Providing feedback to CVE Numbering Authorities to improve the quality of entries. Pick a report below:
Ranked leaderboard of CVE Numbering Authorities (CNAs) by content-quality warning rates — clean entries, grammar issues, missing products, contradictions, bundled vulnerabilities, and CVSS mismatches.
Open report →Ranked leaderboard of the CVE tooling / clients (x_generator.engine) that produce CVE records, scored by the same content-quality warnings.
Open report →The clients used to publish CVE records since 2024, ranked by number of CVEs published — Vulnogram, cvelib, bippy, and per-CNA custom clients.
Open report →Most credited researchers and organisations in CVE records published this year, by credit type.
Open report →How each CNA fills containers.cna.source.discovery in CVEs published this year — counts of INTERNAL, EXTERNAL, USER and UNKNOWN per CNA.
Open report →CVSS score discrepancies — cases where the stored base score differs from the value recalculated from the vectorString across CVSS 2.0, 3.x, and 4.0.
Open report →One RSS feed per CNA — the most recent CVEs with CVSS severity and badges for known-exploited, network, cloud, unsupported and disputed vulnerabilities.
Open report →