month report
February 2017
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
February 2017 closed with 1,075 published CVEs — +172.8% YoY . 118 criticals, ibm led volume, mostly via security access manager 9.0 firmware. Biggest breakout: libdwarf project at ×24.0 their 12-month median. Top weakness class — CWE-200 (131 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
1,075
— MoM+172.8% YoY
Severity mix
118 / 428
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.8%
9 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
3300.5
n=9
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
1848
n=2
Weakness × Vendor
What's spreading where in February 2017
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
200Information Exposure119Memory Buffer Bounds79XSS20Improper Input Validation125Out-of-bounds Read264CWE-264284CWE-284476NULL Pointer Dereference787Out-of-bounds Write190Integer Overflowibm454524622ibm corporation444504622apple32593132971apple inc.25482102871google1286171141google inc475171141linux53118112debian132121454google inc.10316141cisco347112сообщество свободного программного обеспечения24633adobe11871
Most discussed CVEs — February 2017
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
- 24.0×libdwarf project24 CVE
- 12.0×graphicsmagick12 CVE
- 11.0×moxa22 CVE
- 8.3×ibm192 CVE
- 7.6×apple152 CVE
- 7.0×intel7 CVE
- 6.3×nvidia19 CVE
- 6.0×dell9 CVE
- 6.0×webkitgtk9 CVE
- 6.0×freebsd6 CVE
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #2ibm corporation189 CVE
- #7google inc.54 CVE
- #11libdwarf project24 CVE
- #16nvidia corporation16 CVE
- #20graphicsmagick12 CVE
- #29ytnef project9 CVE
- #39iceni6 CVE
- #40libav6 CVE
- #43wso26 CVE
- #44ооо «юбитех»6 CVE
Top vendors
Ranked by distinct CVE count this period.
- 192 CVE10 critCVSS 5.9×8.3PoC 3security access manager 9.0 firmware (14) · security access manager for web 8.0 firmware (14) · security key lifecycle manager (11)
- 189 CVE10 critCVSS 6.1NEWPoC 3kenexa lms on cloud (20) · access manager (16) · key lifecycle manager (11)
- 152 CVE2 critCVSS 7.3×7.6PoC 21iphone os (107) · ios (91) · mac os x (79)
- 78 CVE1 critCVSS 6.8PoC 2android (56) · chrome (22) · google chrome (18)
- 56 CVE1 critCVSS 6.9×3.9PoC 2linux kernel (56)
- 54 CVE5 critCVSS 7.3PoC 10debian linux (54)
- 54 CVE1 critCVSS 7.0NEWPoC 2android (54)
- 35 CVE2 critCVSS 7.3PoC 2unified communications manager (5) · secure access control system (4) · secure firewall management center (3)
- 31 CVE2 critCVSS 7.4Nuclei 1PoC 6linux (18) · debian gnu/linux (14) · busybox (2)
- 24 CVE2 critCVSS 8.6PoC 4flash player (13) · flash player desktop runtime (13) · digital editions (9)
- 24 CVE1 critCVSS 6.8NEW×24.0PoC 5libdwarf (24)
- 22 CVE5 critCVSS 7.8×11.0PoC 1nport p5150a series firmware (8) · nport 6100 series firmware (8) · nport 5x50a1-m12 series firmware (8)
- 21 CVE2 critCVSS 7.2PoC 2leap (16) · opensuse (16)
- 19 CVE5 critCVSS 7.2PoC 5fedora (19)
- 19 CVECVSS 7.5×6.3PoC 4gpu driver (16) · tegra k1 cd570m-a1 (3) · tegra k1 cd580m-a1 (3)
