month report
September 2011
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
September 2011 closed with 389 published CVEs. 66 criticals, google led volume, mostly via chrome. Top weakness class — CWE-200 (140 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
389
— MoM— YoY
Severity mix
66 / 38
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
4.6%
18 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
5273.4
n=18
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
—
n=0
Weakness × Vendor
What's spreading where in September 2011
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — September 2011
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #8mantisbt6 CVE
- #12tibco5 CVE
- #13cogentdatahub4 CVE
- #14manageengine4 CVE
- #15measuresoft4 CVE
- #17phorum4 CVE
- #20fuse3 CVE
- #24netsaro3 CVE
- #25openttd3 CVE
- #26pentaho3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 34 CVE2 critCVSS 6.7PoC 1chrome (32) · chrome os (2) · cr-48 chromebook (2)
- 19 CVE16 critCVSS 8.9acrobat reader (13) · acrobat (12) · flash player (6)
- 16 CVE8 critCVSS 7.2sharepoint server (6) · office (6) · excel (5)
- 15 CVE8 critCVSS 7.0firefox (15) · seamonkey (12) · thunderbird (8)
- 10 CVE1 critCVSS 6.6iphone os (8) · itunes (7) · safari (7)
- 10 CVECVSS 5.0PoC 1red hat enterprise linux (5) · enterprise linux server (3) · enterprise linux desktop (3)
- 8 CVE2 critCVSS 5.3PoC 3java (2) · lotus domino (2) · openadmin tool (1)
- 6 CVECVSS 4.8NEWPoC 3mantisbt (6)
- 5 CVE3 critCVSS 7.4PoC 2ciscoworks lan management solution (1) · identity services engine (1) · identity services engine software (1)
- 5 CVECVSS 5.8PoC 1linux kernel (5)
- 5 CVECVSS 7.5PoC 5mhp downloadshop (1) · projekt shop (1) · download center (1)
- 5 CVECVSS 4.8NEWspotfire analytics server (3) · spotfire server (3) · slingshot (2)
- 4 CVE1 critCVSS 6.3NEWPoC 2cogent datahub (4)
- 4 CVECVSS 5.3NEWeventlog analyzer (2) · servicedesk plus (2)
- 4 CVE4 critCVSS 10.0NEWPoC 3scadapro (4)
- 4 CVECVSS 5.6suse linux enterprise (3) · opensuse (1)
- 4 CVECVSS 5.1NEWphorum (4)
- 4 CVE1 critCVSS 5.5wireshark (4)
- 3 CVECVSS 6.2debian linux (3)
- 3 CVECVSS 3.3NEWfuse (3)
- 3 CVECVSS 4.8gentoo linux (3)
- 3 CVE1 critCVSS 6.1gtk (2) · networkmanager (1)
- 3 CVE1 critCVSS 7.5palm pre webos (2) · business service automation essentials (1)
- 3 CVECVSS 2.9NEWenterprise messenger server (3)
- 3 CVECVSS 6.5NEWopenttd (3)
- 3 CVECVSS 3.8NEWPoC 2bi server (3)
- 3 CVE3 critCVSS 10.0NEWPoC 2movicon powerhmi (3)
- 3 CVECVSS 5.4NEWPoC 2conferencemanager (3)
- 3 CVE1 critCVSS 7.9debian gnu/linux (3)
- 2 CVE2 critCVSS 10.0NEWac700 chromebook (2)
- 2 CVECVSS 4.3PoC 1http server (1) · libcloud (1)
- 2 CVECVSS 5.9NEWcyrus imap server (2)
- 2 CVECVSS 5.9NEWPoC 2eclime (2)
- 2 CVE1 critCVSS 9.4avamar (1) · ionix acm (1) · ionix asam (1)
- 2 CVECVSS 5.2NEWPoC 2com jsupport (2)
- 2 CVECVSS 5.7NEWPoC 1mail server (2)
- 2 CVECVSS 5.9NEWPoC 2ideacart (2)
- 2 CVE2 critCVSS 9.7NEWesignal (2)
- 2 CVECVSS 6.3NEWPoC 2lifesize room appliance software (2)
- 2 CVECVSS 5.9NEWmyre real estate software (2)
- 2 CVECVSS 5.3NEWPoC 2aims (2)
- 2 CVECVSS 5.0openssl (2)
- 2 CVECVSS 5.0openssl (2)
- 2 CVECVSS 4.3opera browser (2)
- 2 CVECVSS 5.0cakephp/cakephp (1) · ezyang/htmlpurifier (1)
- 2 CVE2 critCVSS 10.0NEWseries 5 chromebook (2)
- 2 CVE1 critCVSS 6.8NEWsimatic rf615r firmware (1) · simatic rf68xr firmware (1) · simatic wincc flexible runtime (1)
- 2 CVECVSS 3.1NEWPoC 1server monitor (2)
- 2 CVECVSS 4.3NEWNuclei 2hybrid (1) · trending (1)
- 2 CVECVSS 4.7NEWwebsite baker (1) · websitebaker (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | 34 | 2 | · | · | PoC 1 | chrome (32) · chrome os (2) · cr-48 chromebook (2) | — | ||
