diff --git a/tools/cve_cna_security_advisories/cna_count_per_cve.rb b/tools/cve_cna_security_advisories/cna_count_per_cve.rb new file mode 100755 index 0000000..c48ed6c --- /dev/null +++ b/tools/cve_cna_security_advisories/cna_count_per_cve.rb @@ -0,0 +1,17 @@ +#!/usr/bin/env ruby +# this will loop through each year and for each CVE-ID and count the assigners +require 'json' + +files = Dir['../cvelist/*/*/*.json'] +results = files.map do |fp| + f = File.read(fp); + json = JSON.parse(f); + assigner = json.dig('CVE_data_meta', 'ASSIGNER') + id = json.dig('CVE_data_meta', 'ID') + [id, assigner] +end + +sorted_and_grouped_cnas = results.map { |cve_id, cna_email| cna_email}.sort.group_by(&:itself) +cna_count_per_cves = sorted_and_grouped_cnas.map {|k,v| [k, v.count]}.sort_by{|a,b|b}.reverse + +cna_count_per_cves.map {|cna, count| puts "CNA: #{cna}, COUNT: #{count}"} diff --git a/tools/cve_cna_security_advisories/cna_count_per_cve.txt b/tools/cve_cna_security_advisories/cna_count_per_cve.txt new file mode 100644 index 0000000..ff51b27 --- /dev/null +++ b/tools/cve_cna_security_advisories/cna_count_per_cve.txt @@ -0,0 +1,193 @@ +CNA: cve@mitre.org, COUNT: 144427 +CNA: secalert@redhat.com, COUNT: 9077 +CNA: secure@microsoft.com, COUNT: 7405 +CNA: secalert_us@oracle.com, COUNT: 7012 +CNA: psirt@cisco.com, COUNT: 4889 +CNA: psirt@us.ibm.com, COUNT: 4687 +CNA: product-security@apple.com, COUNT: 4353 +CNA: psirt@adobe.com, COUNT: 4105 +CNA: security@android.com, COUNT: 3178 +CNA: cert@cert.org, COUNT: 2831 +CNA: ics-cert@hq.dhs.gov, COUNT: 2015 +CNA: vultures@jpcert.or.jp, COUNT: 1920 +CNA: product-security@qualcomm.com, COUNT: 1890 +CNA: security-advisories@github.com, COUNT: 1819 +CNA: security@google.com, COUNT: 1747 +CNA: security@mozilla.org, COUNT: 1411 +CNA: talos-cna@cisco.com, COUNT: 1243 +CNA: psirt@huawei.com, COUNT: 1168 +CNA: zdi-disclosures@trendmicro.com, COUNT: 1104 +CNA: support@hackerone.com, COUNT: 1040 +CNA: contact@wpscan.com, COUNT: 957 +CNA: secure@intel.com, COUNT: 945 +CNA: security@apache.org, COUNT: 843 +CNA: jenkinsci-cert@googlegroups.com, COUNT: 742 +CNA: chrome-cve-admin@google.com, COUNT: 729 +CNA: security-alert@hpe.com, COUNT: 728 +CNA: hp-security-alert@hp.com, COUNT: 721 +CNA: cna@sap.com, COUNT: 700 +CNA: security_alert@emc.com, COUNT: 668 +CNA: productcert@siemens.com, COUNT: 662 +CNA: security@debian.org, COUNT: 631 +CNA: PSIRT-CNA@flexerasoftware.com, COUNT: 488 +CNA: report@snyk.io, COUNT: 469 +CNA: f5sirt@f5.com, COUNT: 467 +CNA: sirt@juniper.net, COUNT: 461 +CNA: cybersecurity@schneider-electric.com, COUNT: 453 +CNA: security@microfocus.com, COUNT: 404 +CNA: security@huntr.dev, COUNT: 379 +CNA: psirt@nvidia.com, COUNT: 367 +CNA: vulnreport@tenable.com, COUNT: 355 +CNA: secure@dell.com, COUNT: 340 +CNA: security@atlassian.com, COUNT: 326 +CNA: cve@gitlab.com, COUNT: 316 +CNA: security@ubuntu.com, COUNT: 294 +CNA: