash player (7) · flash media server (2)
- 11 CVE1 critCVSS 6.4java system directory server (4) · ray server software (3) · opensolaris (3)
- 10 CVECVSS 6.6PoC 1linux kernel (10)
- 9 CVE6 critCVSS 7.8PoC 1webex (6) · adaptive security appliance 5500 (1) · adaptive security appliance web ssl vpn (1)
- 9 CVECVSS 5.8NEWmoodle (9)
- 8 CVECVSS 5.9NEWste parish admin (2) · hs religiousartgallery (2) · pd resources (2)
- 6 CVECVSS 4.5NEWPoC 3cutenews (6)
- 6 CVECVSS 5.1jboss enterprise application platform (3) · red hat enterprise linux (2) · enterprise mrg (1)
- 6 CVECVSS 4.7NEWPoC 3ez blog (3) · ez poll hoster (2) · ez cart (1)
- 6 CVECVSS 5.7NEWsql-ledger (6)
- 5 CVECVSS 4.9NEWPoC 2utf-8 cutenews (5)
- 5 CVECVSS 6.3NEWPoC 1opensuse (5)
- 5 CVE1 critCVSS 6.7NEWPoC 1zabbix (5)
- 5 CVECVSS 5.6PoC 1debian gnu/linux (4) · linux (1)
- 4 CVECVSS 6.7NEWPoC 3active auction house (1) · active bids (1) · active business directory (1)
- 4 CVECVSS 7.5NEWPoC 3open source security information management (4)
- 4 CVECVSS 5.2PoC 4deluxebb (4)
- 4 CVE4 critCVSS 9.3NEWwinamp (4)
- 4 CVE1 critCVSS 6.4NEWPoC 1php (4)
- 3 CVECVSS 5.1PoC 1switched rack pdu (2) · network management card (2) · ap7932 b2 (1)
- 3 CVECVSS 3.5drupal (3)
- 3 CVECVSS 6.4NEWPoC 2freebsd (3)
- 3 CVE1 critCVSS 6.1NEWnetworkmanager (2) · gpdf (1)
- 3 CVECVSS 5.3NEWPoC 1coreutils (1) · grub 2 (1) · automake (1)
- 3 CVECVSS 4.5NEWPoC 3isupport (2) · idevcart (1)
- 3 CVE1 critCVSS 7.8NEWseil\/b1 (3) · seil\/x2 (2) · seil\/x1 firmware (2)
- 3 CVECVSS 5.1NEWfaq ask (3)
- 3 CVECVSS 4.3NEWwebform (3)
- 3 CVE3 critCVSS 9.5edirectory (1) · iprint (1) · iprint client (1)
- 3 CVECVSS 6.2NEWphpgroupware (3)
- 3 CVECVSS 4.5NEWNuclei 3wp-cumulus (3)
- 3 CVECVSS 5.3NEWactive\! mail (2) · active mail 2003 (1)
- 3 CVE1 critCVSS 6.0PoC 2wireshark (3)
- 3 CVECVSS 5.8NEWzen cart (3)
- 2 CVE1 critCVSS 6.4PoC 1mac os x server (1) · safari (1) · mac os x (1)
- 2 CVECVSS 7.2NEWPoC 1sweetrice (2)
- 2 CVECVSS 5.8NEWrt (2)
- 2 CVE1 critCVSS 6.8NEWPoC 1etrust pestpatrole ppctl.dll activex (1) · service desk (1)
- 2 CVECVSS 6.0ubuntu linux (2)
- 2 CVECVSS 5.9NEWPoC 1hb-ns (2)
- 2 CVECVSS 4.3NEWPoC 1application framework (2) · groupware (2)
- 2 CVECVSS 4.6NEWPoC 2mt882 v100t002b020 arg-t (1) · mt882 modem (1) · mt882 modem firmware (1)
- 2 CVE2 critCVSS 10.0NEWnetbiterconfig (1) · netbiter webscada firmware (1) · netbiter webscada ws100 (1)
- 2 CVECVSS 4.7NEWprint (2)
- 2 CVECVSS 6.4NEWmailsite (2)
- 2 CVECVSS 7.5NEWNuclei 1PoC 1matomo (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | ibm | 22 | 2 | · | · | PoC 1 | db2 (14) · aix (2) · infosphere information server (2) | — | |
| 2 | microsoft | 19 | 14 | · | · | windows 2000 (12) · windows xp (12) · windows 2003 server (7) | — | ||
| 3 | hp | 18 | 17 | · | · | openview network node manager (12) · openview storage data protector (2) · nonstop server (1) | — | ||
| 4 | mozilla | 13 | 6 | · | · | NEW | firefox (13) · seamonkey (11) · thunderbird (5) | — | |
| 5 | adobe | 11 | 8 | 1 | · | KEV 1 | adobe air (7) · flash player (7) · flash media server (2) | — | |
| 6 | sun | 11 | 1 | · | · | java system directory server (4) · ray server software (3) · opensolaris (3) | — | ||
| 7 | linux | 10 | · | · | · | PoC 1 | linux kernel (10) | — | |
| 8 | cisco | 9 | 6 | · | · | PoC 1 | webex (6) · adaptive security appliance 5500 (1) · adaptive security appliance web ssl vpn (1) | — | |
| 9 | moodle | 9 | · | · | · | NEW | moodle (9) | — | |
