month report
December 2017
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
December 2017 closed with 1,120 published CVEs. 228 criticals, adobe led volume, mostly via acrobat. Top weakness class — CWE-119 (159 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
1,120
— MoM— YoY
Severity mix
228 / 538
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.9%
21 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
2999.0
n=21
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
1585
n=2
Weakness × Vendor
What's spreading where in December 2017
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
119Memory Buffer Bounds89SQL Injection79XSS200Information Exposure125Out-of-bounds Read20Improper Input Validation416Use After Free74Injection352CSRF787Out-of-bounds Writeadobe27732795debian11136194355google2111310141ibm31414112canonical39364foxit131316foxitsoftware131316qualcomm, inc.2112310google inc.101711ооо «русбитех-астра»51023apple19423microsoft2463
Most discussed CVEs — December 2017
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #7qualcomm, inc.43 CVE
- #8google inc.38 CVE
- #12microsoft corporation34 CVE
- #17tgsoft17 CVE
- #22ikarussecurity14 CVE
- #24synology13 CVE
- #25nasm11 CVE
- #26php multivendor ecommerce project11 CVE
- #27cambium networks10 CVE
- #28cambiumnetworks10 CVE
Top vendors
Ranked by distinct CVE count this period.
- 95 CVE17 critCVSS 8.6PoC 2acrobat (62) · acrobat dc (62) · acrobat reader (62)
- 89 CVE6 critCVSS 7.4Nuclei 3PoC 11debian linux (85) · most (1) · advanced package tool (1)
- 85 CVE16 critCVSS 8.1PoC 2android (85)
- 50 CVECVSS 5.6security guardium (11) · sterling file gateway (6) · rational doors next generation (4)
- 48 CVE2 critCVSS 6.8PoC 11ubuntu linux (44) · ubuntu (7)
- 43 CVECVSS 8.1foxit reader (43)
- 43 CVE12 critCVSS 8.1NEWandroid for msm, firefox os for msm, qrd android (43)
- 38 CVE4 critCVSS 7.8NEWPoC 1android (38)
- 38 CVE4 critCVSS 7.3PoC 7astra linux special edition (27) · astra linux special edition для «эльбрус» (13) · astra linux common edition (10)
- 34 CVE1 critCVSS 7.6PoC 11iphone os (22) · mac os x (21) · tvos (17)
- 34 CVE1 critCVSS 7.3PoC 10chakracore (15) · edge (14) · internet explorer (13)
- 34 CVE1 critCVSS 7.3NEWPoC 10chakracore, microsoft edge (9) · internet explorer (8) · chakracore, microsoft edge, internet explorer (3)
- 34 CVE4 critCVSS 7.4PoC 8debian gnu/linux (34) · linux (2) · libxcursor (1)
- 26 CVECVSS 6.9PoC 2linux kernel (26)
- 25 CVE9 critCVSS 8.1PoC 5enterprise linux server (13) · enterprise linux desktop (13) · enterprise linux workstation (13)
- 17 CVECVSS 7.4PoC 1te60 firmware (3) · te50 firmware (3) · te40 firmware (3)
- 17 CVECVSS 7.8NEWPoC 17vir.it explorer (16) · vir.it explorer lite (1)
- 16 CVECVSS 7.4te40 (3) · te50 (3) · te60 (3)
- 16 CVE1 critCVSS 7.0PoC 3imagemagick (16)
- 14 CVECVSS 7.3big-ip access policy manager (12) · big-ip advanced firewall manager (11) · big-ip analytics (10)