security@trendmicro.com, COUNT: 293 +CNA: security@vmware.com, COUNT: 285 +CNA: psirt@fortinet.com, COUNT: 283 +CNA: secure@symantec.com, COUNT: 271 +CNA: cve@cert.org.tw, COUNT: 260 +CNA: psirt@mcafee.com, COUNT: 245 +CNA: mobile.security@samsung.com, COUNT: 242 +CNA: psirt@lenovo.com, COUNT: 197 +CNA: security@wordfence.com, COUNT: 178 +CNA: psirt@paloaltonetworks.com, COUNT: 160 +CNA: security@synology.com, COUNT: 158 +CNA: cve-assign@distributedweaknessfiling.org, COUNT: 157 +CNA: security@qnap.com, COUNT: 150 +CNA: vuln@krcert.or.kr, COUNT: 135 +CNA: vulnerability@kaspersky.com, COUNT: 126 +CNA: secteam@freebsd.org, COUNT: 123 +CNA: security@tibco.com, COUNT: 120 +CNA: cve@rapid7.com, COUNT: 119 +CNA: cve-assign@fb.com, COUNT: 116 +CNA: info@cert.vde.com, COUNT: 115 +CNA: vulnerabilitylab@whitesourcesoftware.com, COUNT: 114 +CNA: psirt@zte.com.cn, COUNT: 94 +CNA: security@eclipse.org, COUNT: 93 +CNA: security@elastic.co, COUNT: 91 +CNA: security@suse.com, COUNT: 87 +CNA: security-alert@netapp.com, COUNT: 86 +CNA: cve@checkpoint.com, COUNT: 71 +CNA: cybersecurity@ch.abb.com, COUNT: 70 +CNA: PSIRT@sonicwall.com, COUNT: 68 +CNA: sirt@brocade.com, COUNT: 67 +CNA: psirt@amd.com, COUNT: 66 +CNA: larry0@me.com, COUNT: 66 +CNA: psirt@hcl.com, COUNT: 63 +CNA: vuln@ca.com, COUNT: 60 +CNA: security@pivotal.io, COUNT: 58 +CNA: security-officer@isc.org, COUNT: 54 +CNA: vulnerabilities@zephyrproject.org, COUNT: 45 +CNA: security@puppet.com, COUNT: 45 +CNA: psirt@bosch.com, COUNT: 45 +CNA: cve-requests@bitdefender.com, COUNT: 45 +CNA: audit@patchstack.com, COUNT: 45 +CNA: security@drupal.org, COUNT: 44 +CNA: psirt@autodesk.com, COUNT: 44 +CNA: security@kubernetes.io, COUNT: 41 +CNA: patrick@puiterwijk.org, COUNT: 41 +CNA: security@php.net, COUNT: 37 +CNA: cna@mongodb.com, COUNT: 37 +CNA: security@mediatek.com, COUNT: 35 +CNA: secure@blackberry.com, COUNT: 35 +CNA: openssl-security@openssl.org, COUNT: 35 +CNA: security@otrs.com, COUNT: 34 +CNA: psirt@solarwinds.com, COUNT: 34 +CNA: securityalerts@avaya.com, COUNT: 32 +CNA: security@xen.org, COUNT: 32 +CNA: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp, COUNT: 32 +CNA: security@joomla.org, COUNT: 31 +CNA: cve@aliasrobotics.com, COUNT: 29 +CNA: security@jfrog.com, COUNT: 24 +CNA: productsecurity@jci.com, COUNT: 24 +CNA: cve-coordination@incibe.es, COUNT: 24 +CNA: security@zoom.us, COUNT: 22 +CNA: psirt@esri.com, COUNT: 22 +CNA: disclosures@gallagher.com, COUNT: 22 +CNA: cve-notifications-us@f-secure.com, COUNT: 22 +CNA: browser-security@yandex-team.ru, COUNT: 21 +CNA: security@vaadin.com, COUNT: 20 +CNA: security@teradici.com, COUNT: 20 +CNA: security@xiaomi.com, COUNT: 19 +CNA: vulnerability@ncsc.ch, COUNT: 18 +CNA: cybersecurity@dahuatech.com, COUNT: 18 +CNA: cve-request@iojs.org, COUNT: 18 +CNA: security@odoo.com, COUNT: 17 +CNA: security@documentfoundation.org, COUNT: 17 +CNA: product-cna@github.com, COUNT: 