month report
January 2010
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
January 2010 closed with 319 published CVEs. 62 criticals, oracle led volume, mostly via database server. Top weakness class — CWE-89 (58 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
319
— MoM— YoY
Severity mix
62 / 102
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.3%
1 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
5903.0
n=1
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
4529
n=3
Weakness × Vendor
What's spreading where in January 2010
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — January 2010
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #1oracle23 CVE
- #2sun16 CVE
- #3adobe12 CVE
- #4typo312 CVE
- #5microsoft11 CVE
- #6ibm9 CVE
- #7linux9 CVE
- #8realnetworks9 CVE
- #9сообщество свободного программного обеспечения7 CVE
- #10cisco6 CVE
Top vendors
Ranked by distinct CVE count this period.
- 23 CVE4 critCVSS 5.3NEWdatabase server (9) · bea product suite (5) · application server (4)
- 16 CVE3 critCVSS 6.7NEWPoC 7java system web server (7) · iplanet messaging server (2) · one messaging server (2)
- 12 CVE9 critCVSS 9.2NEWKEV 1acrobat (7) · acrobat reader (6) · shockwave player (2)
- 12 CVECVSS 6.5NEWbb simplejobs (1) · dl3 tt news alerts (1) · job reports (1)
- 11 CVE7 critCVSS 8.5NEWKEV 2PoC 2internet explorer (7) · windows xp (4) · windows 2000 (3)
- 9 CVE5 critCVSS 8.2NEWPoC 1lotus inotes (4) · lotus domino (2) · db2 (1)
- 9 CVE1 critCVSS 6.3NEWPoC 1linux kernel (9)
- 9 CVE9 critCVSS 9.3NEWhelix player (9) · realplayer (9) · realplayer enterprise (9)
- 7 CVECVSS 6.0NEWdebian gnu/linux (7)
- 6 CVE3 critCVSS 8.6NEWunified meetingplace (4) · ios xr (1) · ciscoworks internetwork performance monitor (1)
- 5 CVE1 critCVSS 8.0NEWdebian linux (5)
- 5 CVECVSS 6.6NEWenterprise linux (2) · enterprise linux desktop (1) · enterprise linux eus (1)
- 4 CVECVSS 5.8NEWgzip (2) · bash (1) · glibc (1)
- 4 CVE3 critCVSS 8.4NEWpower manager (2) · web jetadmin (1) · openview storage data protector (1)
- 4 CVECVSS 6.5NEWPoC 4com artistavenue (1) · com casino (1) · com dhforum (1)
- 4 CVECVSS 5.5NEWPoC 1org.apache.tomcat:tomcat (3) · org.mortbay.jetty:jetty (1)
- 4 CVECVSS 5.3NEWPoC 1jetty (4)
- 4 CVECVSS 5.7NEWPoC 3zenphoto (4)
- 3 CVECVSS 4.8NEWtomcat (3)
- 3 CVECVSS 7.6NEWmac os x (2) · mac os x server (2) · safari (1)
- 3 CVECVSS 6.2NEWPoC 1bits video script (3)
- 3 CVE2 critCVSS 7.9NEWPoC 1google sketchup (2) · chrome (1)
- 3 CVECVSS 5.3NEWbind (3)
- 3 CVECVSS 5.6NEWPoC 3php calendars script (3)
- 3 CVECVSS 2.9NEWPoC 1datatraveler blackbox (3) · datatraveler elite (3) · datatraveler secure (3)
- 3 CVECVSS 5.0NEWfirefox (2) · seamonkey (2) · thunderbird (2)
- 3 CVECVSS 7.5NEWPoC 2blog system (1) · media real estate portal (1) · real estate portal (1)
- 3 CVE2 critCVSS 9.2NEWopensuse (2) · suse linux enterprise (1)
