CVE Tools
Sign in
month report

July 2017

Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

July 2017 closed with 1,313 published CVEs. 169 criticals, cisco led volume, mostly via dpc3939 firmware. Biggest breakout: apache software foundation at ×26.0 their 12-month median. Top weakness class — CWE-119 (283 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,313
— MoM— YoY
Severity mix
169 / 661
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.8%
24 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
3158.8
n=24
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
1690
n=13
Detection gap

KEV pressure, no Nuclei coverage

July 2017 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in July 2017

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

119Memory Buffer Bounds79XSS20Improper Input Validation200Information Exposure125Out-of-bounds Read89SQL Injection426Untrusted Search Path352CSRF22Path Traversal772CWE-772cisco1215816123ibm3169313xnview74apple4426431microsoft21355microsoft corporation21355google39811irfanview50сообщество свободного программного обеспечения75332google inc.2951imagemagick11719debian317171

Most discussed CVEs — July 2017

No CVE mentions in the news this month yet.

Breakout vendors

CVE count ≥3× their own 12-period median.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1cisco—
    81 CVE12 critCVSS 7.8
    KEV 8PoC 16
    dpc3939 firmware (16) · cisco ios (11) · ios (8)
  • 2ibm—
    78 CVE4 critCVSS 6.2
    security guardium (8) · infosphere master data management server (7) · jazz reporting service (7)
  • 3xnview—
    74 CVECVSS 7.8
    NEWPoC 74
    xnview (74)
  • 4apple—
    66 CVE2 critCVSS 8.1
    Nuclei 1PoC 15
    iphone os (46) · tvos (37) · mac os x (30)
  • 5google—
    57 CVE1 critCVSS 7.0
    PoC 2
    android (55) · kubernetes (1) · news and weather (1)
  • 6microsoft—
    57 CVE2 critCVSS 7.4
    KEV 1PoC 5
    windows 10 (26) · windows server 2016 (25) · windows 8.1 (23)
  • 7microsoft corporation—
    57 CVE2 critCVSS 7.2
    NEWKEV 1PoC 5
    windows 10 gold, 1511, 1607, and 1703, and windows server 2016 (8) · microsoft windows server 2008 sp2 and r2 sp1, windows 7 sp1, windows 8.1, windows server 2012 gold and r2, windows rt 8.1, windows 10 gold, 1511, 1607, and 1703, and windows server 2016 (7) · microsoft windows 7 sp1, windows server 2008 sp2 and r2 sp1, windows 8.1 and windows rt 8.1, windows server 2012 and r2, windows 10 gold, 1511, 1607, 1703, and windows server 2016. (5)
  • 8irfanview—
    50 CVECVSS 7.8
    NEWPoC 50
    irfanview (49) · fpx (31) · tools (10)
  • 9сообщество свободного программного обеспечения—
    47 CVE7 critCVSS 7.6
    PoC 9
    debian gnu/linux (33) · linux (6) · libexpat (1)
  • 10google inc.—
    46 CVECVSS 6.8
    NEWPoC 1
    android (46)
  • 11imagemagick—
    46 CVECVSS 6.8
    PoC 2
    imagemagick (46)
  • 12debian—
    43 CVE3 critCVSS 7.4
    Nuclei 1PoC 7
    debian linux (42) · tor (1)
  • 13ооо «русбитех-астра»—
    40 CVE7 critCVSS 7.6
    ×6.7PoC 9
    astra linux special edition (29) · astra linux common edition (16) · astra linux special edition для «эльбрус» (2)
  • 14apache—
    29 CVE7 critCVSS 7.8
    ×4.8KEV 1Nuclei 1PoC 4
    openmeetings (11) · http server (6) · struts (3)
  • 15apache software foundation—
    26 CVE6 critCVSS 7.9
    ×26.0KEV 1Nuclei 1PoC 4
    apache openmeetings (11) · apache http server (6) · http server (5)
