full-disclosure - Re: Are the number of vulnerabilities going up? is Symantec counting wrong?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <200302062037.PAA16503@linus.mitre.org>
From: coley at linus.mitre.org (Steven M. Christey)
Subject: Re: Are the number of vulnerabilities going up? is Symantec counting wrong?

As another example of the impact of editorial decisions on database
content, note that CERT's statistics include things like individual
bugs that are specific to a particular web service (e.g. an online
bank, news site, or free email provider), whereas these types of
issues are generally not covered by other databases.  The CVE
Editorial Board agreed to omit these types of bugs from CVE, as
documented in http://cve.mitre.org/board/archives/2000-03/msg00007.html

- Steve