- 3 CVECVSS 8.4NEWKEV 1opensuse (3)
- 3 CVE2 critCVSS 8.3NEWphpmyadmin (3)
- 3 CVECVSS 6.2NEWPoC 1phpshop (3)
- 3 CVECVSS 5.9NEWPoC 2php inventory (3)
- 3 CVECVSS 4.6NEWcruzer enterprise usb (2) · cruzer enterprise firmware (1)
- 3 CVECVSS 6.4NEWbase (3)
- 3 CVECVSS 7.9NEWKEV 1linux enterprise (2) · linux enterprise debuginfo (1) · linux enterprise server (1)
- 3 CVECVSS 4.0NEWtor (3)
- 3 CVECVSS 4.6NEWcorporate secure (3)
- 3 CVE1 critCVSS 5.9NEWPoC 1zeus web server (3)
- 2 CVE1 critCVSS 7.4NEWPoC 2mini httpd (1) · thttpd (1)
- 2 CVECVSS 6.3NEWadium (2)
- 2 CVECVSS 7.7NEWgoof fotoboek (2)
- 2 CVECVSS 4.7NEWwebcalenderc3 (2)
- 2 CVECVSS 5.0NEWPoC 2cherokee (2)
- 2 CVECVSS 5.5NEWPoC 2facil helpdesk (2)
- 2 CVECVSS 6.3NEWPoC 2moa gallery (2)
- 2 CVECVSS 5.6NEWfedora (1) · sssd (1)
- 2 CVECVSS 5.9NEWvote for tt news (2)
- 2 CVECVSS 5.9NEWPoC 2miniweb (2)
- 2 CVECVSS 5.9NEWPoC 2support center (2)
- 2 CVECVSS 6.3NEWPoC 2logoshows bbs (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 23 | 4 | · | · | NEW | database server (9) · bea product suite (5) · application server (4) | — | |
| 2 | sun | 16 | 3 | · | · | NEWPoC 7 | java system web server (7) · iplanet messaging server (2) · one messaging server (2) | — | |
| 3 | adobe | 12 | 9 | 1 | · | NEWKEV 1 | acrobat (7) · acrobat reader (6) · shockwave player (2) | — | |
| 4 | typo3 | 12 | · | · | · | NEW | bb simplejobs (1) · dl3 tt news alerts (1) · job reports (1) | — | |
| 5 | microsoft | 11 | 7 | 2 | · | NEWKEV 2PoC 2 | internet explorer (7) · windows xp (4) · windows 2000 (3) | — | |
| 6 | ibm | 9 | 5 | · | · | NEWPoC 1 | lotus inotes (4) · lotus domino (2) · db2 (1) | — | |
| 7 | linux | 9 | 1 | · | · | NEWPoC 1 | linux kernel (9) | — | |
| 8 | realnetworks | 9 | 9 | · | · | NEW | helix player (9) · realplayer (9) · realplayer enterprise (9) | — | |
| 9 | сообщество свободного программного обеспечения | 7 | · | · | · | NEW | debian gnu/linux (7) | — | |
| 10 | cisco | 6 | 3 | · | · | NEW | unified meetingplace (4) · ios xr (1) · ciscoworks internetwork performance monitor (1) | — | |
| 11 | debian | 5 | 1 | · | · | NEW | debian linux (5) | — | |
| 12 | redhat | 5 | · | · | · | NEW | enterprise linux (2) · enterprise linux desktop (1) · enterprise linux eus (1) | — | |
| 13 | gnu | 4 | · | · | · | NEW | gzip (2) · bash (1) · glibc (1) | — | |
| 14 | hp | 4 | 3 | · | · | NEW | power manager (2) · web jetadmin (1) · openview storage data protector (1) | — | |
| 15 | joomla | 4 | · | · | · | NEWPoC 4 | com artistavenue (1) · com casino (1) · com dhforum (1) | — | |
| 16 | maven | 4 | · | · | · | NEWPoC 1 | org.apache.tomcat:tomcat (3) · org.mortbay.jetty:jetty (1) | — | |
| 17 | mortbay | 4 | · | · | · | NEWPoC 1 | jetty (4) | — | |
| 18 | zenphoto | 4 | · | · | · | NEWPoC 3 | zenphoto (4) | — | |
| 19 | apache | 3 | · | · | · | NEW | tomcat (3) | — | |
