Month report
July 2017
Rolled up 2026-08-09 20:45 from 370,778 CVE records
1,268 CVEs published, +78.8% on the same month last year. 8 rated critical, 0 listed by CISA as exploited. ibm led with 78; the most common weakness class was CWE-119 (12). mcafee climbed 48 places, the largest move. 22 vendors ranked for the first time.
Published
1,268
+22.7%on the previous month
Critical / high
8 / 27
of the 39 scored
Medium / low
4 / 0
the rest of the scored bands
Added to CISA KEV
0
listed as exploited this month
Public exploit
83
exploit code indexed publicly
Scanner template
0
0% of the month
Publication to KEV
How long before CISA listed them
13 published this month and listed since — not the 0 listed during it.
Median days to listing
1690
from publication to CISA's date added
Listed within 7 days
0%
of the 13
Listed within 30 days
0%
of the 13
Weakness × vendor
Where the two overlap
CVEs carrying both. Each row is shaded against its own worst class.
| Vendor | CWE-119 | CWE-287 | CWE-78 | CWE-190 | CWE-200 | CWE-121 | CWE-184 | CWE-20 |
|---|---|---|---|---|---|---|---|---|
| ibm | ||||||||
| microsoft | ||||||||
| apache | 1 | |||||||
| juniper networks | ||||||||
| nvidia | ||||||||
| cisco | 8 | |||||||
| intellishield | 7 |
Vendors
Ranked by distinct CVEs this month
Δ is the move against last month's rank.
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | ibm | 78 | 1 | security guardium (8) · infosphere master data management (7) · jazz reporting service (7) | ↑2 | |||
| 2 | microsoft | 57 | 1 | 5 | windows 10 gold 1511 1607 and 1703 and windows server 2016 (8) · microsoft windows server 2008 sp2 and r2 sp1 windows 7 sp1 windows 8 1 windows server 2012 gold and r2 windows rt 8 1 windows 10 gold 1511 1607 and 1703 and windows server 2016 (7) · microsoft windows 7 sp1 windows server 2008 sp2 and r2 sp1 windows 8 1 and windows rt 8 1 windows server 2012 and r2 windows 10 gold 1511 1607 1703 and windows server 2016 (5) | ↓1 | ||
| 3 | 46 | android (46) | ↑3 | |||||
| 4 | apache | 26 | 1 | 1 | 4 | apache openmeetings (11) · apache http server (6) · apache struts (3) | ↑4 | |
| 5 | juniper networks | 20 | 5 | junos os (15) · screenos (5) | · | |||
| 6 | nvidia | 11 | nvidia windows gpu display driver (6) · android (3) · nvidia gpu display driver (2) | · | ||||
| 7 | cisco | 8 | 7 | 2 | ios (6) · universal product (6) · cisco ios xe software (3) | · | ||
| 8 | intellishield | 7 | 6 | 2 | universal product (7) · ios (4) · cisco ios xe software (2) | new | ||
| 9 | tomoki fuke | 6 | encrypted files in self decryption format created by filecapsule deluxe portable (3) · filecapsule deluxe portable (3) | new | ||||
| 10 | mcafee | 5 | advanced threat defense atd (5) | ↑48 | ||||
| 11 | toshiba lighting technology | 5 | toshiba home gateway hem gw16a (5) · toshiba home gateway hem gw26a (5) | new | ||||
| 12 | chitora soft | 4 | installer of lhaz (2) · self extracting archive files created by lhaz (2) | new | ||||
| 13 | cybozu | 4 | cybozu garoon (3) · cybozu kunai for android (1) | ↓3 | ||||
| 14 | kddi | 4 | home spot cube2 (4) | new | ||||
| 15 | buffalo | 3 | wmr 433 (2) · wmr 433w (2) · wapm 1166d (1) | ↓4 | ||||
| 16 | poppler | 3 | poppler (3) | · | ||||
| 17 | redhat | 3 | cygwin (1) · rkhunter (1) · rubygem safemode (1) | ↑11 | ||||
| 18 | sony | 3 | wg c10 (3) | ↑46 | ||||
| 19 | biscom | 2 | secure file transfer (2) | ↑16 | ||||
| 20 | hammock | 2 | assetview for macos (2) | new | ||||
| 21 | hibara software | 2 | self extracting encrypted files created by attachecase (2) | · | ||||