| 2 | adobe | 19 | 16 | · | · | acrobat reader (13) · acrobat (12) · flash player (6) | — | ||
| 3 | microsoft | 16 | 8 | · | · | sharepoint server (6) · office (6) · excel (5) | — | ||
| 4 | mozilla | 15 | 8 | · | · | firefox (15) · seamonkey (12) · thunderbird (8) | — | ||
| 5 | apple | 10 | 1 | · | · | iphone os (8) · itunes (7) · safari (7) | — | ||
| 6 | redhat | 10 | · | · | · | PoC 1 | red hat enterprise linux (5) · enterprise linux server (3) · enterprise linux desktop (3) | — | |
| 7 | ibm | 8 | 2 | · | · | PoC 3 | java (2) · lotus domino (2) · openadmin tool (1) | — | |
| 8 | mantisbt | 6 | · | · | · | NEWPoC 3 | mantisbt (6) | — | |
| 9 | cisco | 5 | 3 | · | · | PoC 2 | ciscoworks lan management solution (1) · identity services engine (1) · identity services engine software (1) | — | |
| 10 | linux | 5 | · | · | · | PoC 1 | linux kernel (5) | — | |
| 11 | mhproducts | 5 | · | · | · | PoC 5 | mhp downloadshop (1) · projekt shop (1) · download center (1) | — | |
| 12 | tibco | 5 | · | · | · | NEW | spotfire analytics server (3) · spotfire server (3) · slingshot (2) | — | |
| 13 | cogentdatahub | 4 | 1 | · | · | NEWPoC 2 | cogent datahub (4) | — | |
| 14 | manageengine | 4 | · | · | · | NEW | eventlog analyzer (2) · servicedesk plus (2) | — | |
| 15 | measuresoft | 4 | 4 | · | · | NEWPoC 3 | scadapro (4) | — | |
| 16 | novell inc. | 4 | · | · | · | suse linux enterprise (3) · opensuse (1) | — | ||
| 17 | phorum | 4 | · | · | · | NEW | phorum (4) | — | |
| 18 | wireshark | 4 | 1 | · | · | wireshark (4) | — | ||
| 19 | debian | 3 | · | · | · | debian linux (3) | — | ||
| 20 | fuse | 3 | · | · | · | NEW | fuse (3) | — | |
| 21 | gentoo foundation inc. | 3 | · | · | · | gentoo linux (3) | — | ||
| 22 | gnome | 3 | 1 | · | · | gtk (2) · networkmanager (1) | — | ||
| 23 | hp | 3 | 1 | · | · | palm pre webos (2) · business service automation essentials (1) | — | ||
| 24 | netsaro | 3 | · | · | · | NEW | enterprise messenger server (3) | — | |
| 25 | openttd | 3 | · | · | · | NEW | openttd (3) | — | |
| 26 | pentaho | 3 | · | · | · | NEWPoC 2 | bi server (3) | — | |
| 27 | progea | 3 | 3 | · | · | NEWPoC 2 | movicon powerhmi (3) | — | |
| 28 | sonexis | 3 | · | · | · | NEWPoC 2 | conferencemanager (3) | — | |
| 29 | сообщество свободного программного обеспечения | 3 | 1 | · | · | debian gnu/linux (3) | — | ||
| 30 | acer | 2 | 2 | · | · | NEW | ac700 chromebook (2) | — | |
| 31 | apache | 2 | · | · | · | PoC 1 | http server (1) · libcloud (1) | — | |
| 32 | cmu | 2 | · | · | · | NEW | cyrus imap server (2) | — | |
| 33 | eclime | 2 | · | · | · | NEWPoC 2 | eclime (2) | — | |
| 34 | emc | 2 | 1 | · | · | avamar (1) · ionix acm (1) · ionix asam (1) | — | ||
| 35 | extensiondepot | 2 | · | · | · | NEWPoC 2 | com jsupport (2) | — | |
| 36 | icewarp | 2 | · | · | · | NEWPoC 1 | mail server (2) | — | |
| 37 | ideacart | 2 | · | · | · | NEWPoC 2 | ideacart (2) | — | |
| 38 | interactivedata | 2 | 2 | · | · | NEW | esignal (2) | — | |
| 39 | lifesize | 2 | · | · | · | NEWPoC 2 | lifesize room appliance software (2) | — | |
| 40 | myrephp | 2 | · | · | · | NEW | myre real estate software (2) | — | |
| 41 | oneorzero | 2 | · | · | · | NEWPoC 2 | aims (2) | — | |
| 42 | openssl | 2 | · | · | · | openssl (2) | — | ||
| 43 | openssl software foundation | 2 | · | · | · | openssl (2) | — | ||
| 44 | opera | 2 | · | · | · | opera browser (2) | — | ||
| 45 | packagist | 2 | · | · | · | cakephp/cakephp (1) · ezyang/htmlpurifier (1) | — | ||
| 46 | samsung | 2 | 2 | · | · | NEW | series 5 chromebook (2) | — | |
| 47 | siemens | 2 | 1 | · | · | NEW | simatic rf615r firmware (1) · simatic rf68xr firmware (1) · simatic wincc flexible runtime (1) | — | |
