Glonce

CVE Tracker charts CVE counts from the CVEProject cvelistV5 data

toolsThe Glonce editorsHacker News🔥54Glonce rating54Impact35Novelty40Relevance55Surprise40Players10Credibility40

CVE Tracker (cve.0xosprey.com) is an interactive web page for charting counts of CVEs, the public identifiers for known security vulnerabilities. The page states that its data comes from the CVEProject/cvelistV5 repository.

The controls are the substance of what the page shows. Resolution can be set to Day, Week, Month or Year. The range can be 30D, 1Y, 5Y, 10Y or All. The view is either Count or Cumulative; counts follow the selected period and date, and Cumulative shows the running total. A Models selector offers three date models: Dates, Published and Reserved. There is also a Log Scale option, and the chart can be exported with Download CSV or Copy PNG. A Raw data link sits below the chart, and the page also links to Home, CVEs and Security.

By default the chart covers the last 90 days at daily resolution. The page also describes a projection: it compares the current pace with the median day-of-month fraction over the last 12 months.

A Mode switch carries two labels, NSA 0-Days and Shigure. The page does not explain what either mode does. In the captured version the chart area read "Loading…", so no actual CVE counts or totals were visible, and no author, maintainer or organisation is named.

Key facts

  • CVE Tracker is a web dashboard for charting CVE counts; its stated data source is the CVEProject/cvelistV5 repository.
  • Controls include Day/Week/Month/Year resolution, ranges from 30D to All, Count or Cumulative view, and a Log Scale option.
  • Three date models are offered: Dates, Published and Reserved; the default chart is the last 90 days, daily.
  • The projection compares the current pace with the median day-of-month fraction over the last 12 months.
  • Charts can be exported via Download CSV or Copy PNG, and a Mode switch lists NSA 0-Days and Shigure without explanation.

Why it matters

CVE counts are a common measure of how many software vulnerabilities are being disclosed, and this page turns the CVEProject/cvelistV5 data into a chart that can be viewed at several resolutions and ranges. The Published and Reserved date models let a reader look at the same counts by different dates. The page states no findings of its own, so its value lies in the tool rather than in any claim about CVE volume.

Who it affects

The page is aimed at anyone who wants to look at CVE volume over time: security teams, researchers and curious readers. The page itself does not name an audience, so this follows from what the controls offer: ranges from 30 days to all time, and export to CSV or PNG.

How to use it

Open cve.0xosprey.com and pick a resolution (Day, Week, Month or Year) and a range (30D, 1Y, 5Y, 10Y or All). Choose Count for per-period numbers or Cumulative for the running total, and pick a date model: Dates, Published or Reserved. Turn on Log Scale if needed. Download CSV saves the data and Copy PNG copies the chart image. A Raw data link is also on the page. The default view is the last 90 days at daily resolution.

How solid is it

The page states its data source as CVEProject/cvelistV5 and gives a one-line projection formula: pace versus the median day-of-month fraction over the last 12 months. It does not explain the formula further. The captured page showed "Loading…" in place of the chart, so the numbers themselves could not be checked.

Risks and caveats

No author, maintainer or organisation is named on the page. No launch date, update frequency or data-freshness information is given. The NSA 0-Days and Shigure modes are listed but not explained, so what they show is unknown from the page. The projection is described by one line only, so treat it as an indication of pace rather than a forecast with stated accuracy.