- 16 CVECVSS 7.5NEWPoC 2windows gpu display driver (10) · gpu display driver (5) · linux gpu display driver (1)
- 14 CVECVSS 6.8gstreamer (14)
- 14 CVECVSS 6.8PoC 2enterprise linux workstation (7) · enterprise linux desktop (7) · enterprise linux server (7)
- 12 CVECVSS 6.0PoC 1libiberty (9) · coreutils (1) · ed (1)
- 12 CVE2 critCVSS 7.3NEW×12.0graphicsmagick (12)
- 12 CVE3 critCVSS 7.6×4.8data ontap (2) · oncommand insight (2) · e-series santricity os controller (1)
- 11 CVE5 critCVSS 8.1PoC 7simplesamlphp/simplesamlphp (2) · zendframework/zendframework (2) · simplesamlphp/saml2 (1)
- 10 CVE4 critCVSS 7.3×5.0smarts network configuration manager (2) · documentum d2 (2) · recoverpoint (2)
- 10 CVE2 critCVSS 6.8PoC 1plone (4) · html5lib (2) · pycrypto (1)
- 9 CVE2 critCVSS 8.0PoC 2ubuntu linux (9)
- 9 CVE3 critCVSS 7.7×6.0PoC 1sonicwall secure remote access server (3) · vce vision intelligent operations (2) · bsafe crypto-j (2)
- 9 CVECVSS 6.9PoC 1imagemagick (9)
- 9 CVECVSS 7.9×6.0PoC 5webkitgtk\+ (9)
- 9 CVECVSS 7.5NEWytnef (9)
- 9 CVE2 critCVSS 7.9×3.0Nuclei 1PoC 5astra linux special edition (9) · astra linux special edition для «эльбрус» (2)
- 8 CVE3 critCVSS 7.8×4.0PoC 1magelis xbt gt advanced touchscreen panel firmware (2) · ion5000 (2) · ion7300 (2)
- 7 CVECVSS 7.3×7.0PoC 2core i7-3632qm (3) · core i7-4500u (3) · core i7-6700k (3)
- 7 CVECVSS 6.2PoC 2com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer (1) · com.tupilabs.image_gallery:image-gallery (1) · org.jenkins-ci.plugins:extra-columns (1)
- 7 CVECVSS 6.2xen (7)
- 6 CVE6 critCVSS 9.8hhvm (6)
- 6 CVECVSS 7.4×6.0PoC 1freebsd (6)
- 6 CVE3 critCVSS 7.8×6.0xl web ii controller (5) · experion process knowledge system (1)
- 6 CVE3 critCVSS 8.8PoC 1aix (2) · general parallel file system (1) · bigfix platform (1)
- 6 CVECVSS 7.8NEWPoC 1argus (6)
- 6 CVECVSS 5.5NEW×6.0PoC 1libav (6)
- 6 CVECVSS 7.2PoC 2exynos 5800 (3) · samsung mobile (3)
- 6 CVE2 critCVSS 8.5×3.0sicam pas (2) · ruggedcom network management software (2) · sicam pas\/pqs (2)
- 6 CVECVSS 6.5NEWPoC 6carbon (3) · identity server (2) · enablement server for java (1)
- 6 CVECVSS 7.2NEWublinux (6)
- 5 CVE2 critCVSS 8.2×3.3PoC 2susiaccess (3) · webaccess (2)
- 5 CVECVSS 6.8PoC 1mupdf (3) · mujs (1) · afpl ghostscript (1)
- 5 CVE2 critCVSS 8.6NEWuniversal multifunctional electric power quality meter firmware (5) · binom3 universal multifunctional electric power quality meter (1)
- 5 CVE5 critCVSS 9.8×5.0PoC 1sonicwall secure remote access (3) · smart network configuration manager (2)
- 5 CVECVSS 6.4×3.3PoC 3jasper (5)
- 5 CVECVSS 6.6build failure analyzer (1) · extra columns (1) · image gallery (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | ibm | 192 | 10 | · | · | ×8.3PoC 3 | security access manager 9.0 firmware (14) · security access manager for web 8.0 firmware (14) · security key lifecycle manager (11) | — | |
| 2 | ibm corporation | 189 | 10 | · | · | NEWPoC 3 | kenexa lms on cloud (20) · access manager (16) · key lifecycle manager (11) | — | |
