CVE Tools
Sign in
month report

March 2017

Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

March 2017 closed with 1,373 published CVEs — +312.3% YoY . 138 criticals, microsoft led volume, mostly via windows server 2008 service pack 2. Biggest breakout: intel at ×35.0 their 12-month median. Top weakness class — CWE-119 (180 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,373
— MoM+312.3% YoY
Severity mix
138 / 536
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
2.0%
28 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
3283.6
n=28
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
1834
n=17
Detection gap

KEV pressure, no Nuclei coverage

March 2017 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in March 2017

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

119Memory Buffer Bounds79XSS200Information Exposure20Improper Input Validation125Out-of-bounds Read476NULL Pointer Dereference264CWE-264352CSRF190Integer Overflow89SQL Injectionmicrosoft4043812111microsoft corp4043812111microsoft corporation4043710111imagemagick3612761google inc1116722google inc.1119721debian9417112112linux11853333ibm116123124ibm corporation115122124google11452opensuse92134

Most discussed CVEs — March 2017

No CVE mentions in the news this month yet.

Breakout vendors

CVE count ≥3× their own 12-period median.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1microsoft—
    134 CVE3 critCVSS 6.5
    ×3.3KEV 13Nuclei 1PoC 50
    windows server 2008 service pack 2 (65) · windows vista service pack 2 (61) · windows server 2008 (61)
  • 2microsoft corporation—
    129 CVE1 critCVSS 6.4
    NEWKEV 12PoC 47
    windows uniscribe (28) · browser (20) · office (10)
  • 3imagemagick—
    97 CVE10 critCVSS 6.9
    ×24.3
    imagemagick (97)
  • 4google—
    88 CVECVSS 6.8
    PoC 1
    android (88)
  • 5google inc.—
    83 CVECVSS 6.6
    NEWPoC 1
    android (83)
  • 6debian—
    71 CVE6 critCVSS 6.9
    Nuclei 4PoC 11
    debian linux (71)
  • 7linux—
    67 CVE1 critCVSS 6.6
    ×3.9PoC 1
    linux kernel (67)
  • 8ibm—
    56 CVE2 critCVSS 6.6
    KEV 1Nuclei 1PoC 1
    qradar security information and event manager (13) · qradar incident forensics (6) · rational rhapsody design manager (5)
  • 9ibm corporation—
    53 CVE1 critCVSS 6.2
    NEW
    qradar siem (12) · rational collaborative lifecycle management (5) · kenexa lcms premier on cloud (5)
  • 10opensuse—
    37 CVE9 critCVSS 7.5
    PoC 1
    leap (28) · opensuse (18)
  • 11intel—
    35 CVE1 critCVSS 6.9
    ×35.0PoC 10
    virusscan enterprise linux (vsel) (10) · mcafee application control (mac) (3) · anti-virus engine (ave) (2)
  • 12mcafee—
    35 CVE2 critCVSS 6.9
    ×11.7PoC 10
    virusscan enterprise (10) · application control (5) · security scan plus (5)
  • 13jasper project—
    34 CVECVSS 6.3
    ×17.0PoC 3
    jasper (34)
  • 14imagemagick studio llc—
    32 CVE5 critCVSS 7.2
    NEW
    imagemagick (32)
  • 15cisco—
    31 CVE3 critCVSS 9.4
    KEV 1Nuclei 1PoC 1
    ios xe (8) · cisco ios (6) · ios (5)
  • 16canonical—
    29 CVE5 critCVSS 7.5
    PoC 2