  • 16canonical—
    26 CVECVSS 7.1
    PoC 2
    ubuntu (14) · ubuntu linux (13) · ubuntu-image (1)
  • 17imagemagick studio llc—
    25 CVECVSS 6.6
    NEWPoC 2
    imagemagick (25)
  • 18maven—
    25 CVE7 critCVSS 8.0
    KEV 1Nuclei 1PoC 4
    org.apache.openmeetings:openmeetings-parent (11) · org.apache.struts:struts2-core (2) · org.apache.sling:org.apache.sling.xss.compat (2)
  • 19juniper—
    20 CVE5 critCVSS 8.1
    ×4.0PoC 1
    junos (15) · screenos (5)
  • 20juniper networks—
    20 CVE5 critCVSS 8.2
    ×10.0PoC 1
    junos os (15) · screenos (5) · junos (2)
  • 21packagist—
    20 CVE1 critCVSS 7.2
    ×10.0PoC 4
    phpmyadmin/phpmyadmin (6) · moodle/moodle (3) · bolt/bolt (2)
  • 22redhat—
    19 CVE2 critCVSS 7.6
    enterprise linux server (12) · enterprise linux workstation (11) · enterprise linux desktop (11)
  • 23graphicsmagick—
    14 CVE5 critCVSS 8.0
    NEWPoC 1
    graphicsmagick (14)
  • 24graphicsmagick group—
    13 CVE4 critCVSS 7.9
    NEWPoC 1
    graphicsmagick (13)
  • 25artifex—
    12 CVECVSS 7.8
    ×6.0PoC 4
    ghostscript ghostxps (9) · ghostscript (3)
  • 26emc—
    12 CVE1 critCVSS 6.4
    rsa archer egrc (5) · rsa authentication manager (2) · rsa identity governance and lifecycle (2)
  • 27swftools—
    12 CVECVSS 8.5
    NEWPoC 9
    swftools (12)
  • 28xen—
    12 CVE7 critCVSS 8.7
    ×3.0
    xen (12)
  • 29finecms project—
    11 CVE2 critCVSS 7.1
    NEWPoC 4
    finecms (11)
  • 30fiyo—
    11 CVE10 critCVSS 9.6
    NEW
    fiyo cms (11)
  • 31nvidia corporation—
    11 CVECVSS 7.4
    NEW
    nvidia windows gpu display driver (6) · android (3) · nvidia gpu display driver (2)
  • 32fontforge—
    10 CVECVSS 7.6
    NEW
    fontforge (10)
  • 33freeradius—
    10 CVE2 critCVSS 8.0
    NEW
    freeradius (10)
  • 34libming—
    10 CVECVSS 5.8
    NEWPoC 2
    ming (10)
  • 35linux—
    10 CVECVSS 7.2
    PoC 1
    linux kernel (10)
  • 36netapp—
    10 CVE2 critCVSS 7.8
    ×3.3
    clustered data ontap (5) · oncommand unified manager (3) · data ontap (2)
  • 37exiv2—
    9 CVECVSS 6.8
    NEWPoC 1
    exiv2 (9)
  • 38nvidia—
    9 CVECVSS 7.6
    gpu driver (9)
  • 39fedoraproject—
    8 CVECVSS 7.0
    fedora (7) · fedmsg (1)
  • 40php—
    8 CVE2 critCVSS 8.0
    php (8)
  • 41php group—
    8 CVE2 critCVSS 8.0
    php (8)
  • 42finecms—
    7 CVE4 critCVSS 8.2
    NEWNuclei 2PoC 3
    finecms (7)
  • 43glpi-project—
    7 CVE3 critCVSS 8.1
    glpi (7)
  • 44intellishield—
    7 CVECVSS 8.8
    NEWKEV 6PoC 7
    universal product (7)
  • 45libsass—
    7 CVECVSS 7.2
    NEWPoC 2
    libsass (7)
  • 46oracle—
    7 CVE2 critCVSS 8.0
    Nuclei 2PoC 1
    glassfish server (3) · linux (2) · peoplesoft enterprise peopletools (1)
  • 47sap—
    7 CVE1 critCVSS 6.6
    PoC 1
    netweaver (2) · netweaver application server java (2) · netweaver abap (1)
  • 48adobe—
    6 CVECVSS 7.2
    connect (3) · flash player (3) · flash player desktop runtime (3)
  • 49gnome—
    6 CVE1 critCVSS 7.6
    ×6.0PoC 1
    epiphany (1) · gnome-session (1) · gtk-vnc (1)
  • 50gnu—
    6 CVECVSS 6.6
    PoC 2
    ncurses (2) · pspp (2) · gcc (1)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-119283—
2CWE-79157—
3CWE-2087—
4CWE-20080—
5CWE-12566—
6CWE-8939—
7CWE-42631—
8CWE-35229—
9CWE-2227—
10CWE-77227—
11CWE-28726—
12CWE-47626—
13CWE-40021—
14CWE-7820—
15CWE-83518—
16CWE-78716—
17CWE-60114—
18CWE-28113—
19CWE-79813—
20CWE-9412—