| 3 | apple | 152 | 2 | · | · | ×7.6PoC 21 | iphone os (107) · ios (91) · mac os x (79) | — | |
| 4 | 78 | 1 | · | · | PoC 2 | android (56) · chrome (22) · google chrome (18) | — | ||
| 5 | linux | 56 | 1 | · | · | ×3.9PoC 2 | linux kernel (56) | — | |
| 6 | debian | 54 | 5 | · | · | PoC 10 | debian linux (54) | — | |
| 7 | google inc. | 54 | 1 | · | · | NEWPoC 2 | android (54) | — | |
| 8 | cisco | 35 | 2 | · | · | PoC 2 | unified communications manager (5) · secure access control system (4) · secure firewall management center (3) | — | |
| 9 | сообщество свободного программного обеспечения | 31 | 2 | · | 1 | Nuclei 1PoC 6 | linux (18) · debian gnu/linux (14) · busybox (2) | — | |
| 10 | adobe | 24 | 2 | · | · | PoC 4 | flash player (13) · flash player desktop runtime (13) · digital editions (9) | — | |
| 11 | libdwarf project | 24 | 1 | · | · | NEW×24.0PoC 5 | libdwarf (24) | — | |
| 12 | moxa | 22 | 5 | · | · | ×11.0PoC 1 | nport p5150a series firmware (8) · nport 6100 series firmware (8) · nport 5x50a1-m12 series firmware (8) | — | |
| 13 | opensuse | 21 | 2 | · | · | PoC 2 | leap (16) · opensuse (16) | — | |
| 14 | fedoraproject | 19 | 5 | · | · | PoC 5 | fedora (19) | — | |
| 15 | nvidia | 19 | · | · | · | ×6.3PoC 4 | gpu driver (16) · tegra k1 cd570m-a1 (3) · tegra k1 cd580m-a1 (3) | — | |
| 16 | nvidia corporation | 16 | · | · | · | NEWPoC 2 | windows gpu display driver (10) · gpu display driver (5) · linux gpu display driver (1) | — | |
| 17 | gstreamer | 14 | · | · | · | gstreamer (14) | — | ||
| 18 | redhat | 14 | · | · | · | PoC 2 | enterprise linux workstation (7) · enterprise linux desktop (7) · enterprise linux server (7) | — | |
| 19 | gnu | 12 | · | · | · | PoC 1 | libiberty (9) · coreutils (1) · ed (1) | — | |
| 20 | graphicsmagick | 12 | 2 | · | · | NEW×12.0 | graphicsmagick (12) | — | |
| 21 | netapp | 12 | 3 | · | · | ×4.8 | data ontap (2) · oncommand insight (2) · e-series santricity os controller (1) | — | |
| 22 | packagist | 11 | 5 | · | · | PoC 7 | simplesamlphp/simplesamlphp (2) · zendframework/zendframework (2) · simplesamlphp/saml2 (1) | — | |
| 23 | emc | 10 | 4 | · | · | ×5.0 | smarts network configuration manager (2) · documentum d2 (2) · recoverpoint (2) | — | |
| 24 | pypi | 10 | 2 | · | · | PoC 1 | plone (4) · html5lib (2) · pycrypto (1) | — | |
| 25 | canonical | 9 | 2 | · | · | PoC 2 | ubuntu linux (9) | — | |
| 26 | dell | 9 | 3 | · | · | ×6.0PoC 1 | sonicwall secure remote access server (3) · vce vision intelligent operations (2) · bsafe crypto-j (2) | — | |
| 27 | imagemagick | 9 | · | · | · | PoC 1 | imagemagick (9) | — | |
| 28 | webkitgtk | 9 | · | · | · | ×6.0PoC 5 | webkitgtk\+ (9) | — | |
| 29 | ytnef project | 9 | · | · | · | NEW | ytnef (9) | — | |
| 30 | ооо «русбитех-астра» | 9 | 2 | · | 1 | ×3.0Nuclei 1PoC 5 | astra linux special edition (9) · astra linux special edition для «эльбрус» (2) | — | |
