CVE Tools
Sign in
month report

August 2017

Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

August 2017 closed with 1,564 published CVEs. 246 criticals, oracle led volume, mostly via java. Biggest breakout: apache software foundation at ×28.0 their 12-month median. Top weakness class — CWE-119 (198 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,564
— MoM— YoY
Severity mix
246 / 657
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.9%
30 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
3122.1
n=30
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
1837
n=6
Detection gap

KEV pressure, no Nuclei coverage

August 2017 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in August 2017

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

119Memory Buffer Bounds79XSS200Information Exposure20Improper Input Validation125Out-of-bounds Read89SQL Injection22Path Traversal772CWE-772287Improper Authentication416Use After Freeoracle241oracle corporation2google361223528qualcomm, inc.35102047debian81110102224google inc3015117сообщество свободного программного обеспечения10131645adobe56613adobe systems incorporated55613ibm2241451ооо «русбитех-астра»1014183113imagemagick3154303

Most discussed CVEs — August 2017

No CVE mentions in the news this month yet.

Breakout vendors

CVE count ≥3× their own 12-period median.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1oracle—
    254 CVE14 critCVSS 6.4
    ×12.7Nuclei 1PoC 7
    java (32) · jre (28) · jdk (28)
  • 2google—
    158 CVE75 critCVSS 8.6
    PoC 2
    android (158)
  • 3qualcomm, inc.—
    119 CVE75 critCVSS 8.8
    NEWPoC 1
    all qualcomm products (99) · snapdragon mobile, snapdragon wear (12) · snapdragon mobile (7)
  • 4debian—
    115 CVE21 critCVSS 7.5
    ×3.6Nuclei 1PoC 20
    debian linux (114) · xbindkeys-config (1)
  • 5сообщество свободного программного обеспечения—
    83 CVE11 critCVSS 7.8
    ×3.1Nuclei 1PoC 21
    debian gnu/linux (68) · linux (7) · libidn2 (2)
  • 6adobe—
    80 CVE3 critCVSS 8.1
    PoC 1
    acrobat (66) · acrobat dc (66) · acrobat reader dc (66)
  • 7adobe systems incorporated—
    79 CVE3 critCVSS 8.0
    NEWPoC 1
    acrobat reader (65) · digital editions (9) · experience manager (3)
  • 8ibm—
    76 CVE2 critCVSS 6.1
    sametime (22) · emptoris strategic supply management (6) · infosphere information server (5)
  • 9ооо «русбитех-астра»—
    75 CVE11 critCVSS 7.6
    ×12.5PoC 21
    astra linux special edition (44) · astra linux special edition для «эльбрус» (38) · astra linux common edition (26)
  • 10imagemagick—
    67 CVE1 critCVSS 7.3
    PoC 3
    imagemagick (67)
  • 11redhat—
    61 CVE13 critCVSS 7.3
    Nuclei 1PoC 6
    enterprise linux desktop (47) · enterprise linux workstation (47) · enterprise linux server (45)
  • 12microsoft—
    54 CVE1 critCVSS 7.4
    PoC 15
    edge (29) · microsoft edge (20) · windows 10 (14)
  • 13microsoft corporation—
    53 CVE1 critCVSS 7.1
    NEWPoC 14
    microsoft scripting engine (18) · microsoft edge (8) · microsoft office (4)
  • 14netapp—
    50 CVE14 critCVSS 7.6
    ×16.7PoC 4
    oncommand performance manager (41) · oncommand unified manager (41) · oncommand balance (35)
  • 15maven—
    44 CVE2 critCVSS 6.9
    ×4.4PoC 3