    ubuntu linux (21) · ubuntu (8) · ubuntu core (1)
  • 17gnu—
    29 CVE6 critCVSS 7.4
    ×5.8PoC 1
    binutils (17) · glibc (5) · gnutls (4)
  • 18сообщество свободного программного обеспечения—
    29 CVE8 critCVSS 7.5
    KEV 1PoC 3
    debian gnu/linux (13) · linux (10) · libgd2 (3)
  • 19fedoraproject—
    20 CVECVSS 6.8
    ×3.1PoC 3
    fedora (20)
  • 20opensuse project—
    20 CVE5 critCVSS 7.8
    NEWPoC 1
    leap (19) · suse linux enterprise software development kit (12) · suse linux enterprise workstation extension (11)
  • 21packagist—
    20 CVE1 critCVSS 6.5
    ×6.7Nuclei 1PoC 5
    moodle/moodle (5) · mantisbt/mantisbt (3) · drupal/drupal (3)
  • 22pypi—
    20 CVE2 critCVSS 6.5
    ×4.0PoC 8
    plone (7) · glance (2) · cherrymusic (2)
  • 23revive-adserver—
    18 CVE4 critCVSS 6.8
    revive adserver (18)
  • 24qemu—
    17 CVE1 critCVSS 6.6
    PoC 1
    qemu (17)
  • 25podofo project—
    16 CVE1 critCVSS 6.3
    NEW
    podofo (16)
  • 26novell inc.—
    15 CVE2 critCVSS 7.2
    PoC 2
    opensuse leap (15) · suse linux enterprise server (2) · suse linux enterprise desktop (2)
  • 27redhat—
    15 CVE4 critCVSS 7.3
    PoC 3
    red hat enterprise linux (6) · openstack (5) · satellite (1)
  • 28fabrice bellard—
    14 CVE1 critCVSS 6.8
    ×5.6PoC 1
    qemu (14)
  • 29maven—
    14 CVE5 critCVSS 8.0
    KEV 1Nuclei 1PoC 3
    org.apache.ambari:ambari (2) · org.apache.camel:camel-core (1) · ch.qos.logback:logback-classic (1)
  • 30apache—
    13 CVE5 critCVSS 8.0
    KEV 1Nuclei 1PoC 2
    tomcat (4) · ambari (3) · camel (3)
  • 31audiofile—
    13 CVECVSS 5.9
    NEWPoC 1
    audiofile (13)
  • 32libtiff—
    13 CVECVSS 6.9
    PoC 3
    libtiff (13)
  • 33siemens—
    13 CVECVSS 8.3
    ×8.7KEV 6PoC 7
    versant kpcr sample prep firmware (6) · acuson p300 firmware (6) · acuson p500 firmware (6)
  • 34openbsd—
    12 CVECVSS 6.1
    ×12.0PoC 8
    openbsd (12)
  • 35owncloud—
    12 CVECVSS 5.4
    ×12.0PoC 5
    owncloud (12)
  • 36virglrenderer project—
    12 CVECVSS 6.3
    NEW
    virglrenderer (12)
  • 37mcafee inc.—
    11 CVECVSS 6.2
    ×11.0PoC 10
    mcafee virusscan enterprise (10) · mcafee application control (1)
  • 38netiq—
    11 CVE1 critCVSS 7.4
    NEW
    access manager (10) · access governance suite (1)
  • 39suse—
    11 CVE2 critCVSS 7.2
    linux enterprise software development kit (6) · linux enterprise server (6) · linux enterprise desktop (5)
  • 40veritas—
    11 CVE2 critCVSS 8.2
    NEW
    netbackup (11) · netbackup appliance (11) · access (3)
  • 41adobe—
    10 CVE1 critCVSS 8.5
    flash player (7) · flash player desktop runtime (7) · acrobat (2)
  • 42cloudera—
    10 CVE1 critCVSS 5.6
    NEW
    manager (3) · cdh (2) · hue (2)
  • 43exponentcms—
    10 CVE10 critCVSS 9.8
    NEWPoC 10
    exponent cms (10)
  • 44libav—
    10 CVECVSS 5.8
    NEW×10.0PoC 2
    libav (10)
  • 45nextcloud—
    10 CVECVSS 5.5
    ×10.0PoC 5
    nextcloud server (9) · nextcloud (1)
  • 46openbsd project—
    10 CVECVSS 6.3
    ×10.0PoC 7
    openbsd (10)
  • 47webpagetest project—
    10 CVECVSS 6.1
    NEWPoC 7
    webpagetest (10)
