Month report
November 2017
Rolled up 2026-08-09 20:45 from 370,825 CVE records
1,066 CVEs published, +176.2% on the same month last year. 21 rated critical, 0 listed by CISA as exploited. huawei technologies co led with 144; the most common weakness class was CWE-79 (22). symantec climbed 14 places, the largest move. 19 vendors ranked for the first time.
Published
1,066
Critical / high
21 / 23
Medium / low
5 / 4
Added to CISA KEV
0
Public exploit
85
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
1452
Listed within 7 days
0%
Listed within 30 days
0%
Weakness × vendor
Where the two overlap
| Vendor | CWE-79 | CWE-20 | CWE-200 | CWE-119 | CWE-77 | CWE-399 | CWE-264 | CWE-427 |
|---|---|---|---|---|---|---|---|---|
| huawei technologies co | ||||||||
| microsoft | 1 | |||||||
| qualcomm | ||||||||
| ibm | ||||||||
| circle media | ||||||||
| apache | ||||||||
| vmware |
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | huawei technologies co | 144 | fusionsphere openstack (17) · uma (14) · honor 5c honor 6x (6) | · | ||||
| 2 | microsoft | 53 | 1 | 9 | chakracore microsoft edge (9) · microsoft edge (7) · windows kernel (7) | — | ||
| 3 | qualcomm | 32 | android for msm firefox os for msm qrd android (32) | · | ||||
| 4 | 31 | android (31) | ↑1 | |||||
| 5 | ibm | 30 | rational doors next generation (8) · openpages grc platform (6) · rational collaborative lifecycle management (4) | ↓2 | ||||
| 6 | circle media | 22 | 13 | circle (22) | new | |||
| 7 | apache | 14 | 3 | apache openoffice (6) · apache camel (2) · apache couchdb (2) | ↓1 | |||
| 8 | vmware | 12 | workstation (6) · horizon view client for windows (3) · fusion (2) | · | ||||
| 9 | intel | 11 | active management technology (2) · manageability engine (2) · server platform services (2) | ↑6 | ||||
| 10 | cesanta | 8 | 4 | mongoose (8) | new | |||
| 11 | redhat | 8 | gluster storage for rhel 6 (3) · postgresql (3) · ansible (1) | — | ||||
| 12 | symantec | 6 | 1 | symantec endpoint protection (3) · symantec endpoint encryption (2) · symantec management console (1) | ↑14 | |||
| 13 | blackberry | 5 | 1 | qnx software development platform qnx sdp (3) · qnx software development platform sdp (2) | ↑7 | |||
| 14 | libxls | 5 | libxls (5) | new | ||||
| 15 | oracle | 5 | tuxedo (5) | ↓14 | ||||
| 16 | fortinet | 4 | fortios (2) · fortinet fortiweb (1) · fortiwebmanager (1) | ↑6 | ||||
| 17 | atlassian | 3 | fisheye and crucible (1) · hipchat data center (1) · hipchat for mac desktop client (1) | — | ||||
| 18 | dahua technologies | 3 | dahua ip camera and ip ptz ipc hfw1xxx ipc hdw1xxx ipc hdbw1xxx ipc hfw2xxx ipc hdw2xxx ipc hdbw2xxx ipc hfw4xxx ipc hdw4xxx ipc hdbw4xxx ipc hf5xxx ipc hfw5xxx ipc hdw5xxx ipc hdbw5xxx ipc hf8xxx ipc hfw8xxx ipc hdbw8xxx ipc ebw8xxx ipc pfw8xxx ipc pdbw8xxx ipc hum8xxx psd8xxxx dh sd2xxxxx dh sd4xxxxx dh sd5xxxxx dh sd6xxxxx (1) · ipc hdw4300s nvr11hs ipc hfw4x00 ipc hdw4x00 ipc hdbw4x00 ipc hf5x00 ipc hfw5x00 ipc hdw5x00 ipc hdbw5x00 nvr11hs (1) · nvr50xx vr52xx vr54xx vr58xx (1) | new | ||||
| 19 | freebsd | 3 | freebsd (3) | · | ||||
