What is the TR-CERT CNA?
TR-CERT is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 569 CVE records since 2021.
How many CVEs has TR-CERT published?
TR-CERT has published 569 CVE records, including 360 in the last two years.
What is TR-CERT's CVE data quality grade?
RadicalNotion.AI grades TR-CERT's CVE data quality as A, with an overall completeness score of 100%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (99.8%) information.
What products does TR-CERT publish CVEs for?
TR-CERT most frequently publishes CVEs for Library Automation System, E-Commerce Software, Smartpower Web, SoliClub, cbot core.
Which vendors does TR-CERT cover?
TR-CERT publishes CVEs across 382 distinct vendors, most often Akinsoft, utarit, Yordam, gruparge, Group Arge Energy and Control Systems.
Is TR-CERT actively publishing CVEs?
TR-CERT is currently active, based on 360 CVEs in the last two years.
What is the average severity of TR-CERT's CVEs?
The average CVSS base score across TR-CERT's scored CVEs is 7.9.
How many critical CVEs has TR-CERT published?
TR-CERT has published 237 critical-severity CVEs and 199 high-severity CVEs.
Are any of TR-CERT's CVEs in CISA's Known Exploited Vulnerabilities catalog?
No. None of TR-CERT's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
What are the most common weakness types in TR-CERT's CVEs?
TR-CERT's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-307 (Improper Restriction of Excessive Authentication Attempts).
How does TR-CERT rank among CNAs?
By total CVE volume, TR-CERT ranks #52 of 370 CNAs, and it reports more complete CVE records than 60% of all CNAs.