| 20 | apple | 3 | · | · | · | NEW | mac os x (2) · mac os x server (2) · safari (1) | — | |
| 21 | bitscripts | 3 | · | · | · | NEWPoC 1 | bits video script (3) | — | |
| 22 | 3 | 2 | · | · | NEWPoC 1 | google sketchup (2) · chrome (1) | — | ||
| 23 | isc | 3 | · | · | · | NEW | bind (3) | — | |
| 24 | jce-tech | 3 | · | · | · | NEWPoC 3 | php calendars script (3) | — | |
| 25 | kingston | 3 | · | · | · | NEWPoC 1 | datatraveler blackbox (3) · datatraveler elite (3) · datatraveler secure (3) | — | |
| 26 | mozilla | 3 | · | · | · | NEW | firefox (2) · seamonkey (2) · thunderbird (2) | — | |
| 27 | netartmedia | 3 | · | · | · | NEWPoC 2 | blog system (1) · media real estate portal (1) · real estate portal (1) | — | |
| 28 | novell inc. | 3 | 2 | · | · | NEW | opensuse (2) · suse linux enterprise (1) | — | |
| 29 | opensuse | 3 | · | 1 | · | NEWKEV 1 | opensuse (3) | — | |
| 30 | phpmyadmin | 3 | 2 | · | · | NEW | phpmyadmin (3) | — | |
| 31 | phpshop | 3 | · | · | · | NEWPoC 1 | phpshop (3) | — | |
| 32 | phpwares | 3 | · | · | · | NEWPoC 2 | php inventory (3) | — | |
| 33 | sandisk | 3 | · | · | · | NEW | cruzer enterprise usb (2) · cruzer enterprise firmware (1) | — | |
| 34 | secureideas | 3 | · | · | · | NEW | base (3) | — | |
| 35 | suse | 3 | · | 1 | · | NEWKEV 1 | linux enterprise (2) · linux enterprise debuginfo (1) · linux enterprise server (1) | — | |
| 36 | tor | 3 | · | · | · | NEW | tor (3) | — | |
| 37 | verbatim | 3 | · | · | · | NEW | corporate secure (3) | — | |
| 38 | zeus | 3 | 1 | · | · | NEWPoC 1 | zeus web server (3) | — | |
| 39 | acme | 2 | 1 | · | · | NEWPoC 2 | mini httpd (1) · thttpd (1) | — | |
| 40 | adium | 2 | · | · | · | NEW | adium (2) | — | |
| 41 | arco van geest | 2 | · | · | · | NEW | goof fotoboek (2) | — | |
| 42 | c-3.co.jp | 2 | · | · | · | NEW | webcalenderc3 (2) | — | |
| 43 | cherokee | 2 | · | · | · | NEWPoC 2 | cherokee (2) | — | |
| 44 | cromosoft | 2 | · | · | · | NEWPoC 2 | facil helpdesk (2) | — | |
| 45 | dan brown | 2 | · | · | · | NEWPoC 2 | moa gallery (2) | — | |
| 46 | fedoraproject | 2 | · | · | · | NEW | fedora (1) · sssd (1) | — | |
| 47 | francisco cifuentes | 2 | · | · | · | NEW | vote for tt news (2) | — | |
| 48 | intesync | 2 | · | · | · | NEWPoC 2 | miniweb (2) | — | |
| 49 | isolsoft | 2 | · | · | · | NEWPoC 2 | support center (2) | — | |
| 50 | logoshows | 2 | · | · | · | NEWPoC 2 | logoshows bbs (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins89 CVE3 crit53 vendorsCVSS 7.0zenphoto (4) · php inventory (3) · tomcat (3)
- Operating Systems55 CVE30 crit18 KEV19 vendorsCVSS 8.5linux kernel (9) · debian gnu/linux (7) · opensuse (6)
- Consumer Software30 CVE54 crit1 KEV9 vendorsCVSS 10.0helix player (9) · realplayer (9) · realplayer enterprise (9)
- Databases27 CVE6 crit3 vendorsCVSS 7.3database server (9) · bea product suite (5) · application server (4)
