CVE Intelligence
Skip to main content

Month report

December 2009

Rolled up 2026-08-09 20:45 from 371,001 CVE records

440 CVEs published, -16.7% on the same month last year. 0 rated critical, 0 listed by CISA as exploited. cisco led with 1; the most common weakness class was CWE-416 (2). 2 vendors ranked for the first time.

← November 2009All monthsJanuary 2010 →

Published

440

+42.9%on the previous month

Critical / high

0 / 3

of the 3 scored

Medium / low

0 / 0

the rest of the scored bands

Added to CISA KEV

0

listed as exploited this month

Public exploit

151

exploit code indexed publicly

Scanner template

0

0% of the month

Publication to KEV

How long before CISA listed them

1 published this month and listed since — not the 0 listed during it.

Median days to listing

4558

from publication to CISA's date added

Listed within 7 days

0%

of the 1

Listed within 30 days

0%

of the 1

Weakness × vendor

Where the two overlap

CVEs carrying both. Each row is shaded against its own worst class.
VendorCWE-416CWE-284CWE-400
cisco1
microsoft1
palo alto1

Vendors

Ranked by distinct CVEs this month

Δ is the move against last month's rank.
Vendors ranked by distinct CVEs published in 2009-12, sorted by CVEs descending
#VendorTop products
1cisco1adaptive security appliance web ssl vpn (1) · pan os web ssl vpn (1)new
2microsoft1ie (1)·
3palo alto1adaptive security appliance web ssl vpn (1) · pan os web ssl vpn (1)new

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2009-12 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 3 ranked vendors are listed; a zero count renders as a dot.

Weaknesses

CWE classes by distinct CVEs

  • 1CWE-41620 critical·
  • 2CWE-28410 criticalnew
  • 3CWE-40010 critical·

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.