Comment by vasco

12 hours ago

They have nothing to do with the number is my point. They don't uncover anything.

"They"? MITRE runs cve.org under contract by CISA.

  • The name is amusingly often misunderstood in Germany as a French government agency (this is anecdata, I‘ve just heard that several times in the last few months). It just sounds French, I guess.

  • But they don’t research, validate, or PoC anything. It’s a just a centralized place to issue unique ids and eventually publish a bunch of text.