| 10 | fr.simon rundell | 8 | · | · | · | NEW | ste parish admin (2) · hs religiousartgallery (2) · pd resources (2) | — | |
| 11 | cutephp | 6 | · | · | · | NEWPoC 3 | cutenews (6) | — | |
| 12 | redhat | 6 | · | · | · | jboss enterprise application platform (3) · red hat enterprise linux (2) · enterprise mrg (1) | — | ||
| 13 | scriptsez | 6 | · | · | · | NEWPoC 3 | ez blog (3) · ez poll hoster (2) · ez cart (1) | — | |
| 14 | sql-ledger | 6 | · | · | · | NEW | sql-ledger (6) | — | |
| 15 | korn19 | 5 | · | · | · | NEWPoC 2 | utf-8 cutenews (5) | — | |
| 16 | novell inc. | 5 | · | · | · | NEWPoC 1 | opensuse (5) | — | |
| 17 | zabbix | 5 | 1 | · | · | NEWPoC 1 | zabbix (5) | — | |
| 18 | сообщество свободного программного обеспечения | 5 | · | · | · | PoC 1 | debian gnu/linux (4) · linux (1) | — | |
| 19 | activewebsoftwares | 4 | · | · | · | NEWPoC 3 | active auction house (1) · active bids (1) · active business directory (1) | — | |
| 20 | alienvault | 4 | · | · | · | NEWPoC 3 | open source security information management (4) | — | |
| 21 | deluxebb | 4 | · | · | · | PoC 4 | deluxebb (4) | — | |
| 22 | nullsoft | 4 | 4 | · | · | NEW | winamp (4) | — | |
| 23 | php | 4 | 1 | · | · | NEWPoC 1 | php (4) | — | |
| 24 | apc | 3 | · | · | · | PoC 1 | switched rack pdu (2) · network management card (2) · ap7932 b2 (1) | — | |
| 25 | drupal | 3 | · | · | · | drupal (3) | — | ||
| 26 | freebsd | 3 | · | · | · | NEWPoC 2 | freebsd (3) | — | |
| 27 | gnome | 3 | 1 | · | · | NEW | networkmanager (2) · gpdf (1) | — | |
| 28 | gnu | 3 | · | · | · | NEWPoC 1 | coreutils (1) · grub 2 (1) · automake (1) | — | |
| 29 | idevspot | 3 | · | · | · | NEWPoC 3 | isupport (2) · idevcart (1) | — | |
| 30 | iij | 3 | 1 | · | · | NEW | seil\/b1 (3) · seil\/x2 (2) · seil\/x1 firmware (2) | — | |
| 31 | nanwich | 3 | · | · | · | NEW | faq ask (3) | — | |
| 32 | nathan haug | 3 | · | · | · | NEW | webform (3) | — | |
| 33 | novell | 3 | 3 | · | · | edirectory (1) · iprint (1) · iprint client (1) | — | ||
| 34 | phpgroupware | 3 | · | · | · | NEW | phpgroupware (3) | — | |
| 35 | roytanck | 3 | · | · | 3 | NEWNuclei 3 | wp-cumulus (3) | — | |
| 36 | transware | 3 | · | · | · | NEW | active\! mail (2) · active mail 2003 (1) | — | |
| 37 | wireshark | 3 | 1 | · | · | PoC 2 | wireshark (3) | — | |
| 38 | zen-cart | 3 | · | · | · | NEW | zen cart (3) | — | |
| 39 | apple | 2 | 1 | · | · | PoC 1 | mac os x server (1) · safari (1) · mac os x (1) | — | |
| 40 | basic-cms | 2 | · | · | · | NEWPoC 1 | sweetrice (2) | — | |
| 41 | bestpractical | 2 | · | · | · | NEW | rt (2) | — | |
| 42 | ca | 2 | 1 | · | · | NEWPoC 1 | etrust pestpatrole ppctl.dll activex (1) · service desk (1) | — | |
| 43 | canonical | 2 | · | · | · | ubuntu linux (2) | — | ||
| 44 | harold bakker | 2 | · | · | · | NEWPoC 1 | hb-ns (2) | — | |
| 45 | horde | 2 | · | · | · | NEWPoC 1 | application framework (2) · groupware (2) | — | |
| 46 | huawei | 2 | · | · | · | NEWPoC 2 | mt882 v100t002b020 arg-t (1) · mt882 modem (1) · mt882 modem firmware (1) | — | |
| 47 | intellicom | 2 | 2 | · | · | NEW | netbiterconfig (1) · netbiter webscada firmware (1) · netbiter webscada ws100 (1) | — | |
| 48 | joao ventura | 2 | · | · | · | NEW | print (2) | — | |
| 49 | mailsite | 2 | · | · | · | NEW | mailsite (2) | — | |
| 50 | matomo | 2 | · | · | 1 | NEWNuclei 1PoC 1 | matomo (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins96 CVE1 crit63 vendorsCVSS 6.5moodle (9) · cutenews (6) · utf-8 cutenews (5)