- 7 crit11 vendorsCVSS 8.6zeus web server (3) · cherokee (2) · mini httpd (1)
- Enterprise Software20 CVE10 crit8 vendorsCVSS 7.5lotus inotes (4) · facil helpdesk (2) · lotus domino (2)
- OSS Libraries20 CVE2 crit11 vendorsCVSS 8.8gzip (2) · openssl (2) · bash (1)
- Hardware Firmware10 CVE4 vendorsCVSS 4.0corporate secure (3) · datatraveler blackbox (3) · datatraveler elite (3)
- Security Products10 CVE1 crit6 vendorsCVSS 6.8tor (3) · ipsec vpn client (1)
- Communications6 CVE6 vendorsCVSS 6.0imp (1) · sendmail (1) · webmail (1)
- Mobile Apps6 CVE2 crit2 vendorsCVSS 7.9google sketchup (2) · chrome (1)
- DevTools & CI6 CVE5 vendorsCVSS 7.5devlog (1) · lxr cross referencer (1) · usermin (1)
- ICS / OT / IoT3 CVE2 crit2 vendorsCVSS 10.0miniweb (2)
- Unclassified28 CVE2 crit22 vendorsCVSS 6.6bits video script (3) · goof fotoboek (2) · moa gallery (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 5 | 89 | 3 | · | 53 | 72 | 7.0 | zenphoto (4) · php inventory (3) · tomcat (3) |
| Operating Systems▸ 3 | 55 | 30 | 18 | 19 | 56 | 8.5 | linux kernel (9) · debian gnu/linux (7) · opensuse (6) |
| Consumer Software▸ 5 | 30 | 54 | 1 | 9 | 18 | 10.0 | helix player (9) · realplayer (9) · realplayer enterprise (9) |
| Databases▸ 2 | 27 | 6 | · | 3 | 10 | 7.3 | database server (9) · bea product suite (5) · application server (4) |
| Networking Infrastructure▸ 5 | 21 | 7 | · | 11 | 13 | 8.6 | zeus web server (3) · cherokee (2) · mini httpd (1) |
| Enterprise Software▸ 5 | 20 | 10 | · | 8 | 17 | 7.5 | lotus inotes (4) · facil helpdesk (2) · lotus domino (2) |
| OSS Libraries▸ 5 | 20 | 2 | · | 11 | 14 | 8.8 | gzip (2) · openssl (2) · bash (1) |
| Hardware Firmware▸ 1 | 10 | · | · | 4 | 8 | 4.0 | corporate secure (3) · datatraveler blackbox (3) · datatraveler elite (3) |
| Security Products▸ 3 | 10 | 1 | · | 6 | 7 | 6.8 | tor (3) · ipsec vpn client (1) |
| Communications▸ 2 | 6 | · | · | 6 | 6 | 6.0 | imp (1) · sendmail (1) · webmail (1) |
| Mobile Apps▸ 2 | 6 | 2 | · | 2 | 5 | 7.9 | google sketchup (2) · chrome (1) |
| DevTools & CI▸ 3 | 6 | · | · | 5 | 6 | 7.5 | devlog (1) · lxr cross referencer (1) · usermin (1) |
| ICS / OT / IoT▸ 2 | 3 | 2 | · | 2 | 3 | 10.0 | miniweb (2) |
| Unclassified | 28 | 2 | · | 22 | 23 | 6.6 | bits video script (3) · goof fotoboek (2) · moa gallery (2) |
Weakness × Sector
Which weaknesses hit which solution categories in January 2010
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
89SQL Injection79XSS119Memory Buffer Bounds264CWE-26420Improper Input Validation94Code Injection200Information Exposure22Path Traversal189CWE-189255CWE-255Web & CMS Plugins463444335Consumer Software2177214Operating Systems146221241Enterprise Software152221Networking Infrastructure133271121OSS Libraries33152231Databases1111Security Products111231Communications1151Hardware Firmware34