  • 48mail-masta project—
    9 CVECVSS 7.2
    NEWNuclei 9PoC 4
    mail-masta (9)
  • 49ntp—
    9 CVECVSS 7.4
    PoC 1
    ntp (9)
  • 50ооо «русбитех-астра»—
    9 CVE1 critCVSS 6.7
    PoC 1
    astra linux special edition (8) · astra linux special edition для «эльбрус» (1)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-119180—
2CWE-79178—
3CWE-200124—
4CWE-2095—
5CWE-12563—
6CWE-47648—
7CWE-26437—
8CWE-35236—
9CWE-19034—
10CWE-8932—
11CWE-28429—
12CWE-78724—
13CWE-28722—
14CWE-2218—
15CWE-41616—
16CWE-39915—
17CWE-40013—
18CWE-61111—
19CWE-18910—
20CWE-7710—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems464 CVE
    82 crit177 KEV41 vendorsCVSS 7.5
    debian linux (71) · linux kernel (67) · leap (48)
  • OSS Libraries356 CVE
    50 crit1 KEV66 vendorsCVSS 8.9
    imagemagick (129) · binutils (17) · podofo (16)
  • Enterprise Software163 CVE
    16 crit53 KEV33 vendorsCVSS 8.2
    qradar security information and event manager (13) · qradar siem (12) · rational rhapsody design manager (9)
  • Web & CMS Plugins136 CVE
    36 crit3 KEV42 vendorsCVSS 9.9
    revive adserver (18) · exponent cms (10) · mediawiki (7)
  • Security Products109 CVE
    15 crit29 vendorsCVSS 9.1
    mcafee virusscan enterprise (10) · virusscan enterprise (10) · application control (5)
  • Mobile Apps98 CVE
    9 crit6 vendorsCVSS 8.8
    android (134) · galaxy app (2) · samsung account app (2)
  • Cloud & SaaS90 CVE
    11 crit19 vendorsCVSS 7.0
    owncloud (12) · netbackup (11) · netbackup appliance (11)
  • Networking Infrastructure82 CVE
    385 crit323 KEV31 vendorsCVSS 9.4
    ios xe (8) · cisco ios (6) · junos space (6)
  • Hardware Firmware68 CVE
    33 crit1 KEV14 vendorsCVSS 9.8
    virusscan enterprise linux (vsel) (10) · android (8) · ev-07s gps tracker firmware (3)
  • Consumer Software37 CVE
    8 crit23 vendorsCVSS 8.0
    flash player (14) · flash player desktop runtime (7) · gdk-pixbuf (4)
  • Communications33 CVE
    7 crit14 vendorsCVSS 7.8
    irssi (6) · agora-project (4) · bitlbee (3)
  • ICS / OT / IoT26 CVE
    14 crit1 KEV15 vendorsCVSS 9.8
    zoneminder (7) · ds-76xxx series firmware (3) · ds-77xxx series firmware (3)
  • DevTools & CI24 CVE
    1 crit10 vendorsCVSS 8.8
    webpagetest (10) · radare2 (4) · labview 2016 evaluation (1)
  • Databases9 CVE
    1 crit1 KEV7 vendorsCVSS 6.8
    weblogic server (3) · firebird (2) · primavera unifier (2)
  • Unclassified45 CVE
    7 crit29 vendorsCVSS 7.4
    mangoswebv4 (6) · dnalims (4) · qdpm (4)
Weakness × Sector

Which weaknesses hit which solution categories in March 2017

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

119Memory Buffer Bounds79XSS200Information Exposure20Improper Input Validation125Out-of-bounds Read476NULL Pointer Dereference264CWE-264352CSRF190Integer Overflow89SQL InjectionOSS Libraries882892647263321Operating Systems549564019126211Enterprise Software1139156261474Web & CMS Plugins15913411713Security Products28158211334Networking Infrastructure139417266Consumer Software3651153112Cloud & SaaS181051323Hardware Firmware865411222ICS / OT / IoT68211131