By Kurt Seifried (kurt@seifried.org)

The MITRE Corporation has released a draft report on “Vulnerability Type Distributions in CVE” which is a fancy way of saying it’s a large table of the types of vulnerabilities (buffer overflows, cross site scripting, permissions issues, etc.), with several pages of explanations as to what it all means. The report is available at:

http://cwe.mitre.org/documents/vuln-trends.html