Others have pointed out some errors with the methods employed in this report. Still, who else is collecting this kind and fidelity of data? I found the trends

Others have pointed out some errors with the methods employed in this report. Still, who else is collecting this kind and fidelity of data? I found the trends very informative. First that we're still a long long way from having hardened base operating systems, but also that the trend is positive and slowly moving in the right direction. Even just getting a breakdown of CVEs is interesting (though I would have liked better granularity than "bypass something") for both trends and to understand just how many DoS issues come up per year versus say code injections or overflows.