- 14 CVECVSS 7.1big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafe (5) · big-ip apm (3) · big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem, websafe (2)
- 14 CVECVSS 7.6NEWPoC 10anti.virus (14)
- 13 CVE1 critCVSS 6.6sap kernel (2) · business application software integrated solution (2) · sap hana extended application services (2)
- 13 CVECVSS 6.3NEWPoC 1photo station (3) · diskstation manager (3) · diskstation manager (dsm) (2)
- 11 CVECVSS 5.7NEWPoC 4netwide assembler (11)
- 11 CVE4 critCVSS 7.9NEWPoC 11php multivendor ecommerce (11)
- 10 CVECVSS 7.6NEWPoC 2epmp (5) · cnpilot (5)
- 10 CVECVSS 8.0NEWPoC 2cnpilot e410 firmware (5) · cnpilot e600 firmware (5) · cnpilot r190n firmware (5)
- 10 CVECVSS 7.6PoC 2binutils (6) · glibc (2) · global (1)
- 10 CVECVSS 8.7NEWgraphicsmagick (10)
- 10 CVE3 critCVSS 7.9PoC 1org.apache.qpid:qpid-broker (2) · org.bouncycastle:bcprov-jdk15on (1) · org.jenkins-ci.main:jenkins-core (1)
- 9 CVE1 critCVSS 6.4NEWPoC 6muslim matrimonial script (9)
- 9 CVECVSS 7.5PoC 4microsoft.chakracore (9)
- 9 CVECVSS 6.2NEWPoC 3piwigo (9)
- 8 CVE3 critCVSS 8.3PoC 1qpid broker-j (2) · sling authentication service (1) · drill (1)
- 8 CVE3 critCVSS 8.2PoC 1apache qpid broker-j (2) · apache fineract (1) · apache flex blaze ds (1)
- 8 CVE1 critCVSS 6.6NEWPoC 2biometric shift employee management system (7) · shift (1)
- 8 CVE7 critCVSS 9.6qts (7) · qts login function (2) · qts password function (2)
- 7 CVE1 critCVSS 6.3NEWPoC 6professional service script (7)
- 7 CVE3 critCVSS 8.1PoC 1dolibarr/dolibarr (5) · directmailteam/direct-mail (1) · genix/cms (1)
- 7 CVE1 critCVSS 7.3PoC 1aubio (1) · mercurial (1) · mistune (1)
- 7 CVE1 critCVSS 6.7NEWPoC 1ос он «стрелец» (7)
- 6 CVECVSS 7.0NEWPoC 1enigmail (6)
- 6 CVECVSS 6.8fedora (6)
- 6 CVECVSS 7.4NEWgimp (6)
- 6 CVECVSS 7.4NEWgnu image manipulation program (6)
- 6 CVECVSS 7.4NEWPoC 2gnu binutils (6)
- 6 CVECVSS 7.4passport-wsfed-saml2 (2) · mqtt (1) · auth0-js (1)
- 6 CVE1 critCVSS 6.2KEV 1Nuclei 1PoC 1peoplesoft enterprise peopletools (2) · financial services market risk measurement and management (2) · jd edwards enterpriseone tools (2)
- 6 CVE5 critCVSS 9.6NEWptw-wms1 (4) · digizo shairdisk ptw-wms1 (2) · a-member for mt cloud (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | adobe | 95 | 17 | · | · | PoC 2 | acrobat (62) · acrobat dc (62) · acrobat reader (62) | — | |
| 2 | debian | 89 | 6 | · | 3 | Nuclei 3PoC 11 | debian linux (85) · most (1) · advanced package tool (1) | — | |
| 3 | 85 | 16 | · | · | PoC 2 | android (85) | — | ||
| 4 | ibm | 50 | · | · | · | security guardium (11) · sterling file gateway (6) · rational doors next generation (4) | — | ||
| 5 | canonical | 48 | 2 | · | · | PoC 11 | ubuntu linux (44) · ubuntu (7) | — | |
| 6 | foxitsoftware | 43 | · | · | · | foxit reader (43) | — | ||
| 7 | qualcomm, inc. | 43 | 12 | · | · | NEW | android for msm, firefox os for msm, qrd android (43) | — | |
| 8 | google inc. | 38 | 4 | · | · | NEWPoC 1 | android (38) | — | |