| 22 | information technology promotion agency japan ipa | 2 | installer of casl ii simulator self extract format (1) · source code security studying tool icodechecker (1) | ↓6 | ||||
| 23 | inmarsat | 2 | amosconnect (2) | new | ||||
| 24 | lenovo group | 2 | lenovo connect2 (1) · lenovo notebook bios (1) | ↓15 | ||||
| 25 | national institute for land and infrastructure management | 2 | douro kouji kanseizutou check program (1) · douroshisetu kihon data sakusei system (1) | new | ||||
| 26 | national tax agency | 2 | installer of setup file of advance preparation jizen setup exe (1) · setup file of advance preparation for e tax software web version (1) | · | ||||
| 27 | puppet | 2 | puppet enterprise (1) · puppet server (1) | ↓1 | ||||
| 28 | the ministry of justice | 2 | installer of pdf digital signature plugin (1) · installer of shinseiyo sogo soft (1) | new | ||||
| 29 | vmware | 2 | vmware tools (1) · vmware vcenter server (1) | ↓25 | ||||
| 30 | w3 eden | 2 | wordpress download manager (2) | new | ||||
| 31 | acquisition technology logistics agency | 1 | installer of electronic tendering and bid opening system (1) | ↑1 | ||||
| 32 | android | 1 | android (1) | new | ||||
| 33 | apple | 1 | installer of quicktime for windows (1) | · | ||||
| 34 | brother industries | 1 | mfc j960dwn (1) | new | ||||
| 35 | chad butler | 1 | wp members (1) | new | ||||
| 36 | charamin steering committee | 1 | the installer of charamin omp (1) | new | ||||
| 37 | dfactory | 1 | responsive lightbox (1) | new | ||||
| 38 | dotnetnuke | 1 | 1 | 1 | dotnetnuke cms fixed in 9 1 1 (1) | new | ||
| 39 | elastic | 1 | elasticsearch x pack security (1) | ↓32 | ||||
| 40 | fortinet | 1 | fortinet fortiwlm (1) | ↑2 | ||||
| 41 | i o data device | 1 | ts ptcam (1) · ts ptcam poe (1) · ts wlc2 (1) | ↓29 | ||||
| 42 | iceni | 1 | infix (1) | · | ||||
| 43 | intel | 1 | 6th and 7th generation intel core processor families intel xeon e3 1500m v5 and v6 processor families and intel xeon e3 1200 v5 and v6 product families (1) | ↑4 | ||||
| 44 | ministry of agreculture foresty and fishery | 1 | installer of denshinouhin check system for ministry of agriculture forestry and fisheries nouson seibi jigyou 2014 march edition (1) | new | ||||
| 45 | ministry of education culture sports science and technology mext | 1 | ebidsettingchecker exe (1) | new | ||||
| 46 | ministry of land infrastructure transport and tourism japan | 1 | the installer of mlit denshiseikabutsusakuseishienkensa system (1) · the self extracting archive including the installer of mlit denshiseikabutsusakuseishienkensa system (1) | new | ||||
| 47 | nancyfx | 1 | nancyfx framework up to 2 0 0 (1) | new | ||||
| 48 | nginx | 1 | 1 | nginx (1) | new | |||
| 49 | sourcenext | 1 | self extracting archive files created by file compact (1) | · | ||||
| 50 | the spice project | 1 | spice (1) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2017-07 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-119120 critical↑20
- 2CWE-28730 critical↑11
- 3CWE-7830 critical·
- 4CWE-19020 critical·
- 5CWE-20020 critical↓1
- 6CWE-12110 critical↑16
- 7CWE-18410 criticalnew
- 8CWE-2011 critical↓5
- 9CWE-26410 critical↑1
- 10CWE-30010 critical·
- 1CWE-39210 criticalnew
- 2CWE-40010 critical↓5
- 3CWE-40210 criticalnew
- 4CWE-47610 critical↑23
- 5CWE-52211 critical↓13
- 6CWE-78710 critical·
- 7CWE-7910 critical↓16
- 8CWE-79810 critical·
- 9CWE-82310 criticalnew
- 10CWE-8910 critical—
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.