CVE Tools
Sign in
month report

October 2017

Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

October 2017 closed with 1,441 published CVEs. 187 criticals, oracle led volume, mostly via mysql server. Top weakness class — CWE-119 (224 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,441
— MoM— YoY
Severity mix
187 / 633
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
2.4%
35 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
3063.2
n=35
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
1598
n=8
Detection gap

KEV pressure, no Nuclei coverage

October 2017 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in October 2017

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

119Memory Buffer Bounds79XSS200Information Exposure20Improper Input Validation89SQL Injection125Out-of-bounds Read352CSRF476NULL Pointer Dereference416Use After Free22Path Traversaloracle31oracle corporation29google172122115213debian1364143861redhat53217581apple3421113maven178481microsoft283145microsoft corporation273145irfanview59google inc4231169сообщество свободного программного обеспечения11223911

Most discussed CVEs — October 2017

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1oracle—
    188 CVE11 critCVSS 6.5
    KEV 2Nuclei 2PoC 5
    mysql server (20) · java (20) · mysql (20)
  • 2google—
    125 CVE6 critCVSS 7.5
    KEV 1PoC 5
    chrome (71) · android (50) · google chrome (37)
  • 3debian—
    121 CVE12 critCVSS 7.0
    KEV 1Nuclei 3PoC 18
    debian linux (120) · ftpsync (1)
  • 4redhat—
    118 CVE15 critCVSS 7.0
    KEV 5Nuclei 3PoC 12
    enterprise linux server (99) · enterprise linux desktop (96) · enterprise linux workstation (85)
  • 5apple—
    75 CVE14 critCVSS 8.1
    PoC 3
    iphone os (51) · tvos (36) · mac os x (26)
  • 6microsoft—
    73 CVE1 critCVSS 7.0
    KEV 2PoC 11
    windows server 2016 (38) · windows rt 8.1 (33) · windows server 2012 (33)
  • 7maven—
    62 CVE11 critCVSS 7.5
    KEV 1Nuclei 2PoC 6
    org.apache.nifi:nifi (4) · org.keycloak:keycloak-parent (3) · org.cloudfoundry.identity:cloudfoundry-identity-server (3)
  • 8microsoft corporation—
    61 CVE1 critCVSS 6.9
    NEWKEV 2PoC 8
    chakracore, microsoft edge (12) · internet explorer (5) · windows kernel (5)
  • 9irfanview—
    59 CVECVSS 7.8
    NEWPoC 59
    irfanview (58) · pdf (25) · babacad4image (16)
  • 10сообщество свободного программного обеспечения—
    50 CVE2 critCVSS 6.9
    KEV 1PoC 5
    debian gnu/linux (44) · linux (6) · bchunk (3)
  • 11cisco—
    44 CVE1 critCVSS 6.3
    PoC 1
    small business 300 series wireless access point (10) · small business 500 series wireless access point (10) · dx series ip phones (10)
  • 12apache—
    43 CVE14 critCVSS 8.0
    KEV 1Nuclei 2PoC 7
    wicket (4) · nifi (4) · cordova (3)
  • 13ibm—
    41 CVE1 critCVSS 6.0
    bigfix platform (8) · rational engineering lifecycle manager (7) · rational collaborative lifecycle management (5)
  • 14ооо «русбитех-астра»—
    40 CVE2 critCVSS 7.1
    PoC 3
    astra linux special edition (27) · astra linux special edition для «эльбрус» (19) · astra linux common edition (6)
  • 15canonical—
    38 CVE6 critCVSS 7.0
    KEV 1Nuclei 2PoC 11
    ubuntu linux (33) · ubuntu (18)