| 9 | ооо «русбитех-астра» | 38 | 4 | · | · | PoC 7 | astra linux special edition (27) · astra linux special edition для «эльбрус» (13) · astra linux common edition (10) | — | |
| 10 | apple | 34 | 1 | · | · | PoC 11 | iphone os (22) · mac os x (21) · tvos (17) | — | |
| 11 | microsoft | 34 | 1 | · | · | PoC 10 | chakracore (15) · edge (14) · internet explorer (13) | — | |
| 12 | microsoft corporation | 34 | 1 | · | · | NEWPoC 10 | chakracore, microsoft edge (9) · internet explorer (8) · chakracore, microsoft edge, internet explorer (3) | — | |
| 13 | сообщество свободного программного обеспечения | 34 | 4 | · | · | PoC 8 | debian gnu/linux (34) · linux (2) · libxcursor (1) | — | |
| 14 | linux | 26 | · | · | · | PoC 2 | linux kernel (26) | — | |
| 15 | redhat | 25 | 9 | · | · | PoC 5 | enterprise linux server (13) · enterprise linux desktop (13) · enterprise linux workstation (13) | — | |
| 16 | huawei | 17 | · | · | · | PoC 1 | te60 firmware (3) · te50 firmware (3) · te40 firmware (3) | — | |
| 17 | tgsoft | 17 | · | · | · | NEWPoC 17 | vir.it explorer (16) · vir.it explorer lite (1) | — | |
| 18 | huawei technologies co., ltd. | 16 | · | · | · | te40 (3) · te50 (3) · te60 (3) | — | ||
| 19 | imagemagick | 16 | 1 | · | · | PoC 3 | imagemagick (16) | — | |
| 20 | f5 | 14 | · | · | · | big-ip access policy manager (12) · big-ip advanced firewall manager (11) · big-ip analytics (10) | — | ||
| 21 | f5 networks, inc. | 14 | · | · | · | big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafe (5) · big-ip apm (3) · big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem, websafe (2) | — | ||
| 22 | ikarussecurity | 14 | · | · | · | NEWPoC 10 | anti.virus (14) | — | |
| 23 | sap | 13 | 1 | · | · | sap kernel (2) · business application software integrated solution (2) · sap hana extended application services (2) | — | ||
| 24 | synology | 13 | · | · | · | NEWPoC 1 | photo station (3) · diskstation manager (3) · diskstation manager (dsm) (2) | — | |
| 25 | nasm | 11 | · | · | · | NEWPoC 4 | netwide assembler (11) | — | |
| 26 | php multivendor ecommerce project | 11 | 4 | · | · | NEWPoC 11 | php multivendor ecommerce (11) | — | |
| 27 | cambium networks | 10 | · | · | · | NEWPoC 2 | epmp (5) · cnpilot (5) | — | |
| 28 | cambiumnetworks | 10 | · | · | · | NEWPoC 2 | cnpilot e410 firmware (5) · cnpilot e600 firmware (5) · cnpilot r190n firmware (5) | — | |
| 29 | gnu | 10 | · | · | · | PoC 2 | binutils (6) · glibc (2) · global (1) | — | |
| 30 | graphicsmagick | 10 | · | · | · | NEW | graphicsmagick (10) | — | |
| 31 | maven | 10 | 3 | · | · | PoC 1 | org.apache.qpid:qpid-broker (2) · org.bouncycastle:bcprov-jdk15on (1) · org.jenkins-ci.main:jenkins-core (1) | — | |
| 32 | muslim matrimonial script project | 9 | 1 | · | · | NEWPoC 6 | muslim matrimonial script (9) | — | |
| 33 | nuget | 9 | · | · | · | PoC 4 | microsoft.chakracore (9) | — | |
| 34 | piwigo | 9 | · | · | · | NEWPoC 3 | piwigo (9) | — | |