| 20 | netapp | 3 | altavault ost plug in (1) · oncommand unified manager (1) · snapcenter server (1) | new | ||||
| 21 | nvidia | 3 | pixel (2) · android (1) | ↑4 | ||||
| 22 | recurly | 3 | recurly api client net library (1) · recurly python module (1) · recurly ruby gem (1) | new | ||||
| 23 | book walker co | 2 | book walker for windows (2) · book walker for mac (1) | new | ||||
| 24 | lenovo group | 2 | realtek audio driver (1) · xclarity administrator (1) | ↓11 | ||||
| 25 | math js | 2 | math js (2) | new | ||||
| 26 | micro focus | 2 | hpe content manager workgroup service (1) · hpe performance center (1) | ↓10 | ||||
| 27 | tibco software | 2 | 1 | tibco jasperreports server (2) · tibco jasperreports server community edition (2) · tibco jasperreports server for activematrix bpm (2) | ↑14 | |||
| 28 | zoho | 2 | manageengine servicedesk (2) | new | ||||
| 29 | automationdirect | 1 | c more micro part number ea pgmsw (1) · c more programming software part number ea9 pgmsw (1) · click programming software part number c0 pgmsw (1) | new | ||||
| 30 | automattic | 1 | 1 | woocommerce (1) | new | |||
| 31 | ca technologies | 1 | ca identity governance (1) | · | ||||
| 32 | f5 networks | 1 | big ip ltm aam afm analytics apm asm dns link controller pem and websafe (1) | ↓25 | ||||
| 33 | foreman project | 1 | foreman (1) | new | ||||
| 34 | frogman office | 1 | cs cart japanese edition (1) · cs cart multivendor japanese edition (1) | · | ||||
| 35 | hackerone | 1 | private address check ruby gem (1) | ↓2 | ||||
| 36 | i o data device | 1 | lan disk connect (1) | · | ||||
| 37 | inpage | 1 | inpage reader (1) | new | ||||
| 38 | jtdowney | 1 | private address check ruby gem (1) | new | ||||
| 39 | justsystem | 1 | rakuraku hagaki (1) · rakuraku hagaki select for ichitaro (1) | new | ||||
| 40 | netiq | 1 | netiq imanager (1) | new | ||||
| 41 | nippon telegraph and telephone west | 1 | installer of flets easy setup tool (1) | · | ||||
| 42 | ntt docomo | 1 | wi fi station l 02f software (1) | · | ||||
| 43 | open source solution technology | 1 | openam (1) | new | ||||
| 44 | openssl | 1 | 1 | openssl (1) | · | |||
| 45 | openssl software foundation | 1 | openssl (1) | · | ||||
| 46 | pluxml | 1 | pluxml (1) | new | ||||
| 47 | qnap | 1 | video station (1) | ↓10 | ||||
| 48 | sbi securities co | 1 | hyper sbi (1) | new | ||||
| 49 | sharp | 1 | rx clv1 p firmware (1) · rx clv2 b firmware (1) · rx clv3 n firmware (1) | · | ||||
| 50 | synology | 1 | synology carddav server (1) | ↓10 |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2017-11 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-79220 critical↑1
- 2CWE-20150 critical↑2
- 3CWE-200130 critical↑2
- 4CWE-119120 critical↓3
- 5CWE-7770 critical·
- 6CWE-39950 critical↑3
- 7CWE-26440 critical↑4
- 8CWE-42740 critical↑23
- 9CWE-91840 critical·
- 10CWE-2230 critical↑4
- 1CWE-28430 critical·
- 2CWE-28730 critical↓4
- 3CWE-40030 critical·
- 4CWE-9430 critical·
- 5CWE-12120 critical↓8
- 6CWE-30020 critical·
- 7CWE-34720 critical↑13
- 8CWE-5920 critical↑19
- 9CWE-79820 critical↑22
- 10CWE-8920 critical·
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.