Month report
September 1999
Rolled up 2026-08-09 20:45 from 370,825 CVE records
320 CVEs published. 3 rated critical, 0 listed by CISA as exploited. sgi led with 5; the most common weakness class was CWE-125 (3). 15 vendors ranked for the first time.
Published
320
Critical / high
3 / 12
Medium / low
2 / 1
Added to CISA KEV
0
Public exploit
109
Scanner template
0
Publication to KEV
How long before CISA listed them
None of September 1999’s CVEs has been added to the CISA KEV catalog, so there is no interval to measure. The 0 entries CISA listed during the month were published earlier.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | sgi | 5 | 3 | irix (5) · aix (1) · bsd os (1) | new | |||
| 2 | bsdi | 3 | 1 | bsd os (3) · freebsd (2) · aix (1) | new | |||
| 3 | sun | 3 | 1 | sunos (2) · aix (1) · bsd os (1) | new | |||
| 4 | freebsd | 2 | bsd os (2) · freebsd (2) · aix (1) | new | ||||
| 5 | ibm | 2 | 1 | aix (1) · bsd os (1) · freebsd (1) | new | |||
| 6 | caldera | 1 | 1 | bsd os (1) · goah intrasv (1) · goah networksv (1) | new | |||
| 7 | hp | 1 | aix (1) · bsd os (1) · freebsd (1) | new | ||||
| 8 | isc | 1 | 1 | bsd os (1) · goah intrasv (1) · goah networksv (1) | new | |||
| 9 | john s roberts | 1 | 1 | 1 | anyform (1) | new | ||
| 10 | nec | 1 | 1 | bsd os (1) · goah intrasv (1) · goah networksv (1) | new | |||
| 11 | netscape | 1 | 1 | bsd os (1) · goah intrasv (1) · goah networksv (1) | new | |||
| 12 | openbsd | 1 | bsd os (1) · freebsd (1) · openbsd (1) | new | ||||
| 13 | qualcomm | 1 | 1 | 1 | qpopper (1) | new | ||
| 14 | redhat | 1 | 1 | bsd os (1) · goah intrasv (1) · goah networksv (1) | new | |||
| 15 | ssh | 1 | ssh (1) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 1999-09 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 15 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-12531 criticalnew
- 2CWE-20020 criticalnew
- 3CWE-106710 criticalnew
- 4CWE-11910 criticalnew
- 5CWE-12010 criticalnew
- 6CWE-26910 criticalnew
- 7CWE-29010 criticalnew
- 8CWE-36410 criticalnew
- 9CWE-40010 criticalnew
- 10CWE-43410 criticalnew
- 1CWE-47610 criticalnew
- 2CWE-52210 criticalnew
- 3CWE-7710 criticalnew
- 4CWE-7811 criticalnew
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.