| 35 | apache | 8 | 3 | · | · | PoC 1 | qpid broker-j (2) · sling authentication service (1) · drill (1) | — | |
| 36 | apache software foundation | 8 | 3 | · | · | PoC 1 | apache qpid broker-j (2) · apache fineract (1) · apache flex blaze ds (1) | — | |
| 37 | iwcnetwork | 8 | 1 | · | · | NEWPoC 2 | biometric shift employee management system (7) · shift (1) | — | |
| 38 | qnap | 8 | 7 | · | · | qts (7) · qts login function (2) · qts password function (2) | — | ||
| 39 | ordermanagementscript | 7 | 1 | · | · | NEWPoC 6 | professional service script (7) | — | |
| 40 | packagist | 7 | 3 | · | · | PoC 1 | dolibarr/dolibarr (5) · directmailteam/direct-mail (1) · genix/cms (1) | — | |
| 41 | pypi | 7 | 1 | · | · | PoC 1 | aubio (1) · mercurial (1) · mistune (1) | — | |
| 42 | ао «концерн вниинс» | 7 | 1 | · | · | NEWPoC 1 | ос он «стрелец» (7) | — | |
| 43 | enigmail | 6 | · | · | · | NEWPoC 1 | enigmail (6) | — | |
| 44 | fedoraproject | 6 | · | · | · | fedora (6) | — | ||
| 45 | gimp | 6 | · | · | · | NEW | gimp (6) | — | |
| 46 | gnome foundation | 6 | · | · | · | NEW | gnu image manipulation program (6) | — | |
| 47 | gnu general public license | 6 | · | · | · | NEWPoC 2 | gnu binutils (6) | — | |
| 48 | npm | 6 | · | · | · | passport-wsfed-saml2 (2) · mqtt (1) · auth0-js (1) | — | ||
| 49 | oracle | 6 | 1 | 1 | 1 | KEV 1Nuclei 1PoC 1 | peoplesoft enterprise peopletools (2) · financial services market risk measurement and management (2) · jd edwards enterpriseone tools (2) | — | |
| 50 | princeton ltd. | 6 | 5 | · | · | NEW | ptw-wms1 (4) · digizo shairdisk ptw-wms1 (2) · a-member for mt cloud (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems300 CVE65 crit29 vendorsCVSS 7.8debian linux (85) · ubuntu linux (44) · debian gnu/linux (34)
- Consumer Software182 CVE40 crit24 vendorsCVSS 9.3foxit reader (86) · acrobat (62) · acrobat dc (62)
- Mobile Apps140 CVE27 crit7 vendorsCVSS 7.9android (96) · ireader (3) · rp200 firmware (3)
- Enterprise Software134 CVE31 crit29 vendorsCVSS 9.1security guardium (11) · sterling file gateway (6) · atlas ediscovery process management (4)
- OSS Libraries127 CVE22 crit50 vendorsCVSS 8.2imagemagick (19) · binutils (6) · gnu binutils (6)
- Web & CMS Plugins106 CVE43 crit48 vendorsCVSS 9.8piwigo (9) · wordpress (4) · blogotext (3)
- Security Products93 CVE13 crit1 KEV34 vendorsCVSS 8.2anti.virus (14) · antivirus (5) · scanmail (4)
- 6 crit2 KEV24 vendorsCVSS 9.8cnpilot e400 firmware (5) · cnpilot e410 firmware (5) · cnpilot e600 firmware (5)
- Communications34 CVE1 crit10 vendorsCVSS 8.8vir.it explorer (16) · asterisk (3) · certified asterisk (3)
- DevTools & CI27 CVE9 crit15 vendorsCVSS 9.8netwide assembler (11) · otter (2) · rsync (2)
- Cloud & SaaS27 CVE2 crit14 vendorsCVSS 8.7esxi (3) · application delivery controller firmware (2) · fusion (2)
- ICS / OT / IoT26 CVE299 crit1 KEV22 vendorsCVSS 9.8pr115-204-p-rs (3) · pr115-204-p-rs firmware (3) · en-1dbc firmware (1)
- Hardware Firmware25 CVE26 crit13 vendorsCVSS 9.8qts (7) · bbr-4hg (2) · bbr-4mg (2)
