Month report
March 2017
Rolled up 2026-08-09 20:45 from 370,662 CVE records
1,302 CVEs published, +294.5% on the same month last year. 7 rated critical, 0 listed by CISA as exploited. microsoft led with 129; the most common weakness class was CWE-79 (12). microsoft climbed 10 places, the largest move. 9 vendors ranked for the first time.
Published
1,302
Critical / high
7 / 15
Medium / low
5 / 0
Added to CISA KEV
0
Public exploit
150
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
1834
Listed within 7 days
0%
Listed within 30 days
0%
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 129 | 12 | 49 | windows uniscribe (28) · browser (20) · office (10) | ↑10 | ||
| 2 | 83 | 2 | android (83) | — | ||||
| 3 | ibm | 53 | qradar siem (12) · kenexa lcms premier on cloud (5) · rational collaborative lifecycle management (5) | ↓2 | ||||
| 4 | intel | 35 | 11 | virusscan enterprise linux vsel (10) · mcafee application control mac (3) · advanced threat defense atd (2) | ↑3 | |||
| 5 | apache | 8 | 1 | 1 | 2 | apache camel (3) · apache tomcat (2) · apache ambari (1) | · | |
| 6 | nvidia | 8 | android (8) | ↓3 | ||||
| 7 | rapid7 | 8 | metasploit (3) · nexpose (2) · appspider pro (1) | · | ||||
| 8 | f5 networks | 4 | f5 big ip ltm aam afm analytics apm asm dns edge gateway gtm link controller pem psm webaccelerator websafe (1) · f5 big ip ltm aam afm analytics apm asm dns gtm link controller pem (1) · f5 big ip ltm aam afm analytics apm asm dns link controller pem websafe (1) | ↑2 | ||||
| 9 | pharos | 4 | 3 | popup printer client (4) | new | |||
| 10 | drupal | 3 | drupal core (3) | new | ||||
| 11 | eview | 3 | ev 07s gps tracker (3) | new | ||||
| 12 | fortinet | 2 | fortios (2) | ↓7 | ||||
| 13 | illumos | 2 | osnet incorporation (2) | new | ||||
| 14 | lenovo group | 2 | thinkserver rd350 rd450 rd550 rd650 td350 (1) · xclarity administrator (1) | · | ||||
| 15 | yandex n v | 2 | yandex browser for desktop (1) · yandex browser for ios (1) | · | ||||
| 16 | blairjordan | 1 | wordpress plugin rockhoist badges (1) | new | ||||
| 17 | matt dev | 1 | wordpress plugin anyvar (1) | new | ||||
| 18 | national instruments | 1 | labview 2016 evaluation (1) | new | ||||
| 19 | puppet | 1 | mcollective puppet agent plugin (1) | ↓6 | ||||
| 20 | the r project | 1 | r (1) | new | ||||
| 21 | zendkmobileapp | 1 | 1 | wordpress plugin mobile app native 3 0 (1) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2017-03 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 21 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-79120 critical↑13
- 2CWE-2071 critical—
- 3CWE-11941 critical↓2
- 4CWE-35240 critical↑1
- 5CWE-39940 critical↑1
- 6CWE-45140 criticalnew
- 7CWE-28530 critical·
- 8CWE-26420 critical↓5
- 9CWE-27520 criticalnew
- 10CWE-12011 critical↓3
- 1CWE-12110 critical·
- 2CWE-13410 criticalnew
- 3CWE-19510 critical·
- 4CWE-20010 critical↓6
- 5CWE-20310 criticalnew
- 6CWE-20910 critical·
- 7CWE-2210 critical·
- 8CWE-28410 critical·
- 9CWE-30310 criticalnew
- 10CWE-30710 critical↓16
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.