| 48 | tembria | 2 | · | · | · | NEWPoC 1 | server monitor (2) | — | |
| 49 | themehybrid | 2 | · | · | 2 | NEWNuclei 2 | hybrid (1) · trending (1) | — | |
| 50 | websitebaker2 | 2 | · | · | · | NEW | website baker (1) · websitebaker (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins101 CVE89 vendorsCVSS 6.0eclime (2) · 60cyclecms (1) · ad manager pro (1)
- Enterprise Software52 CVE5 crit26 vendorsCVSS 6.3mantisbt (6) · aims (2) · eventlog analyzer (2)
- Consumer Software46 CVE50 crit10 vendorsCVSS 9.3acrobat reader (13) · acrobat (12) · flash player (6)
- Mobile Apps44 CVE7 crit3 vendorsCVSS 6.9chrome (32) · chrome os (2) · cr-48 chromebook (2)
- Operating Systems38 CVE34 crit14 vendorsCVSS 7.2linux kernel (5) · red hat enterprise linux (5) · debian gnu/linux (3)
- OSS Libraries21 CVE3 crit18 vendorsCVSS 5.8openssl (4) · fuse (3) · adodb (1)
- ICS / OT / IoT16 CVE10 crit11 vendorsCVSS 8.8scadapro (4) · movicon powerhmi (3) · daqfactory (1)
- Communications15 CVE8 vendorsCVSS 5.7conferencemanager (3) · lifesize room appliance software (2)
- Security Products11 CVE4 crit7 vendorsCVSS 7.4wireshark (4) · codemeter webadmin (1) · phpids (1)
- 11 crit5 vendorsCVSS 7.5ac700 chromebook (2) · ciscoworks lan management solution (1) · identity services engine (1)
- Databases4 CVE1 crit1 vendorsCVSS 6.3cogent datahub (4)
- Cloud & SaaS4 CVE2 crit3 vendorsCVSS 7.3esignal (2) · clansphere (1) · helpcenter live (1)
- DevTools & CI2 CVE1 crit2 vendorsCVSS 7.2bcfg2 (1) · phpdevshell (1)
- Unclassified36 CVE1 crit35 vendorsCVSS 5.2com jsupport (2) · 111webcalendar (1) · 2 b3 (1)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 6 | 101 | · | · | 89 | 96 | 6.0 | eclime (2) · 60cyclecms (1) · ad manager pro (1) |
| Enterprise Software▸ 7 | 52 | 5 | · | 26 | 41 | 6.3 | mantisbt (6) · aims (2) · eventlog analyzer (2) |
| Consumer Software▸ 4 | 46 | 50 | · | 10 | 15 | 9.3 | acrobat reader (13) · acrobat (12) · flash player (6) |
| Mobile Apps▸ 2 | 44 | 7 | · | 3 | 10 | 6.9 | chrome (32) · chrome os (2) · cr-48 chromebook (2) |
| Operating Systems▸ 2 | 38 | 34 | · | 14 | 48 | 7.2 | linux kernel (5) · red hat enterprise linux (5) · debian gnu/linux (3) |
| OSS Libraries▸ 5 | 21 | 3 | · | 18 | 20 | 5.8 | openssl (4) · fuse (3) · adodb (1) |
| ICS / OT / IoT▸ 4 | 16 | 10 | · | 11 | 11 | 8.8 | scadapro (4) · movicon powerhmi (3) · daqfactory (1) |
| Communications▸ 3 | 15 | · | · | 8 | 8 | 5.7 | conferencemanager (3) · lifesize room appliance software (2) |
| Security Products▸ 2 | 11 | 4 | · | 7 | 11 | 7.4 | wireshark (4) · codemeter webadmin (1) · phpids (1) |
| Networking Infrastructure▸ 3 | 10 | 11 | · | 5 | 19 | 7.5 | ac700 chromebook (2) · ciscoworks lan management solution (1) · identity services engine (1) |
| Databases▸ 1 | 4 | 1 | · | 1 | 1 | 6.3 | cogent datahub (4) |
| Cloud & SaaS▸ 1 | 4 | 2 | · | 3 | 3 | 7.3 | esignal (2) · clansphere (1) · helpcenter live (1) |
| DevTools & CI▸ 1 | 2 | 1 | · | 2 | 2 | 7.2 | bcfg2 (1) · phpdevshell (1) |
| Unclassified | 36 | 1 | · | 35 | 35 | 5.2 | com jsupport (2) · 111webcalendar (1) · 2 b3 (1) |
Weakness × Sector
Which weaknesses hit which solution categories in September 2011
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
200Information Exposure79XSS119Memory Buffer Bounds20Improper Input Validation89SQL Injection264CWE-26422Path Traversal399CWE-399125Out-of-bounds Read287Improper AuthenticationWeb & CMS Plugins8221122Consumer Software4421127371Enterprise Software18164112311Operating Systems15574112OSS Libraries1242412Communications63211311ICS / OT / IoT21013Networking Infrastructure23211Security Products3111Databases1111