dwf is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 157 CVE records since 2019.

How many CVEs has dwf published?

dwf has published 157 CVE records, including 0 in the last two years.

What is dwf's CVE data quality grade?

RadicalNotion.AI grades dwf's CVE data quality as F, with an overall completeness score of 53%. This reflects how consistently its CVE records include vendor (98.7%), product (100%), CVSS (1.9%), and CWE (11.5%) information.

What products does dwf publish CVEs for?

dwf most frequently publishes CVEs for debian linux, fedora, optee_os, OP-TEE, ubuntu linux.

Which vendors does dwf cover?

dwf publishes CVEs across 115 distinct vendors, most often debian, fedoraproject, TrustedFirmware, Linaro/OP-TEE, OP-TEE.

Is dwf actively publishing CVEs?

dwf is currently inactive (has not published recently), based on 0 CVEs in the last two years.

What is the average severity of dwf's CVEs?

The average CVSS base score across dwf's scored CVEs is 7.3.

How many critical CVEs has dwf published?

dwf has published 43 critical-severity CVEs and 43 high-severity CVEs.

What are the most common weakness types in dwf's CVEs?

dwf's CVEs most often map to these CWE weakness types: CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-457 (Use of Uninitialized Variable), CWE-476 (NULL Pointer Dereference).

How does dwf rank among CNAs?

By total CVE volume, dwf ranks #98 of 370 CNAs, and it reports more complete CVE records than 8% of all CNAs.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Grade F

Inactive

dwf

Name: dwf CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE Numbering Authority

Latest CVE published October 15, 2019

157

CVEs published

Total assigned

0.6

Years active

2019–2019

7.3

Avg CVSS

Across scored CVEs

0

Recent CVEs

Last 2 years

Overview

dwf is a CVE Numbering Authority that has published 157 CVE records since 2019. It is currently classified as inactive, with 0 CVEs published in the last two years. Its CVE data quality is graded F (53% overall completeness).

Among the 370 CNAs tracked here, dwf ranks #98 by CVE volume and reports more complete records than 8% of all CNAs.

Data quality report card

How complete and consistent dwf's CVE records are, scored across vendor, product, CVSS, and CWE coverage.

A CVE record only requires a description to be published. “Completeness” measures how often dwf also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.

Report card grade

F

53%

Overall score

Overall completeness53%

Vendor completeness98.7%

Product completeness100%

CVSS completeness1.9%

CWE completeness11.5%

100%

Update rate

Records revised after publishing

115

Vendor diversity

Distinct vendors covered

286 chars

Avg description length

Per CVE record

2019-03-27

First CVE date

Earliest assignment

2019-10-15

Latest CVE date

Most recent assignment

7.3

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Severity and exploitation

How the CVSS severity of dwf's published CVEs breaks down, and how many are known to be exploited in the wild.

Critical43

High43

Medium68

Low3

In CISA’s Known Exploited Vulnerabilities catalog

0

None of dwf's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Common weakness types

The CWE weakness categories dwf most often assigns to its CVEs. Follow any weakness to its full explanation.

Top vendors

The vendors dwf publishes the most CVEs for.

debian13 CVEs
fedoraproject12 CVEs
TrustedFirmware7 CVEs
Linaro/OP-TEE7 CVEs
OP-TEE7 CVEs
Jsish7 CVEs
canonical7 CVEs
GNU6 CVEs

Top products

The products dwf publishes the most CVEs for.

debian linux13 CVEs
fedora12 CVEs
optee_os7 CVEs
OP-TEE7 CVEs
ubuntu linux7 CVEs
Jsish7 CVEs
Jsi6 CVEs
open network operating system5 CVEs

Latest CVEs

The most recent CVEs assigned by dwf.

CVE-2017-1002201
Medium · CVSS 6.1
EPSS 1.5%2019-10-15
CVE-2019-1020002
High · CVSS 7.5
EPSS 1.5%2019-07-29
CVE-2019-1020004
High · CVSS 7.5
EPSS 1.2%2019-07-29
CVE-2019-1020007
Medium · CVSS 5.4
EPSS 0.6%2019-07-29
CVE-2019-1020009
High · CVSS 7.5
EPSS 1.4%2019-07-29
CVE-2019-1020008
Medium · CVSS 6.1
EPSS 0.8%2019-07-29
CVE-2019-1020006
Medium · CVSS 6.1
EPSS 0.9%2019-07-29
CVE-2019-1020005
Medium · CVSS 5.4
EPSS 0.7%2019-07-29
CVE-2019-1020003
Medium · CVSS 5.4
EPSS 0.7%2019-07-29
CVE-2019-1020019
Medium · CVSS 6.1
EPSS 0.9%2019-07-29
CVE-2019-1020018
High · CVSS 7.3
EPSS 1.0%2019-07-29
CVE-2019-1020017
Medium · CVSS 5.3
EPSS 0.9%2019-07-29

Track new dwf CVEs as they are published and get AI-written analysis and remediation guidance.

Monitor dwf CVEs

Other CNAs

Compare data quality across other CVE Numbering Authorities.

mitreGrade F · 112,208 CVEs PatchstackGrade A · 14,729 CVEs VulDBGrade A · 12,140 CVEs microsoftGrade F · 11,701 CVEs redhatGrade F · 10,745 CVEs GitHub_MGrade A · 10,605 CVEs LinuxGrade F · 10,294 CVEs WordfenceGrade A · 8,652 CVEs

Browse all CNAs

Frequently asked questions

Common questions about the dwf CNA.

What is the dwf CNA?: dwf is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 157 CVE records since 2019.
How many CVEs has dwf published?: dwf has published 157 CVE records, including 0 in the last two years.
What is dwf's CVE data quality grade?: RadicalNotion.AI grades dwf's CVE data quality as F, with an overall completeness score of 53%. This reflects how consistently its CVE records include vendor (98.7%), product (100%), CVSS (1.9%), and CWE (11.5%) information.
What products does dwf publish CVEs for?: dwf most frequently publishes CVEs for debian linux, fedora, optee_os, OP-TEE, ubuntu linux.
Which vendors does dwf cover?: dwf publishes CVEs across 115 distinct vendors, most often debian, fedoraproject, TrustedFirmware, Linaro/OP-TEE, OP-TEE.
Is dwf actively publishing CVEs?: dwf is currently inactive (has not published recently), based on 0 CVEs in the last two years.
What is the average severity of dwf's CVEs?: The average CVSS base score across dwf's scored CVEs is 7.3.
How many critical CVEs has dwf published?: dwf has published 43 critical-severity CVEs and 43 high-severity CVEs.
Are any of dwf's CVEs in CISA's Known Exploited Vulnerabilities catalog?: No. None of dwf's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
What are the most common weakness types in dwf's CVEs?: dwf's CVEs most often map to these CWE weakness types: CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-457 (Use of Uninitialized Variable), CWE-476 (NULL Pointer Dereference).
How does dwf rank among CNAs?: By total CVE volume, dwf ranks #98 of 370 CNAs, and it reports more complete CVE records than 8% of all CNAs.

References

CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.

Track dwf CVEs

Monitor new vulnerabilities as this CNA publishes them, with AI-written analysis and remediation guidance.

Start free See pricing