    org.apache.atlas:atlas-common (7) · org.apache.tomcat:tomcat (7) · com.liferay.portal:release.portal.bom (6)
  • 16cisco—
    42 CVE1 critCVSS 6.2
    KEV 1
    adaptive security appliance software (4) · ios xe (4) · elastic services controller (4)
  • 17gnu—
    37 CVE2 critCVSS 7.3
    ×4.6PoC 5
    binutils (17) · ncurses (7) · pspp (4)
  • 18google inc.—
    36 CVECVSS 7.2
    NEW
    android (36)
  • 19apache—
    33 CVE4 critCVSS 7.2
    ×5.5PoC 3
    tomcat (9) · atlas (7) · cxf (4)
  • 20pypi—
    30 CVE2 critCVSS 8.1
    ×7.5Nuclei 1PoC 17
    opencv-contrib-python (13) · opencv-python (13) · salt (3)
  • 21apache software foundation—
    28 CVE2 critCVSS 7.1
    ×28.0Nuclei 1PoC 3
    apache tomcat (9) · apache atlas (7) · tomcat (3)
  • 22ао «концерн вниинс»—
    26 CVE7 critCVSS 7.9
    NEWPoC 8
    ос он «стрелец» (26)
  • 23imagemagick studio llc—
    24 CVE1 critCVSS 6.8
    NEWPoC 2
    imagemagick (24)
  • 24canonical—
    22 CVE4 critCVSS 7.3
    PoC 5
    ubuntu linux (21) · ubuntu (6)
  • 25fedoraproject—
    20 CVE2 critCVSS 7.3
    ×3.3Nuclei 1PoC 5
    fedora (18) · 389 directory server (1) · 389 administration server (1)
  • 26cisco systems, inc.—
    19 CVECVSS 5.8
    NEW
    elastic services controller (4) · staros for asr 5000 series aggregated services routers (3) · application policy infrastructure controller (apic) (2)
  • 27gnu general public license—
    18 CVE1 critCVSS 7.6
    NEW
    gnu binutils (17) · rsyslog (1)
  • 28synology—
    18 CVE2 critCVSS 7.2
    PoC 5
    photo station (6) · synology photo station (6) · synology download station (2)
  • 29siemens—
    17 CVE3 critCVSS 7.5
    ×4.3PoC 2
    sipass integrated (4) · ozw672 firmware (2) · logo! 8 bm (incl. siplus variants) (2)
  • 30trendmicro—
    17 CVE9 critCVSS 8.9
    PoC 1
    control manager (9) · deep discovery director (3) · interscan messaging security virtual appliance (2)
  • 31graphicsmagick—
    15 CVECVSS 7.1
    NEWPoC 1
    graphicsmagick (15)
  • 32ntp—
    15 CVE3 critCVSS 7.7
    PoC 3
    ntp (15)
  • 33sma—
    14 CVE7 critCVSS 8.7
    NEW
    sunny boy 5000 firmware (12) · sunny boy 5000tl firmware (12) · sunny boy 5.0 firmware (12)
  • 34ffmpeg—
    13 CVE6 critCVSS 8.1
    ffmpeg (13)
  • 35opencv—
    13 CVECVSS 8.6
    NEWPoC 13
    opencv (13)
  • 36fedora project—
    12 CVE2 critCVSS 7.8
    Nuclei 1PoC 1
    fedora (11) · 389 directory server (1)
  • 37graphicsmagick group—
    12 CVECVSS 7.1
    NEWPoC 1
    graphicsmagick (12)
  • 38linux—
    12 CVE2 critCVSS 7.0
    PoC 1
    linux kernel (12)
  • 39opencv team—
    11 CVECVSS 8.8
    NEWPoC 11
    open source computer vision library (opencv) (11)
  • 40phoenixcontact—
    10 CVE1 critCVSS 7.1
    NEW
    fl mguard dm (10)
  • 41qemu—
    10 CVE1 critCVSS 6.6
    qemu (10)
  • 42advantech—
    9 CVE3 critCVSS 8.7
    webaccess (9)
  • 43jasper project—
    9 CVECVSS 7.3
    PoC 4
    jasper (9)
  • 44nexusphp project—
    9 CVE4 critCVSS 7.7
    NEWPoC 2
    nexusphp (9)
  • 45novell inc.—
    8 CVE7 critCVSS 7.8
    zenworks configuration management (4) · opensuse leap (3) · suse linux enterprise server (2)
  • 46packagist—
    8 CVE2 critCVSS 7.5
    ×4.0PoC 2
    baserproject/basercms (3) · mantisbt/mantisbt (2) · simplesamlphp/simplesamlphp (1)
