Month report
June 2017
Rolled up 2026-08-09 20:45 from 370,662 CVE records
1,033 CVEs published, +102.5% on the same month last year. 10 rated critical, 0 listed by CISA as exploited. microsoft led with 102; the most common weakness class was CWE-79 (9). tibco software climbed 34 places, the largest move. 24 vendors ranked for the first time.
Published
1,033
Critical / high
10 / 24
Medium / low
4 / 1
Added to CISA KEV
0
Public exploit
131
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
1752.5
Listed within 7 days
0%
Listed within 30 days
0%
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 102 | 1 | 2 | 40 | microsoft windows (48) · microsoft edge (12) · microsoft office (8) | ↑1 | |
| 2 | qualcomm | 75 | all qualcomm products (75) | ↑2 | ||||
| 3 | ibm | 60 | 1 | sterling b2b integrator (11) · rational doors next generation (4) · rational quality manager (4) | — | |||
| 4 | vmware | 18 | 3 | workstation pro player (8) · horizon view client for windows (6) · workstation (6) | ↑13 | |||
| 5 | foscam | 17 | 2 | indoor ip camera c1 series (17) | new | |||
| 6 | 17 | android (17) | ↓5 | |||||
| 7 | elastic | 15 | kibana (6) · elastic x pack security (4) · logstash (2) | new | ||||
| 8 | apache | 13 | 1 | apache http server (4) · apache ranger (4) · apache nifi (2) | ↑1 | |||
| 9 | lenovo group | 13 | service bridge (4) · lenovo vibe and lenovo china only moto mobile phones (3) · active protection system (1) | · | ||||
| 10 | cybozu | 10 | cybozu garoon (7) · cybozu dezie (2) · kintone mobile for android (1) | · | ||||
| 11 | buffalo | 6 | wnc01wh (6) | · | ||||
| 12 | i o data device | 5 | ts wrla (3) · ts wrlp (3) · wfs sr01 (2) | · | ||||
| 13 | synology | 5 | audio station (1) · note station (1) · photo station (1) | ↑12 | ||||
| 14 | corega | 4 | cg wlr300nx (3) · cg wlbargmh (1) · cg wlbargnl (1) | new | ||||
| 15 | geospatial information authority of japan gsi | 4 | patchjgd hyoko patchjgdh101 exe (1) · patchjgd patchjgd101 exe (1) · semidynaexe semidynaexe2008 exe (1) | new | ||||
| 16 | information technology promotion agency japan ipa | 4 | hands on vulnerability learning tool appgoat for web application (4) | ↑7 | ||||
| 17 | openvpn technologies | 4 | openvpn (4) | ↑16 | ||||
| 18 | sharp | 4 | rw 4040 driver installer for windows 7 (1) · rw 4040 tool to verify execution environment for windows 7 (1) · rw 5100 driver installer for windows 7 (1) | new | ||||
| 19 | oracle | 3 | 3 | solaris operating system (3) | · | |||
| 20 | symantec | 3 | 1 | messaging gateway (3) | ↑1 | |||
| 21 | atlassian | 2 | atlassian bamboo (1) · bamboo (1) · confluence server (1) | new | ||||
| 22 | flexera software | 2 | flexnet publisher (1) · libsndfile (1) | ↑7 | ||||
| 23 | inside secure | 2 | matrixssl (2) | new | ||||
| 24 | milwaukee tool | 2 | one key (2) | new | ||||
| 25 | netmove | 2 | the installer of saat netizen (1) · the installer of saat personal (1) | new | ||||
| 26 | puppet | 2 | mcollective (1) · mcollective puppet puppet enterprise (1) | · | ||||
| 27 | rapid7 | 2 | metasploit pro express and community editions (1) · nexpose hardware appliance (1) | ↑8 | ||||
| 28 | redhat | 2 | fedora arm installer (1) · poppler (1) | ↓9 | ||||
| 29 | schneider electric | 2 | 1 | modicon m221 (1) · modicon m241 (1) · modicon m251 (1) | · | |||
| 30 | schneider electric se | 2 | somachine hvac programming software (2) | ↑31 | ||||
| 31 | tibco software | 2 | tibco jasperreports server (2) · tibco jasperreports server community edition (2) · tibco jasperreports server for activematrix bpm (2) | ↑34 | ||||
| 32 | acquisition technology logistics agency | 1 | installer of electronic tendering and bid opening system (1) | new | ||||
| 33 | acronis | 1 | true image (1) | new | ||||
| 34 | bigtreecms | 1 | bigtree cms (1) | new | ||||
| 35 | biscom | 1 | secure file transfer (1) | new | ||||
| 36 | bluez project | 1 | bluez (1) | new | ||||
| 37 | codecabin | 1 | wp live chat support (1) | new | ||||
| 38 | ellislab | 1 | expressionengine (1) | new | ||||
| 39 | eric teubert | 1 | multi feed reader (1) | new | ||||
| 40 | f5 networks | 1 | big ip ltm aam afm analytics apm asm dns edge gateway gtm link controller pem psm webaccelerator wom websafe (1) | ↓30 | ||||
| 41 | fenrir | 1 | sleipnir 4 black edition for mac (1) · sleipnir 4 for mac (1) | new | ||||
| 42 | fortinet | 1 | fortinet forticlient (1) | ↓31 | ||||
| 43 | foscan | 1 | 1 | foscam c1 webcam (1) | new | |||
| 44 | gnutls | 1 | gnutls (1) | new | ||||
| 45 | green packet | 1 | bm2022 (1) · hes 309m (1) · hes 319m (1) | new | ||||
| 46 | huawei technologies | 1 | bm2022 (1) · hes 309m (1) · hes 319m (1) | new | ||||
| 47 | intel | 1 | active mangement technology (1) | ↓17 | ||||
| 48 | irfanview | 1 | irfanview (1) | new | ||||
| 49 | japan agency for local authority information systems | 1 | the public certification service for individuals the jpki user s software (1) · the public certification service for individuals the jpki user s software for windows 7 and later (1) · the public certification service for individuals the jpki user s software for windows vista (1) | ↓1 | ||||
| 50 | japan air self defense force ministry of defense | 1 | clock 01 setup exe (1) · clock 02 setup exe (1) · jasdf 01 exe (1) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2017-06 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-7990 critical↑4
- 2CWE-52240 critical↑37
- 3CWE-2030 critical↑3
- 4CWE-20030 critical↓3
- 5CWE-25930 critical·
- 6CWE-35230 critical↑9
- 7CWE-40030 critical↑1
- 8CWE-60130 critical·
- 9CWE-12620 critical·
- 10CWE-26420 critical↓7
- 1CWE-28420 critical↑18
- 2CWE-28520 critical↓5
- 3CWE-28721 critical↑1
- 4CWE-30620 critical·
- 5CWE-31120 critical·
- 6CWE-33020 critical·
- 7CWE-34320 critical·
- 8CWE-39920 critical↓16
- 9CWE-73220 critical·
- 10CWE-8920 critical·
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.