  • 16juniper networks—
    35 CVE3 critCVSS 6.8
    PoC 3
    junos os (18) · junos (13) · screenos (10)
  • 17apache software foundation—
    30 CVE10 critCVSS 8.1
    KEV 1Nuclei 2PoC 4
    apache nifi (4) · apache portable runtime (2) · xml-rpc (2)
  • 18netapp—
    26 CVE2 critCVSS 6.0
    KEV 1Nuclei 1PoC 2
    active iq unified manager (25) · oncommand balance (25) · oncommand insight (24)
  • 19juniper—
    25 CVE3 critCVSS 7.2
    PoC 2
    junos (16) · junos space (5) · contrail (2)
  • 20gnu—
    24 CVE2 critCVSS 6.8
    PoC 3
    binutils (11) · libextractor (6) · glibc (4)
  • 21jenkins—
    24 CVECVSS 6.5
    PoC 2
    blue ocean (3) · script security (2) · github branch source (2)
  • 22google inc.—
    22 CVE5 critCVSS 7.9
    NEW
    android (22)
  • 23xnview—
    21 CVECVSS 7.8
    NEWPoC 21
    xnview (21)
  • 24kanboard—
    18 CVECVSS 4.3
    NEW
    kanboard (18)
  • 25linux—
    15 CVECVSS 6.5
    KEV 1PoC 1
    linux kernel (15)
  • 26intel—
    14 CVECVSS 6.4
    PoC 1
    active management technology (10) · intel atom processor c3200 series for yocto project bsp (10) · intel dual band wireless-ac 3160 (10)
  • 27fortinet inc.—
    12 CVECVSS 6.1
    PoC 1
    fortiap (10) · fortios (2)
  • 28freebsd—
    12 CVECVSS 6.3
    PoC 2
    freebsd (12)
  • 29opensuse—
    12 CVE2 critCVSS 6.7
    PoC 3
    leap (12)
  • 30aruba networks—
    11 CVE1 critCVSS 6.1
    NEWPoC 1
    aruba 501 wireless client bridge (10) · airmesh msr (10) · aruba instant (10)
  • 31f5—
    11 CVE1 critCVSS 6.9
    big-ip policy enforcement manager (11) · big-ip application acceleration manager (10) · big-ip link controller (9)
  • 32f5 networks, inc.—
    11 CVE1 critCVSS 7.2
    big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafe (2) · big-ip application security manager (2) · big-ip advanced firewall manager (2)
  • 33freebsd project—
    11 CVECVSS 6.2
    NEWPoC 2
    wpa_supplicant (10) · freebsd (1)
  • 34phpmyfaq—
    11 CVECVSS 7.9
    NEWPoC 3
    phpmyfaq (11)
  • 35redmine—
    11 CVECVSS 6.6
    redmine (11)
  • 36suse—
    11 CVE1 critCVSS 6.3
    PoC 2
    linux enterprise point of sale (11) · linux enterprise server (11) · openstack cloud (10)
  • 37watchguard—
    11 CVECVSS 6.0
    NEWPoC 2
    access points ap100 (10) · access points ap102 (10) · access points ap120 (10)
  • 38xen—
    11 CVE1 critCVSS 7.9
    PoC 1
    xen (11)
  • 39zyxel—
    11 CVE1 critCVSS 6.1
    PoC 1
    nwa5120 (10) · nwa5301-nj (10) · wac6100 (10)
  • 40espressif systems—
    10 CVECVSS 6.0
    NEWPoC 1
    espressif iot development framework (10)
  • 41gnu general public license—
    10 CVECVSS 6.2
    NEW
    gnu binutils (10)
  • 42imagemagick—
    10 CVE1 critCVSS 7.8
    imagemagick (10)
  • 43jouni malinen—
    10 CVECVSS 6.1
    PoC 1
    hostapd (10) · wpa supplicant (9)
  • 44microchip technology—
    10 CVECVSS 6.0
    NEWPoC 1
    rn131 (10) · rn171 (10) · rn1810 (10)
  • 45npm—
    10 CVE1 critCVSS 7.5
    Nuclei 1PoC 3
    keystone (3) · validator (1) · codem-transcode (1)
  • 46nuget—
    10 CVECVSS 7.1
    microsoft.chakracore (8) · umbracocms.web (2)
  • 47opentext—
    10 CVE1 critCVSS 7.7
    NEWPoC 7
