2017 is almost done and it’s my last diary for this year. I made a quick review of my CVE database (I’m using a local cve-search[1] instance). The first interesting number is the amount of CVE’s created this year. Do you remember when the format was CVE-YYYY-XXXX? The CVE ID format[2] changed in 2014 to break the limit of 9999 entries per year. This was indeed a requirement when you see the number of entries for the last five years:
Article Link: https://isc.sans.edu/diary/rss/23173