Month report
April 2017
Rolled up 2026-08-09 20:45 from 370,662 CVE records
1,568 CVEs published, +140.1% on the same month last year. 7 rated critical, 0 listed by CISA as exploited. oracle led with 194; the most common weakness class was CWE-399 (9). ibm climbed -1 places, the largest move. 38 vendors ranked for the first time.
Published
1,568
Critical / high
7 / 13
Medium / low
9 / 3
Added to CISA KEV
0
Public exploit
166
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
1871
Listed within 7 days
0%
Listed within 30 days
0%
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 194 | 1 | 13 | mysql server (23) · webcenter sites (15) · oracle berkeley db (14) | · | ||
| 2 | 49 | 4 | android (49) | — | ||||
| 3 | microsoft | 42 | 2 | 9 | windows (9) · windows hyper v (8) · hyper v (5) | ↓2 | ||
| 4 | ibm | 27 | 1 | curam social program management (4) · cognos tm1 (3) · tivoli application dependency discovery manager (3) | ↓1 | |||
| 5 | juniper networks | 23 | northstar controller application (19) · junos os on ex series ethernet switches with ipv6 enabled (1) · junos os on m mx platforms where enhanced subscriber management for dhcpv6 subscribers is configured (1) | new | ||||
| 6 | apache | 16 | 1 | 1 | 2 | apache tomcat (5) · apache cxf (2) · apache hadoop (2) | ↓1 | |
| 7 | moxa | 12 | 1 | awk 3131a series industrial ieee 802 11a b g n wireless ap bridge client (11) · moxa awk 3131a wap (1) | new | |||
| 8 | cybozu | 11 | cybozu garoon (6) · cybozu office (3) · cybozu kunai for android (1) | new | ||||
| 9 | nvidia | 8 | android (7) · geforce experience (1) | ↓3 | ||||
| 10 | i o data device | 6 | ts ptcam poe (3) · ts wlc2 (3) · ts wlce (3) | new | ||||
| 11 | nextcloud | 6 | nextcloud server (6) | new | ||||
| 12 | information technology promotion agency japan ipa | 5 | hands on vulnerability learning tool appgoat for web application (4) · security guide for website operators (1) | new | ||||
| 13 | intel | 4 | intel compute stick stk2mv64cc (1) · intel hardware accelerated execution manager (1) · intel nuc nuc6i5sysh k intel nuc6i3sysh k (1) | ↓9 | ||||
| 14 | f5 networks | 3 | f5 big ip apm (1) · ssl intercept iapp 1 5 0 1 5 7 and ssl orchestrator 2 0 (1) · ssl intercept iapp version (1) | ↓6 | ||||
| 15 | olive design | 3 | olive blog (1) · olive diary dx (1) · web schedule (1) | new | ||||
| 16 | wbce team | 3 | wbce cms (3) | new | ||||
| 17 | wp statistics | 3 | wp statistics (3) | new | ||||
| 18 | cubecart | 2 | cubecart (2) | new | ||||
| 19 | frogman office | 2 | cs cart japanese edition (2) · cs cart multivendor japanese edition (2) | new | ||||
| 20 | k opticom | 2 | business lala call app for android (1) · lala call app for android (1) | new | ||||
| 21 | lenovo group | 2 | customer care software development kit ccsdk (1) · lenovo updates (1) | ↓7 | ||||
| 22 | riverbed | 2 | rios (2) | new | ||||
| 23 | spiqe software | 2 | onethird cms (2) | new | ||||
| 24 | symantec | 2 | 1 | blue coat asg (1) · blue coat cas (1) · ssl visibility (1) | new | |||
| 25 | wpdevelop | 2 | booking calendar (2) | new | ||||
| 26 | akky | 1 | self extracting archive files created by 7 zip32 dll (1) | new | ||||
| 27 | allied telesis k k | 1 | centrecom (1) | new | ||||
| 28 | arm | 1 | mbed tls (1) | new | ||||
| 29 | buffalo | 1 | wnc01wh (1) | new | ||||
| 30 | fortinet | 1 | fortimail (1) | ↓18 | ||||
| 31 | gaku | 1 | tablacus explorer (1) | new | ||||
| 32 | go | 1 | ssh library (1) | new | ||||
| 33 | hibara software | 1 | attachecase (1) | new | ||||
| 34 | huawei technologies co | 1 | 1 | huawei utps (1) | new | |||
| 35 | icon | 1 | hoozin viewer (1) | new | ||||
| 36 | internet initiative japan | 1 | seil b1 (1) · seil bpv4 (1) · seil x1 (1) | new | ||||
| 37 | lexmark | 1 | perceptive document filters (1) | · | ||||
| 38 | maruuo factory | 1 | attachecase for java (1) · attachecase lite (1) · attachecase pro (1) | new | ||||
| 39 | mcafee | 1 | virusscan enterprise (1) | new | ||||
| 40 | mozilla | 1 | firefox (1) · firefox esr (1) | new | ||||
| 41 | nissan securities co | 1 | access cx app for android (1) · access cx app for ios (1) | new | ||||
| 42 | objective development software | 1 | little snitch (1) | new | ||||
| 43 | presentcast | 1 | tver app for android (1) | new | ||||
| 44 | qualcomm | 1 | qualcomm snapdragon 800 600 400 200 (1) | · | ||||
| 45 | ruby programming shounendan | 1 | smalruby editor (1) | new | ||||
| 46 | securebrain | 1 | the installer of phishwall client internet explorer version (1) | new | ||||
| 47 | softbank | 1 | primedrive desktop application (1) | new | ||||
| 48 | support project org | 1 | knowledge (1) | new | ||||
| 49 | toshiba | 1 | installer for sdhc memory card with embedded transferjettm functionality configuration software (1) · installer for sdhc memory card with embedded transferjettm functionality software update tool (1) · installer for sdhc memory card with embedded wireless lan functionality flashairtm configuration software (1) | new | ||||
| 50 | uchida yoko co | 1 | assetbase (1) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2017-04 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-39990 critical↑4
- 2CWE-11960 critical↑1
- 3CWE-2030 critical↓1
- 4CWE-20021 critical↑10
- 5CWE-27520 critical↑4
- 6CWE-28721 critical·
- 7CWE-32121 critical·
- 8CWE-52120 criticalnew
- 9CWE-7820 critical↑20
- 10CWE-7920 critical↓9
- 1CWE-12110 critical—
- 2CWE-12210 critical·
- 3CWE-12510 critical·
- 4CWE-20910 critical↑2
- 5CWE-25510 criticalnew
- 6CWE-26410 critical↓8
- 7CWE-30010 critical·
- 8CWE-31010 critical·
- 9CWE-40010 critical·
- 10CWE-42710 criticalnew
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.