| 31 | schneider-electric | 8 | 3 | · | · | ×4.0PoC 1 | magelis xbt gt advanced touchscreen panel firmware (2) · ion5000 (2) · ion7300 (2) | — | |
| 32 | intel | 7 | · | · | · | ×7.0PoC 2 | core i7-3632qm (3) · core i7-4500u (3) · core i7-6700k (3) | — | |
| 33 | maven | 7 | · | · | · | PoC 2 | com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer (1) · com.tupilabs.image_gallery:image-gallery (1) · org.jenkins-ci.plugins:extra-columns (1) | — | |
| 34 | xen | 7 | · | · | · | xen (7) | — | ||
| 35 | 6 | 6 | · | · | hhvm (6) | — | |||
| 36 | freebsd | 6 | · | · | · | ×6.0PoC 1 | freebsd (6) | — | |
| 37 | honeywell | 6 | 3 | · | · | ×6.0 | xl web ii controller (5) · experion process knowledge system (1) | — | |
| 38 | ibm corp. | 6 | 3 | · | · | PoC 1 | aix (2) · general parallel file system (1) · bigfix platform (1) | — | |
| 39 | iceni | 6 | · | · | · | NEWPoC 1 | argus (6) | — | |
| 40 | libav | 6 | · | · | · | NEW×6.0PoC 1 | libav (6) | — | |
| 41 | samsung | 6 | · | · | · | PoC 2 | exynos 5800 (3) · samsung mobile (3) | — | |
| 42 | siemens | 6 | 2 | · | · | ×3.0 | sicam pas (2) · ruggedcom network management software (2) · sicam pas\/pqs (2) | — | |
| 43 | wso2 | 6 | · | · | · | NEWPoC 6 | carbon (3) · identity server (2) · enablement server for java (1) | — | |
| 44 | ооо «юбитех» | 6 | · | · | · | NEW | ublinux (6) | — | |
| 45 | advantech | 5 | 2 | · | · | ×3.3PoC 2 | susiaccess (3) · webaccess (2) | — | |
| 46 | artifex | 5 | · | · | · | PoC 1 | mupdf (3) · mujs (1) · afpl ghostscript (1) | — | |
| 47 | binom3 | 5 | 2 | · | · | NEW | universal multifunctional electric power quality meter firmware (5) · binom3 universal multifunctional electric power quality meter (1) | — | |
| 48 | dell technologies | 5 | 5 | · | · | ×5.0PoC 1 | sonicwall secure remote access (3) · smart network configuration manager (2) | — | |
| 49 | jasper project | 5 | · | · | · | ×3.3PoC 3 | jasper (5) | — | |
| 50 | jenkins | 5 | · | · | · | build failure analyzer (1) · extra columns (1) · image gallery (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Enterprise Software252 CVE41 crit27 vendorsCVSS 9.8kenexa lms on cloud (30) · access manager (16) · rational collaborative lifecycle management (15)
- Mobile Apps237 CVE9 crit6 vendorsCVSS 7.3iphone os (107) · ios (91) · mac os x (79)
- Operating Systems212 CVE27 crit5 KEV32 vendorsCVSS 8.1linux kernel (56) · debian linux (54) · fedora (20)
- OSS Libraries175 CVE33 crit58 vendorsCVSS 9.8libdwarf (24) · gstreamer (19) · imagemagick (9)
- ICS / OT / IoT85 CVE125 crit31 vendorsCVSS 9.1xl web ii controller (5) · susiaccess (3) · 1763-l16awa series a (2)
- Consumer Software60 CVE10 crit14 vendorsCVSS 8.7flash player (26) · flash player desktop runtime (13) · digital editions (9)
- 10 crit2 KEV18 vendorsCVSS 7.9unified communications manager (5) · secure access control system (4) · prime collaboration assurance (3)
- Hardware Firmware38 CVE8 crit10 vendorsCVSS 9.8gpu driver (16) · windows gpu display driver (10) · gpu display driver (5)
