Month report
August 2017
Rolled up 2026-08-09 20:45 from 370,877 CVE records
1,540 CVEs published, +276.5% on the same month last year. 4 rated critical, 0 listed by CISA as exploited. oracle led with 239; the most common weakness class was CWE-287 (12). i o data device climbed 23 places, the largest move. 22 vendors ranked for the first time.
Published
1,540
+21.5%on the previous month
Critical / high
4 / 8
of the 16 scored
Medium / low
3 / 1
the rest of the scored bands
Added to CISA KEV
0
listed as exploited this month
Public exploit
117
exploit code indexed publicly
Scanner template
0
0% of the month
Publication to KEV
How long before CISA listed them
6 published this month and listed since — not the 0 listed during it.
Median days to listing
1837
from publication to CISA's date added
Listed within 7 days
0%
of the 6
Listed within 30 days
0%
of the 6
Vendors
Ranked by distinct CVEs this month
Δ is the move against last month's rank.
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 239 | 5 | java (32) · mysql server (20) · peoplesoft enterprise pt peopletools (15) | · | |||
| 2 | qualcomm | 119 | all qualcomm products (99) · snapdragon mobile snapdragon wear (12) · snapdragon mobile (7) | · | ||||
| 3 | adobe | 79 | 1 | acrobat reader (65) · digital editions (9) · experience manager (3) | · | |||
| 4 | ibm | 68 | sametime (22) · infosphere information server (5) · cognos analytics (4) | ↓3 | ||||
| 5 | microsoft | 53 | 14 | microsoft scripting engine (18) · microsoft edge (8) · internet explorer (4) | ↓3 | |||
| 6 | 36 | android (36) | ↓3 | |||||
| 7 | apache | 26 | 1 | apache tomcat (9) · apache atlas (7) · apache cxf (3) | ↓3 | |||
| 8 | cisco | 19 | elastic services controller (4) · staros for asr 5000 series aggregated services routers (3) · application policy infrastructure controller apic (2) | ↓1 | ||||
| 9 | synology | 13 | 5 | synology photo station (6) · synology download station (2) · cloud station drive (1) | · | |||
| 10 | trend micro | 8 | 3 | trend micro deep discovery director (3) · trend micro interscan messaging security virtual appliance (2) · trend micro officescan (2) | new | |||
| 11 | atlassian | 7 | 1 | atlassian fisheye and crucible (3) · atlassian crucible (2) · crucible (2) | · | |||
| 12 | micro focus | 7 | micro focus enterprise developer micro focus enterprise server (6) · opensuse (1) | · | ||||
| 13 | lenovo group | 6 | desktop and notebook bios (1) · lenovo and ibm switch products (1) · lenovo elantech touchpad driver (1) | ↑11 | ||||
| 14 | cybozu | 5 | cybozu garoon (5) | ↓1 | ||||
| 15 | intercom | 5 | malion for windows and mac (3) · malion for mac (2) · malion for windows (1) | new | ||||
| 16 | nippon telegraph and telephone west | 5 | flets azukeru for windows auto backup tool (1) · flets install tool (1) · flets setsuzoku tool for windows (1) | new | ||||
| 17 | agency for natural resources and energy of ministry of economy trade and industry meti | 4 | installer for shin kikan toukei houkoku data nyuryokuyou program program released on 2013 september 30 (1) · installer for shin kinkyuji houkoku data nyuryoku program program released on 2011 march 10 (1) · installer for shin sekiyu yunyu chousa houkoku data nyuryoku program program released on 2013 september 30 (1) | new | ||||