- Enterprise Software70 CVE28 crit15 vendorsCVSS 7.4db2 (14) · openview network node manager (12) · zabbix (5)
- Operating Systems65 CVE61 crit3 KEV19 vendorsCVSS 9.0linux kernel (10) · opensuse (6) · debian gnu/linux (4)
- Consumer Software47 CVE42 crit4 KEV18 vendorsCVSS 9.3adobe air (7) · flash player (7) · flash media server (2)
- OSS Libraries30 CVE5 crit20 vendorsCVSS 7.5php (4) · libmikmod (2) · pyforum (2)
- Security Products15 CVE25 crit11 vendorsCVSS 9.1wireshark (3) · virobot desktop (1)
- 6 crit5 vendorsCVSS 7.8webex (6) · adaptive security appliance (1) · adaptive security appliance 5500 (1)
- Communications12 CVE8 vendorsCVSS 5.3active\! mail (2) · application framework (2) · groupware (2)
- ICS / OT / IoT7 CVE5 crit3 vendorsCVSS 7.8deluxebb (4) · daqfactory (1) · netbiter webscada firmware (1)
- DevTools & CI5 CVE4 vendorsCVSS 5.6testlink (2) · ignition (1)
- Mobile Apps4 CVE1 crit2 vendorsCVSS 6.4mac os x (1) · mac os x server (1) · safari (1)
- Databases3 CVE3 vendorsCVSS 6.8postgresql (2) · mariadb (1) · mysql (1)
- Hardware Firmware1 CVE1 vendorsCVSS 7.2gm45 chipset (1) · pm45 express chipset (1) · q35 chipset (1)
- Cloud & SaaS1 CVE1 vendorsCVSS 4.3esx server (1) · lab manager (1) · server (1)
- Unclassified70 CVE4 crit50 vendorsCVSS 6.0faq ask (3) · acpid (2) · aroundme (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 5 | 96 | 1 | · | 63 | 72 | 6.5 | moodle (9) · cutenews (6) · utf-8 cutenews (5) |
| Enterprise Software▸ 3 | 70 | 28 | · | 15 | 35 | 7.4 | db2 (14) · openview network node manager (12) · zabbix (5) |
| Operating Systems▸ 3 | 65 | 61 | 3 | 19 | 44 | 9.0 | linux kernel (10) · opensuse (6) · debian gnu/linux (4) |
| Consumer Software▸ 5 | 47 | 42 | 4 | 18 | 31 | 9.3 | adobe air (7) · flash player (7) · flash media server (2) |
| OSS Libraries▸ 5 | 30 | 5 | · | 20 | 25 | 7.5 | php (4) · libmikmod (2) · pyforum (2) |
| Security Products▸ 5 | 15 | 25 | · | 11 | 43 | 9.1 | wireshark (3) · virobot desktop (1) |
| Networking Infrastructure▸ 5 | 14 | 6 | · | 5 | 10 | 7.8 | webex (6) · adaptive security appliance (1) · adaptive security appliance 5500 (1) |
| Communications▸ 3 | 12 | · | · | 8 | 11 | 5.3 | active\! mail (2) · application framework (2) · groupware (2) |
| ICS / OT / IoT▸ 1 | 7 | 5 | · | 3 | 6 | 7.8 | deluxebb (4) · daqfactory (1) · netbiter webscada firmware (1) |
| DevTools & CI▸ 3 | 5 | · | · | 4 | 4 | 5.6 | testlink (2) · ignition (1) |
| Mobile Apps▸ 2 | 4 | 1 | · | 2 | 6 | 6.4 | mac os x (1) · mac os x server (1) · safari (1) |
| Databases▸ 1 | 3 | · | · | 3 | 3 | 6.8 | postgresql (2) · mariadb (1) · mysql (1) |
| Hardware Firmware▸ 1 | 1 | · | · | 1 | 5 | 7.2 | gm45 chipset (1) · pm45 express chipset (1) · q35 chipset (1) |
| Cloud & SaaS▸ 1 | 1 | · | · | 1 | 7 | 4.3 | esx server (1) · lab manager (1) · server (1) |
| Unclassified | 70 | 4 | · | 50 | 54 | 6.0 | faq ask (3) · acpid (2) · aroundme (2) |
Weakness × Sector
Which weaknesses hit which solution categories in December 2009
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS119Memory Buffer Bounds89SQL Injection264CWE-26422Path Traversal200Information Exposure94Code Injection399CWE-399189CWE-18920Improper Input ValidationWeb & CMS Plugins462551010622Operating Systems310726542Consumer Software4134214686Enterprise Software8156121111OSS Libraries9733234231Networking Infrastructure210212Communications511111Databases1422Security Products121411ICS / OT / IoT12111