16 +CNA: VulnerabilityReporting@secomea.com, COUNT: 16 +CNA: cna@cyber.gov.il, COUNT: 15 +CNA: security@acronis.com, COUNT: 14 +CNA: security@zyxel.com.tw, COUNT: 13 +CNA: responsibledisclosure@mattermost.com, COUNT: 13 +CNA: CybersecurityCOE@eaton.com, COUNT: 13 +CNA: psirt@forcepoint.com, COUNT: 12 +CNA: psirt@arista.com, COUNT: 12 +CNA: vuln@vdoo.com, COUNT: 11 +CNA: security@oppo.com, COUNT: 11 +CNA: security-info@sgi.com, COUNT: 11 +CNA: psirt-info@cyber.jp.nec.com, COUNT: 11 +CNA: cve@navercorp.com, COUNT: 11 +CNA: security@salesforce.com, COUNT: 10 +CNA: security@openvpn.net, COUNT: 10 +CNA: security@octopus.com, COUNT: 10 +CNA: cybersecurity@hitachienergy.com, COUNT: 10 +CNA: security@search-guard.com, COUNT: 9 +CNA: security@craftersoftware.com, COUNT: 9 +CNA: security-report@netflix.com, COUNT: 9 +CNA: security-alert@sophos.com, COUNT: 9 +CNA: cna@cloudflare.com, COUNT: 9 +CNA: sirt@silver-peak.com, COUNT: 8 +CNA: psirt@sick.de, COUNT: 8 +CNA: help@fluidattacks.com, COUNT: 8 +CNA: psirt@wdc.com, COUNT: 7 +CNA: disclosure@synopsys.com, COUNT: 7 +CNA: cve@usom.gov.tr, COUNT: 7 +CNA: security@mautic.org, COUNT: 6 +CNA: security@duo.com, COUNT: 6 +CNA: security@360.cn, COUNT: 6 +CNA: jordan@liggitt.net, COUNT: 6 +CNA: infosec@edk2.groups.io, COUNT: 6 +CNA: dl_cve@linecorp.com, COUNT: 6 +CNA: disclose@cybersecurityworks.com, COUNT: 6 +CNA: cert@airbus.com, COUNT: 6 +CNA: sep@nlnetlabs.nl, COUNT: 5 +CNA: responsible-disclosure@pingidentity.com, COUNT: 5 +CNA: psirt@mirantis.com, COUNT: 5 +CNA: product-security@axis.com, COUNT: 5 +CNA: josh@bress.net, COUNT: 5 +CNA: info@appcheck-ng.com, COUNT: 5 +CNA: cve_disclosure@tech.gov.sg, COUNT: 5 +CNA: security@zabbix.com, COUNT: 4 +CNA: security@tcpdump.org, COUNT: 4 +CNA: security@opera.com, COUNT: 4 +CNA: security@fidelissecurity.com, COUNT: 4 +CNA: psirt@thalesgroup.com, COUNT: 4 +CNA: cve@zscaler.com, COUNT: 4 +CNA: security@vivo.com, COUNT: 3 +CNA: security@pega.com, COUNT: 3 +CNA: security@m-files.com, COUNT: 3 +CNA: security@eset.com, COUNT: 3 +CNA: securities@openeuler.org, COUNT: 3 +CNA: prodsec@nozominetworks.com, COUNT: 3 +CNA: hsrc@hikvision.com, COUNT: 3 +CNA: cybersecurity@hitachi-powergrids.com, COUNT: 3 +CNA: cve@forums.swift.org, COUNT: 3 +CNA: security@snowsoftware.com, COUNT: 2 +CNA: security@netgear.com, COUNT: 2 +CNA: product.security@lge.com, COUNT: 2 +CNA: iletisim@usom.gov.tr, COUNT: 2 +CNA: cybersecurity@bd.com, COUNT: 2 +CNA: SecurityResponse@netmotionsoftware.com, COUNT: 2 +CNA: vulnerability@cspcert.ph, COUNT: 1 +CNA: vdisclose@cert-in.org.in, COUNT: 1 +CNA: security@replicated.com, COUNT: 1 +CNA: security@devolutions.net, COUNT: 1 +CNA: security@deepsurface.com, COUNT: 1 +CNA: secure@ea.com, COUNT: 1 +CNA: psirt@tigera.io, COUNT: 1 +CNA: psirt@okta.com, COUNT: 1 +CNA: psirt@forgerock.com, COUNT: 1 +CNA: csirt@divd.nl, COUNT: 1 +CNA: Alibaba-CNA@list.alibaba-inc.com, COUNT: 1