  • 47uclouvain—
    8 CVECVSS 7.2
    ×4.0PoC 1
    openjpeg (8)
  • 48atlassian—
    7 CVECVSS 6.1
    Nuclei 1PoC 1
    fisheye (6) · crucible (5) · atlassian fisheye and crucible (3)
  • 49citrix—
    7 CVE1 critCVSS 7.9
    ×7.0PoC 1
    xenserver (6) · netscaler gateway (1) · netscaler application delivery controller (1)
  • 50libfpx project—
    7 CVECVSS 6.5
    NEW
    libfpx (7)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-119198—
2CWE-79136—
3CWE-20097—
4CWE-2089—
5CWE-12552—
6CWE-8940—
7CWE-2239—
8CWE-77238—
9CWE-28735—
10CWE-41633—
11CWE-35229—
12CWE-42629—
13CWE-47629—
14CWE-26425—
15CWE-28421—
16CWE-78721—
17CWE-19017—
18CWE-61717—
19CWE-26915—
20CWE-36215—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems455 CVE
    253 crit38 vendorsCVSS 8.4
    debian linux (114) · debian gnu/linux (68) · enterprise linux desktop (47)
  • OSS Libraries331 CVE
    43 crit2 KEV72 vendorsCVSS 8.5
    imagemagick (91) · ffmpeg (18) · binutils (17)
  • Databases264 CVE
    42 crit10 vendorsCVSS 6.4
    java (32) · jdk (28) · jre (28)
  • Enterprise Software232 CVE
    206 crit2 KEV42 vendorsCVSS 9.8
    oncommand performance manager (41) · oncommand unified manager (41) · oncommand balance (35)
  • Web & CMS Plugins206 CVE
    32 crit54 vendorsCVSS 8.1
    nexusphp (15) · tomcat (12) · apache tomcat (9)
  • Mobile Apps175 CVE
    142 crit9 vendorsCVSS 9.2
    android (255) · galaxy s4 firmware (2) · samsung mobile (2)
  • Consumer Software131 CVE
    19 crit26 vendorsCVSS 9.8
    acrobat (66) · acrobat dc (66) · acrobat reader dc (66)
  • Networking Infrastructure104 CVE
    23 crit4 KEV33 vendorsCVSS 8.8
    elastic services controller (8) · adaptive security appliance software (4) · ios (4)
  • Security Products80 CVE
    28 crit2 KEV42 vendorsCVSS 8.5
    control manager (9) · deep discovery director (3) · trend micro deep discovery director (3)
  • ICS / OT / IoT67 CVE
    293 crit20 vendorsCVSS 8.7
    webaccess (9) · monitouch v-sft (3) · 750-849 firmware (2)
  • Cloud & SaaS45 CVE
    5 crit15 vendorsCVSS 8.3
    xenserver (8) · vcenter server (3) · ganeti (2)
  • Hardware Firmware33 CVE
    30 crit4 KEV19 vendorsCVSS 9.8
    scr02hd firmware (4) · wn-ax1167gr (3) · kg-sha104 firmware (1)
  • Communications21 CVE
    6 crit13 vendorsCVSS 8.3
    crushftp (4) · coremail xt (1) · cyrus imap (1)
  • DevTools & CI12 CVE
    2 crit1 KEV9 vendorsCVSS 9.8
    gitlab (3) · git-annex (1) · lhaforge (1)
  • AI / ML11 CVE
    1 vendorsCVSS 8.8
    open source computer vision library (opencv) (11)
  • Unclassified42 CVE
    19 crit28 vendorsCVSS 8.0
    apache2triad (3) · dnr-326 firmware (3) · dns-327l firmware (3)
Weakness × Sector

Which weaknesses hit which solution categories in August 2017

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

119Memory Buffer Bounds79XSS200Information Exposure20Improper Input Validation125Out-of-bounds Read89SQL Injection22Path Traversal772CWE-772287Improper Authentication416Use After FreeOperating Systems806304029285714OSS Libraries302082236273459Enterprise Software64522641016Hardware Firmware4131231411138Web & CMS Plugins594392227113Consumer Software9441047513Databases1736111Networking Infrastructure781115224193ICS / OT / IoT93541391Security Products3108626432