No vendor recorded · 2017
No vendor recorded: 2017
9,618 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE whose record names no vendor, published in 2017. The named ones are the most at risk.
- check available
- 75
- likely to be exploited
- 468
Every one of the 9,618 is a mark on the map. Named now: 1 to 26, most at risk first.
- Joomla! <3.7.1 - SQL Injection
- Oracle GlassFish Server Open Source Edition 4.1 - Local File Inclusion
- Western Digital MyCloud NAS - Command Injection
- ZOHO WebNMS Framework <5.2 SP1 - Local File Inclusion
- PhpColl 2.5.1 Arbitrary File Upload
- Trend Micro Threat Discovery Appliance 2.6.1062r1 - Authentication Bypass
- Apache Solr <= 7.1 - XML Entity Injection
- MantisBT <=2.30 - Arbitrary Password Reset/Admin Access
- Ulterius Server < 1.9.5.0 - Directory Traversal
- XML-RPC Server - Remote Code Execution
- Laravel <5.5.21 - Information Disclosure
- Red Hat JBoss - Insecure Deserialization
- Zabbix - SQL Injection
- Yaws 1.91 - Local File Inclusion
- Kodi 17.1 - Local File Inclusion
- DotNetNuke 07.04.00 - Administration Authentication Bypass
- Netsweeper - Authentication Bypass
- BOA Web Server 0.94.14 - Arbitrary File Access
- DataTaker DT80 dEX 1.50.012 - Information Disclosure
- Intelbras WRN 150 - Authentication Bypass
- WordPress Delightful Downloads Jquery File Tree 2.1.5 - Local File Inclusion
- Joomla! Helpdesk Pro plugin <1.4.0 - Local File Inclusion
- Node.js <8.6.0 - Directory Traversal
- Dahua Security - Configuration File Disclosure
- D-Link DVG-N5402SP - Local File Inclusion
- WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.