- Databases16 CVE3 crit1 KEV8 vendorsCVSS 7.4financial services market risk measurement and management (2) · jd edwards enterpriseone tools (2) · peoplesoft enterprise peopletools (2)
- AI / ML5 CVE3 crit3 vendorsCVSS 9.8jextn faq pro (1) · jextn question and answer (1) · jextn video gallery (1)
- Unclassified116 CVE59 crit75 vendorsCVSS 8.3muslim matrimonial script (9) · paid to read script (5) · techno - portfolio management panel (5)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 4 | 300 | 65 | · | 29 | 131 | 7.8 | debian linux (85) · ubuntu linux (44) · debian gnu/linux (34) |
| Consumer Software▸ 5 | 182 | 40 | · | 24 | 44 | 9.3 | foxit reader (86) · acrobat (62) · acrobat dc (62) |
| Mobile Apps▸ 3 | 140 | 27 | · | 7 | 47 | 7.9 | android (96) · ireader (3) · rp200 firmware (3) |
| Enterprise Software▸ 7 | 134 | 31 | · | 29 | 534 | 9.1 | security guardium (11) · sterling file gateway (6) · atlas ediscovery process management (4) |
| OSS Libraries▸ 9 | 127 | 22 | · | 50 | 75 | 8.2 | imagemagick (19) · binutils (6) · gnu binutils (6) |
| Web & CMS Plugins▸ 6 | 106 | 43 | · | 48 | 71 | 9.8 | piwigo (9) · wordpress (4) · blogotext (3) |
| Security Products▸ 5 | 93 | 13 | 1 | 34 | 60 | 8.2 | anti.virus (14) · antivirus (5) · scanmail (4) |
| Networking Infrastructure▸ 6 | 62 | 6 | 2 | 24 | 60 | 9.8 | cnpilot e400 firmware (5) · cnpilot e410 firmware (5) · cnpilot e600 firmware (5) |
| Communications▸ 4 | 34 | 1 | · | 10 | 12 | 8.8 | vir.it explorer (16) · asterisk (3) · certified asterisk (3) |
| DevTools & CI▸ 4 | 27 | 9 | · | 15 | 14 | 9.8 | netwide assembler (11) · otter (2) · rsync (2) |
| Cloud & SaaS▸ 4 | 27 | 2 | · | 14 | 22 | 8.7 | esxi (3) · application delivery controller firmware (2) · fusion (2) |
| ICS / OT / IoT▸ 6 | 26 | 299 | 1 | 22 | 315 | 9.8 | pr115-204-p-rs (3) · pr115-204-p-rs firmware (3) · en-1dbc firmware (1) |
| Hardware Firmware▸ 4 | 25 | 26 | · | 13 | 25 | 9.8 | qts (7) · bbr-4hg (2) · bbr-4mg (2) |
| Databases▸ 3 | 16 | 3 | 1 | 8 | 48 | 7.4 | financial services market risk measurement and management (2) · jd edwards enterpriseone tools (2) · peoplesoft enterprise peopletools (2) |
| AI / ML▸ 2 | 5 | 3 | · | 3 | 5 | 9.8 | jextn faq pro (1) · jextn question and answer (1) · jextn video gallery (1) |
| Unclassified | 116 | 59 | · | 75 | 83 | 8.3 | muslim matrimonial script (9) · paid to read script (5) · techno - portfolio management panel (5) |
Weakness × Sector
Which weaknesses hit which solution categories in December 2017
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds89SQL Injection79XSS200Information Exposure125Out-of-bounds Read20Improper Input Validation416Use After Free74Injection352CSRF787Out-of-bounds WriteOperating Systems78110263023261017Consumer Software6447244452648Web & CMS Plugins1744361110OSS Libraries2210572072145Enterprise Software41735186126Security Products1216811143Hardware Firmware31146610Networking Infrastructure21583141ICS / OT / IoT2232511Communications102192