Sectors

Solution categories ranked by distinct CVE count this period.

  • OSS Libraries248 CVE
    34 crit4 KEV63 vendorsCVSS 8.7
    imagemagick (71) · php (16) · graphicsmagick (13)
  • Operating Systems227 CVE
    59 crit7 KEV35 vendorsCVSS 7.5
    debian linux (42) · debian gnu/linux (33) · astra linux special edition (29)
  • Consumer Software208 CVE
    7 crit33 vendorsCVSS 8.6
    xnview (74) · flash player (4) · connect (3)
  • Enterprise Software174 CVE
    28 crit1 KEV44 vendorsCVSS 8.2
    security guardium (8) · glpi (7) · infosphere master data management (7)
  • Networking Infrastructure154 CVE
    81 crit25 KEV32 vendorsCVSS 8.8
    junos (17) · dpc3939 firmware (16) · junos os (15)
  • Web & CMS Plugins136 CVE
    45 crit5 KEV55 vendorsCVSS 8.0
    finecms (18) · apache openmeetings (11) · fiyo cms (11)
  • Mobile Apps128 CVE
    6 crit6 vendorsCVSS 8.1
    iphone os (46) · safari (38) · itunes (37)
  • Security Products72 CVE
    14 crit35 vendorsCVSS 8.8
    freeradius (11) · rsa archer egrc (5) · data protection advisor (2)
  • Cloud & SaaS48 CVE
    23 crit2 KEV19 vendorsCVSS 9.1
    xen (12) · capi-release (4) · cf-release (3)
  • Hardware Firmware34 CVE
    48 crit16 vendorsCVSS 9.3
    gpu driver (9) · nvidia windows gpu display driver (6) · android (3)
  • Databases25 CVE
    9 crit12 vendorsCVSS 8.6
    glassfish server (3) · linux (2) · sqlite (2)
  • ICS / OT / IoT18 CVE
    7 crit8 vendorsCVSS 9.8
    cubeone firmware (4) · home spot cube 2 firmware (4)
  • Communications9 CVE
    4 crit8 vendorsCVSS 9.8
    irssi (2) · jabberd2 (1) · live helper chat (1)
  • DevTools & CI8 CVE
    2 crit1 KEV8 vendorsCVSS 8.8
    netwide assembler (1) · radare2 (1) · testtrack (1)
  • Unclassified67 CVE
    17 crit6 KEV41 vendorsCVSS 7.9
    universal product (7) · hem-gw16a firmware (5) · hem-gw26a firmware (5)
Weakness × Sector

Which weaknesses hit which solution categories in July 2017

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

119Memory Buffer Bounds79XSS20Improper Input Validation200Information Exposure125Out-of-bounds Read89SQL Injection426Untrusted Search Path352CSRF22Path Traversal772CWE-772Operating Systems806322115127Consumer Software18678614162OSS Libraries311521940232322Networking Infrastructure182723171105Enterprise Software25381111874Web & CMS Plugins541161237210Security Products71046333513Cloud & SaaS274523111Hardware Firmware516614ICS / OT / IoT121121