Month report
September 2017
Rolled up 2026-08-09 20:45 from 370,700 CVE records
1,228 CVEs published, +106.4% on the same month last year. 55 rated critical, 0 listed by CISA as exploited. microsoft led with 77; the most common weakness class was CWE-125 (54). ntt docomo climbed 20 places, the largest move. 25 vendors ranked for the first time.
Published
1,228
Critical / high
55 / 18
Medium / low
3 / 0
Added to CISA KEV
0
Public exploit
135
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
1617
Listed within 7 days
0%
Listed within 30 days
0%
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 77 | 1 | 16 | microsoft edge (22) · microsoft office (9) · windows kernel (8) | ↑4 | ||
| 2 | 52 | 2 | android (52) | ↑4 | ||||
| 3 | ibm | 32 | 3 | db2 for linux unix and windows (7) · business process manager advanced (6) · api connect (3) | ↑1 | |||
| 4 | apache | 18 | 2 | 4 | apache struts (6) · apache brooklyn (3) · apache mesos (2) | ↑3 | ||
| 5 | schneider electric se | 12 | u motion (6) · citect anywhere (4) · powerscada anywhere (4) | · | ||||
| 6 | nvidia | 8 | gpu display driver (8) | · | ||||
| 7 | anblik | 5 | image gallery with slideshow (5) | new | ||||
| 8 | binny v a | 5 | surveys (3) · eventr (2) | new | ||||
| 9 | fortinet | 5 | 3 | fortinet fortios (5) | ↑19 | |||
| 10 | redhat | 5 | instack undercloud (1) · libexif (1) · pure ftpd (1) | ↑13 | ||||
| 11 | trend micro | 5 | mobile security enterprise (3) · interscan web security virtual appliance (1) · smart protection server standalone (1) | ↓1 | ||||
| 12 | fuji xerox co | 4 | installer for contentsbridge utility for windows (1) · installer for docuworks (1) · installer for docuworks viewer light (1) | new | ||||
| 13 | itflux | 4 | dtracker (4) | new | ||||
| 14 | digital arts | 3 | i filter 6 0 installer (2) · i filter 6 0 install program (1) | new | ||||
| 15 | elastic | 3 | elastic cloud enterprise (1) · elastic x pack alerting (1) · elastic x pack security (1) | ↑12 | ||||
| 16 | invedion | 3 | 3 | mobile app builder by wappress (1) · webapp builder (1) · wp2android turn wp site into android app (1) | new | |||
| 17 | micro focus | 3 | micro focus visibroker (2) · hpe application performance management apm (1) | ↓5 | ||||
| 18 | symantec | 3 | norton remove reinstall (1) · proxyclient (1) · symantec encryption desktop (1) | ↑7 | ||||
| 19 | synology | 3 | synology photo station (3) | ↓10 | ||||
| 20 | vmware | 3 | esxi (2) · fusion (2) · workstation (2) | · | ||||
| 21 | zte | 3 | zx10 1800 2s (2) · nr8000 series (1) | · | ||||
| 22 | eclipse foundation | 2 | eclipse kura installer (1) · mosquitto (1) | new | ||||
| 23 | gnome | 2 | gdk pixbuf (2) | new | ||||
| 24 | ledger | 2 | ledger cli (2) | new | ||||
| 25 | lenovo group | 2 | lenovo xclarity administrator lxca (2) | ↓12 | ||||
| 26 | lexmark | 2 | perceptive document filters (2) | · | ||||
| 27 | mcafee | 2 | 2 | live safe (2) · security scan plus (1) | · | |||
| 28 | ntt docomo | 2 | wi fi station l 02f (2) | ↑20 | ||||
| 29 | angry byte | 1 | wordpress gallery transformation (1) | new | ||||
| 30 | bob cares | 1 | gift certificate creator (1) | new | ||||
| 31 | ca technologies | 1 | identity manager (1) | new | ||||
| 32 | corega | 1 | cg wlr300nm (1) | · | ||||
| 33 | daisy themes | 1 | easy team manager (1) | new | ||||
| 34 | daozhao | 1 | flickr picture backup (1) | new | ||||
| 35 | event espresso | 1 | event expresso free (1) | new | ||||
| 36 | f5 networks | 1 | f5 big ip (1) | · | ||||
| 37 | fedora project infrastructure | 1 | python fedora (1) | new | ||||
| 38 | freeipa | 1 | freeipa (1) | new | ||||
| 39 | fujitsu | 1 | fence explorer for windows (1) | new | ||||
| 40 | hackerone | 1 | ruby (1) | ↓20 | ||||
| 41 | inpsyde | 1 | backwpup (1) | new | ||||
| 42 | intel | 1 | intel active management technology intel standard manageability and intel small business technology (1) | ↓13 | ||||
| 43 | internet initiative japan | 1 | seil b1 (1) · seil bpv4 (1) · seil x (1) | · | ||||
| 44 | jenova12345 | 1 | 1 | mobile friendly app builder by easytouch (1) | new | |||
| 45 | kind editor | 1 | kind editor (1) | new | ||||
| 46 | kubernetes | 1 | kubernetes (1) | new | ||||
| 47 | kubik rubik | 1 | easy joomla backup (1) | new | ||||
| 48 | libofx | 1 | libofx (1) | new | ||||
| 49 | national instruments | 1 | labview 2016 (1) | · | ||||
| 50 | nippon telegraph and telephone east | 1 | remote support tool enkaku support tool (1) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2017-09 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-1255452 critical·
- 2CWE-20151 critical↑4
- 3CWE-399110 critical·
- 4CWE-7960 critical↓1
- 5CWE-28751 critical↓4
- 6CWE-26440 critical↑19
- 7CWE-20030 critical↑13
- 8CWE-7831 critical↑34
- 9CWE-8930 critical↑2
- 10CWE-11920 critical↓3
- 1CWE-28420 critical↑2
- 2CWE-37720 critical↑22
- 3CWE-13410 critical↑5
- 4CWE-1610 critical·
- 5CWE-19010 critical·
- 6CWE-2210 critical↓14
- 7CWE-25510 critical·
- 8CWE-27610 critical↑10
- 9CWE-28510 critical·
- 10CWE-30610 critical↓5
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.