Skip to content
BackEsc
Sign in

No weakness recorded · 2017

No weakness recorded: 2017

1,663 CVEs · 19 exploited

Every dot is a CVE whose record names no weakness (CWE), published in 2017. The named ones are the most at risk.

exploited in the wild
19
check available
1
likely to be exploited
66

Every one of the 1,663 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0147Microsoft Corporation · CVSS 7.5 · 100% likely

    Microsoft

  2. Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Window…CVE-2017-0199Microsoft Corporation · CVSS 7.8 · 99% likely

    MicrosoftAPT37APT41

  3. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0144Microsoft Corporation · CVSS 8.8 · 99% likelycovered by CyberSIXT

    Microsoft

  4. Embedthis GoAhead <3.6.5 - Remote Code ExecutionCVE-2017-17562Embedthis · CVSS 8.1 · 97% likely

    EmbedThis

  5. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0143Microsoft Corporation · CVSS 8.8 · 93% likely

    Microsoft

  6. Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListene…CVE-2016-8735Apache Software Foundation · CVSS 9.8 · 90% likely

    Apache

  7. Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607,…CVE-2017-8464Microsoft Corporation · CVSS 8.8 · 90% likely

    Microsoft

  8. Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CV…CVE-2017-8570Microsoft Corporation · CVSS 7.8 · 90% likely

    MicrosoftCobalt GroupPatchwork

  9. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0146Microsoft Corporation · CVSS 8.8 · 90% likely

    Microsoft

  10. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0145Microsoft Corporation · CVSS 8.8 · 90% likely

    Microsoft

  11. NETGEAR Routers - Authentication BypassCVE-2017-5521NETGEAR · CVSS 8.1 · 89% likely

    NETGEAR

  12. Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511…CVE-2017-0213Microsoft Corporation · CVSS 7.3 · 84% likely

    MicrosoftAPT33Threat Group-3390

  13. Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office R…CVE-2017-0262Microsoft Corporation · CVSS 7.8 · 81% likely

    MicrosoftAPT28

  14. Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the former name…CVE-2017-6316Citrix · CVSS 9.8 · 73% likely

    Citrix (NetScaler)

  15. Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disc…CVE-2017-0059Microsoft Corporation · CVSS 4.3 · 62% likely

    Microsoft

  16. An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one…CVE-2017-0210Microsoft Corporation · CVSS 8.8 · 22% likely

    Microsoft

  17. The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1…CVE-2017-0005Microsoft Corporation · CVSS 7.8 · 11% likely

    MicrosoftAPT31

  18. The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1…CVE-2017-0001Microsoft Corporation · CVSS 7.8 · 3.1% likely

    Microsoft

  19. A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of a…CVE-2017-6663Cisco · CVSS 6.5 · 2.1% likely

    Cisco

  20. Oracle Content Server - Cross-Site ScriptingCVE-2017-10075Oracle Corporation · 18% likely

    Oracle

  21. Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.…CVE-2017-3248Oracle · 97% likely

    Oracle

  22. A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary pro…CVE-2017-976986% likely
  23. The register_routes function in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in the REST API in WordPress 4.7.x before 4.7.2 does not require an integer ident…CVE-2017-100100085% likely
  24. IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servers. IBM X-Force ID: 120390.CVE-2017-1092IBM Corporation · 76% likely

    IBM

  25. The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remote…CVE-2017-6326Symantec Corporation · 73% likely

    Symantec Corporation

  26. Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue.CVE-2017-941766% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in