Patch release time
Vulnerability is patched by the vendor
Vulnerability is published by CERT only
First disclosed by CERT
First disclosed by SecurityFocus, and published by CERT as well
First disclosed by parties other than CERT or SecurityFocus, and published by CE
First disclosed by SecurityFocus, not published by CERT
published by CERT
published by websites other than CERT
Vulnerability faces disclosure
Small size vendor
Log value of the employee size
Vendor is public company
Software is open source product
Cert vulnerability severity score
NVD vulnerability severity score
Time between vul publish and vendor notification
Vendor employee size
Vendor notification date
Patch release date
Vulnerability publish date
CVE ID
CERT vulnerability ID
SecurityFocus vulnerability ID
Vendor Name
Vulnerability publish year
Published in 2000
Published in 2001
Published in 2002
Published in 2003
Published by CERT only
Published by SecurityFocus only
Instant disclosure
Disclosed by CERT
Disclosed by SecurityFocus
Disclosed by others
group(vendor)
group(cve)
Operating systems
server application
Log value of the NVD vulnerability severity score