- What is the certcc CNA?
- certcc is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 2,972 CVE records since 2005.
- How many CVEs has certcc published?
- certcc has published 2,972 CVE records, including 85 in the last two years.
- What is certcc's CVE data quality grade?
- RadicalNotion.AI grades certcc's CVE data quality as F, with an overall completeness score of 10.6%. This reflects how consistently its CVE records include vendor (14.5%), product (16.9%), CVSS (1.9%), and CWE (9.2%) information.
- What products does certcc publish CVEs for?
- certcc most frequently publishes CVEs for debian linux, ubuntu linux, fedora, leap, enterprise linux server.
- Which vendors does certcc cover?
- certcc publishes CVEs across 232 distinct vendors, most often debian, canonical, Microsoft Corporation, magzter, Red Hat.
- Is certcc actively publishing CVEs?
- certcc is currently active, based on 85 CVEs in the last two years.
- What is the average severity of certcc's CVEs?
- The average CVSS base score across certcc's scored CVEs is 7.4.
- How many critical CVEs has certcc published?
- certcc has published 464 critical-severity CVEs and 594 high-severity CVEs.
- Are any of certcc's CVEs in CISA's Known Exploited Vulnerabilities catalog?
- Yes. 7 of certcc's CVEs are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, meaning they are confirmed to be exploited in the wild.
- What are the most common weakness types in certcc's CVEs?
- certcc's CVEs most often map to these CWE weakness types: CWE-310, CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-20 (Improper Input Validation).
- How does certcc rank among CNAs?
- By total CVE volume, certcc ranks #20 of 370 CNAs, and it reports more complete CVE records than 1% of all CNAs.
