Month report
January 2017
Rolled up 2026-08-09 20:45 from 370,697 CVE records
1,083 CVEs published, +61.9% on the same month last year. 5 rated critical, 0 listed by CISA as exploited. oracle led with 224; the most common weakness class was CWE-119 (2). intel climbed -16 places, the largest move. 20 vendors ranked for the first time.
Published
1,083
Critical / high
5 / 11
Medium / low
4 / 0
Added to CISA KEV
0
Public exploit
69
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
1966
Listed within 7 days
0%
Listed within 30 days
0%
Weakness × vendor
Where the two overlap
| Vendor | CWE-119 | CWE-120 | CWE-122 | CWE-1241 | CWE-1333 | CWE-269 | CWE-330 | CWE-335 |
|---|---|---|---|---|---|---|---|---|
| oracle | ||||||||
| pidgin | ||||||||
| hancom | ||||||||
| kaspersky | ||||||||
| ntp project | ||||||||
| ntpsec project | ||||||||
| lenovo group |
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 224 | 3 | advanced outbound telephony (38) · marketing (20) · one to one fulfillment (19) | new | |||
| 2 | 130 | 3 | android (130) | · | ||||
| 3 | pidgin | 16 | pidgin (16) | new | ||||
| 4 | hancom | 6 | hancom office (6) | new | ||||
| 5 | kaspersky | 5 | internet security (3) · total security (2) | new | ||||
| 6 | ntp project | 5 | ntp (5) · ntpsec (5) | new | ||||
| 7 | ntpsec project | 5 | ntp (5) · ntpsec (5) | new | ||||
| 8 | lenovo group | 4 | edge and slim usb keyboard driver (1) · system x m5 m6 and x6 bios (1) · transition application (1) | · | ||||
| 9 | f5 networks | 3 | f5 big ip ltm aam afm analytics apm asm dns link controller pem websafe (2) · f5 big ip ltm aam afm analytics apm asm dns gtm link controller pem (1) | new | ||||
| 10 | lexmark | 3 | perceptive document filters (3) | new | ||||
| 11 | memcached | 3 | 2 | memcached (3) | new | |||
| 12 | ruby | 3 | ruby (3) · tcl tk (1) | new | ||||
| 13 | aerospike | 2 | 1 | database server (2) | new | |||
| 14 | trane | 2 | comfortlink ii scc firmware (2) | new | ||||
| 15 | bluestacks | 1 | app player (1) | new | ||||
| 16 | dlink | 1 | dwr 932b firmware (1) | · | ||||
| 17 | foxit software | 1 | foxit reader (1) | new | ||||
| 18 | freeimage | 1 | freeimage (1) | new | ||||
| 19 | intel | 1 | intel ethernet controller x710 family and intel ethernet controller xl710 family (1) | ↓16 | ||||
| 20 | joyent | 1 | smartos (1) | ↓18 | ||||
| 21 | libbpg | 1 | libbpg (1) | new | ||||
| 22 | libtiff | 1 | libtiff (1) | new | ||||
| 23 | micro focus international | 1 | open enterprise server (1) | new | ||||
| 24 | tcl | 1 | ruby (1) · tcl tk (1) | new | ||||
| 25 | vercel | 1 | ms (1) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2017-01 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 25 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-11920 critical·
- 2CWE-12011 critical↑1
- 3CWE-12210 critical·
- 4CWE-124110 criticalnew
- 5CWE-133310 criticalnew
- 6CWE-26910 critical·
- 7CWE-33010 critical·
- 8CWE-33510 criticalnew
- 9CWE-41610 critical↑1
- 10CWE-42610 critical·
- 1CWE-78710 critical·
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.