Publisher name matching
against the official CNA registryPublisher names in CVE records do not always match the official registry exactly. This is the count of how many line up, and how.
How names match
Source agreement two pipelines, two record sets
Yearly counts come from the NVD mirror. Publisher attribution comes from the CVE Program's
own cvelistV5 repository. They are different record sets, so a year can carry two slightly
different totals — measured below rather than hidden.
Names that did not match exactly
Matched another way
No match found