- Web & CMS Plugins30 CVE10 crit16 vendorsCVSS 8.7dotcms (4) · plone (4) · cms made simple (3)
- Security Products30 CVE8 crit13 vendorsCVSS 7.7documentum d2 (2) · recoverpoint (2) · recoverpoint for virtual machines (2)
- Communications29 CVE10 crit15 vendorsCVSS 8.7hhvm (6) · avera sms gateway firmware (3) · entera sms gateway firmware (3)
- Cloud & SaaS19 CVE6 vendorsCVSS 6.5xen (7)
- Databases13 CVE10 crit7 vendorsCVSS 9.8aix (2) · database (2) · bigfix platform (1)
- DevTools & CI9 CVE1 crit5 vendorsCVSS 7.1build failure analyzer (1) · extra columns (1) · image gallery (1)
- Unclassified28 CVE2 crit13 vendorsCVSS 7.1argus (6) · lepton (5) · a64 (3)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Enterprise Software▸ 6 | 252 | 41 | · | 27 | 176 | 9.8 | kenexa lms on cloud (30) · access manager (16) · rational collaborative lifecycle management (15) |
| Mobile Apps▸ 2 | 237 | 9 | · | 6 | 19 | 7.3 | iphone os (107) · ios (91) · mac os x (79) |
| Operating Systems▸ 5 | 212 | 27 | 5 | 32 | 54 | 8.1 | linux kernel (56) · debian linux (54) · fedora (20) |
| OSS Libraries▸ 8 | 175 | 33 | · | 58 | 88 | 9.8 | libdwarf (24) · gstreamer (19) · imagemagick (9) |
| ICS / OT / IoT▸ 6 | 85 | 125 | · | 31 | 153 | 9.1 | xl web ii controller (5) · susiaccess (3) · 1763-l16awa series a (2) |
| Consumer Software▸ 5 | 60 | 10 | · | 14 | 18 | 8.7 | flash player (26) · flash player desktop runtime (13) · digital editions (9) |
| Networking Infrastructure▸ 5 | 54 | 10 | 2 | 18 | 51 | 7.9 | unified communications manager (5) · secure access control system (4) · prime collaboration assurance (3) |
| Hardware Firmware▸ 3 | 38 | 8 | · | 10 | 48 | 9.8 | gpu driver (16) · windows gpu display driver (10) · gpu display driver (5) |
| Web & CMS Plugins▸ 3 | 30 | 10 | · | 16 | 17 | 8.7 | dotcms (4) · plone (4) · cms made simple (3) |
| Security Products▸ 6 | 30 | 8 | · | 13 | 39 | 7.7 | documentum d2 (2) · recoverpoint (2) · recoverpoint for virtual machines (2) |
| Communications▸ 3 | 29 | 10 | · | 15 | 16 | 8.7 | hhvm (6) · avera sms gateway firmware (3) · entera sms gateway firmware (3) |
| Cloud & SaaS▸ 4 | 19 | · | · | 6 | 9 | 6.5 | xen (7) |
| Databases▸ 3 | 13 | 10 | · | 7 | 14 | 9.8 | aix (2) · database (2) · bigfix platform (1) |
| DevTools & CI▸ 2 | 9 | 1 | · | 5 | 10 | 7.1 | build failure analyzer (1) · extra columns (1) · image gallery (1) |
| Unclassified | 28 | 2 | · | 13 | 17 | 7.1 | argus (6) · lepton (5) · a64 (3) |
Weakness × Sector
Which weaknesses hit which solution categories in February 2017
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
200Information Exposure119Memory Buffer Bounds79XSS20Improper Input Validation125Out-of-bounds Read264CWE-264284CWE-284476NULL Pointer Dereference787Out-of-bounds Write190Integer OverflowOperating Systems478431824242151013OSS Libraries5289114941151015Enterprise Software29453561411Consumer Software123892911295ICS / OT / IoT47816212Cloud & SaaS1124111228Security Products21110549Hardware Firmware114341431Networking Infrastructure106101121Web & CMS Plugins511014531