    document sciences xpression (6) · documentum content server (4)
  • 48peplink—
    10 CVECVSS 6.0
    NEWPoC 1
    device connector (10) · max (10) · mediafast (10)
  • 49sierra wireless inc.—
    10 CVECVSS 6.0
    NEWPoC 1
    aleos (10) · gx400/440 (10) · gx450 (10)
  • 50ubiquiti networks—
    10 CVECVSS 6.0
    NEWPoC 1
    airmax ac (10) · airmax m (10) · airos (10)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-119224—
2CWE-79152—
3CWE-200141—
4CWE-2093—
5CWE-8966—
6CWE-12534—
7CWE-35231—
8CWE-47631—
9CWE-41625—
10CWE-2223—
11CWE-28722—
12CWE-40020—
13CWE-77216—
14CWE-26415—
15CWE-36214—
16CWE-63914—
17CWE-26913—
18CWE-61113—
19CWE-29512—
20CWE-43412—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems341 CVE
    141 crit57 KEV41 vendorsCVSS 8.7
    debian linux (120) · enterprise linux server (99) · enterprise linux desktop (96)
  • Mobile Apps212 CVE
    75 crit2 KEV6 vendorsCVSS 8.7
    chrome (71) · android (68) · google chrome (37)
  • Databases199 CVE
    29 crit51 KEV12 vendorsCVSS 8.8
    mysql server (23) · hospitality suite8 (22) · mysql (21)
  • OSS Libraries197 CVE
    34 crit2 KEV52 vendorsCVSS 8.4
    imagemagick (16) · binutils (11) · gnu binutils (10)
  • Enterprise Software180 CVE
    74 crit7 KEV47 vendorsCVSS 8.8
    active iq unified manager (25) · oncommand balance (25) · oncommand insight (24)
  • Networking Infrastructure152 CVE
    31 crit42 vendorsCVSS 9.8
    junos (29) · junos os (18) · airmax ac (10)
  • Web & CMS Plugins151 CVE
    57 crit3 KEV70 vendorsCVSS 9.8
    mediawiki (6) · e-sic (5) · apache nifi (4)
  • Consumer Software107 CVE
    4 crit5 KEV15 vendorsCVSS 9.2
    irfanview (58) · pdf (25) · babacad4image (16)
  • Security Products94 CVE
    20 crit37 vendorsCVSS 8.1
    archer grc platform (6) · keycloak (3) · bi-directional driver (2)
  • Hardware Firmware63 CVE
    15 crit23 vendorsCVSS 9.8
    active management technology (10) · intel atom processor c3200 series for yocto project bsp (10) · intel dual band wireless-ac 3160 (10)
  • Cloud & SaaS52 CVE
    17 crit1 KEV20 vendorsCVSS 8.5
    xen (11) · cf-release (6) · cloud foundry runtime cf-release (1)
  • DevTools & CI49 CVE
    4 crit12 vendorsCVSS 7.7
    blue ocean (3) · octopus deploy (3) · github branch source (2)
  • ICS / OT / IoT34 CVE
    6 crit21 vendorsCVSS 7.8
    multiflex m10a controller firmware (5) · kx-hjb1000 firmware (3) · movicon (2)
  • Communications14 CVE
    4 crit10 vendorsCVSS 7.9
    irssi (5) · openfire (1) · tapatalk (1)
  • Unclassified52 CVE
    13 crit36 vendorsCVSS 7.2
    eyesofnetwork (7) · sentinel ldk rte firmware (5) · sound exchange (4)
Weakness × Sector

Which weaknesses hit which solution categories in October 2017

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

119Memory Buffer Bounds79XSS200Information Exposure20Improper Input Validation89SQL Injection125Out-of-bounds Read352CSRF476NULL Pointer Dereference416Use After Free22Path TraversalOperating Systems911142422220135Enterprise Software5543971322Consumer Software134613243818OSS Libraries271717131891834Web & CMS Plugins1445633112Networking Infrastructure111471244Databases716121Security Products91513101322Hardware Firmware11241111Cloud & SaaS195522112