| 18 | i o data device | 4 | wn ax1167gr (3) · wn g300r3 (1) | ↑23 | ||||
| 19 | zero day initiative | 4 | 1 | foxit reader (2) · bitdefender total security (1) · dell storage manager (1) | new | |||
| 20 | hackerone | 3 | 1 | rubygems (3) | new | |||
| 21 | nippon antenna co | 3 | dokodemo eye smart hd scr02hd (3) | new | ||||
| 22 | postgresql | 3 | postgresql (3) | new | ||||
| 23 | redhat | 3 | augeas (1) · dnsdist (1) · hawtio (1) | ↓6 | ||||
| 24 | sma | 3 | 1 | sunny boy 1 5 (1) · sunny boy 1 5 firmware (1) · sunny boy 2 5 firmware (1) | new | |||
| 25 | symantec | 3 | 1 | 2 | messaging gateway (2) · vip access for desktop (1) | · | ||
| 26 | basercms users community | 2 | basercms (2) | · | ||||
| 27 | elastic | 2 | elastic x pack reporting (1) · elastic x pack security (1) | ↑12 | ||||
| 28 | fortinet | 2 | fortinet fortios (1) · fortinet fortiweb (1) | ↑12 | ||||
| 29 | intel | 2 | solid state drive consumer professional embedded data center (1) · solid state drive professional (1) | ↑14 | ||||
| 30 | k5n us | 2 | webcalendar (2) | new | ||||
| 31 | kaspersky lab | 2 | kaspersky lab kaspersky internet security for android 11 12 4 1622 (2) | new | ||||
| 32 | seo panel | 2 | seo panel (2) | new | ||||
| 33 | siemens | 2 | logo 8 bm incl siplus variants (2) | · | ||||
| 34 | sony | 2 | nfc net installer (1) · nfc port software for rc s310 rc s320 rc s330 rc s370 rc s380 rc s380 s (1) · nfc port software for rc s320 rc s310 j1c rc s310 ed4c (1) | ↓16 | ||||
| 35 | wam net japan k k | 2 | gigacc office (2) | new | ||||
| 36 | 389 directory server | 1 | 389 ds base (1) | new | ||||
| 37 | backupguard | 1 | backupguard (1) | new | ||||
| 38 | baidu japan | 1 | installer of baidu ime (1) | new | ||||
| 39 | blackberry | 1 | blackberry workspaces server watchdox by blackberry server (1) | · | ||||
| 40 | buffalo | 1 | wcr 1166ds (1) | ↓25 | ||||
| 41 | claybird | 1 | lhaforge (1) | new | ||||
| 42 | frogman office | 1 | cs cart japanese edition (1) · cs cart multivendor japanese edition (1) | · | ||||
| 43 | ge | 1 | ml810 3000 3100 series switch (1) · multilink ml800 1200 1600 2400 (1) | · | ||||
| 44 | h shirouzu asahi net | 1 | installer of ip messenger for win (1) | new | ||||
| 45 | iid | 1 | rbb speed test app for android (1) · rbb speed test app for ios (1) | new | ||||
| 46 | kddi | 1 | installer of qua station connection tool for windows (1) | ↓32 | ||||
| 47 | kiri | 1 | tween (1) | new | ||||
| 48 | ntt docomo | 1 | photo collection pc software (1) | · | ||||
| 49 | openssl software foundation | 1 | openssl (1) | new | ||||
| 50 | optim | 1 | optimal guard (1) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2017-08 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-287120 critical↑1
- 2CWE-2290 critical·
- 3CWE-7990 critical↑14
- 4CWE-35250 critical·
- 5CWE-12140 critical↑1
- 6CWE-2040 critical↑2
- 7CWE-11930 critical↓6
- 8CWE-30030 critical↑2
- 9CWE-42730 critical·
- 10CWE-43431 critical·
- 1CWE-8930 critical↑9
- 2CWE-12220 critical·
- 3CWE-28420 critical·
- 4CWE-29520 critical·
- 5CWE-30620 critical·
- 6CWE-52220 critical↓1
- 7CWE-91820 critical·
- 8CWE-13410 critical·
- 9CWE-15010 criticalnew
- 10CWE-20010 critical↓15
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.