Ok, thanks for mentioning it. I'm getting the impression that almost all DWF entries in the end get a CVE number? Looking on this page: https://github.com/dist

Ok, thanks for mentioning it. I'm getting the impression that almost all DWF entries in the end get a CVE number? Looking on this page: https://github.com/distributedweaknessfiling/DWF-Database/blob/master/DWF-Database-2016.csv https://github.com/distributedweaknessfiling/DWF-Database/bl... , I don't see any entry without a CVE number (except for some at the top, but they're in some 'REPLACED' status). I'll probably skip this source, at least initially — seems a bit much work, to somehow analyze the DWF files, in order to find only a small (?) number of additional vulns.