Interactive Network Analysis of Cybersecurity Vulnerabilities
Rolling 365-Day Window • Only includes CVEs published in the last year
Loading stats...
Interactive force-directed graph showing all CNAs and CWEs connected by their associations. Explore the full interconnected ecosystem.
Features:
Track CVE publications over time with monthly breakdowns. Compare activity across top CNAs with interactive timelines.
Features:
Scatter plot of all CVEs by publication date and CVSS score. Identify critical vulnerability windows and severity trends over time.
Features:
Analyze vulnerability severity ratings across all CVEs. See which CNAs report the most critical vulnerabilities.
Features:
Top CNAs vs CWEs in a color-coded matrix. Instantly spot patterns and hotspots in vulnerability distributions.
Features:
Visualize the flow from top CNAs to CWEs with thickness representing frequency. Clear left-to-right flow for pattern recognition.
Features:
Two-column layout showing top 50 CNAs on left, their 603 CWEs on right. Clean separation for easy pattern recognition.
Features:
See which weaknesses commonly appear together in the same CVE. Reveals patterns in vulnerability combinations.
Features:
Track which CWE types are increasing or decreasing over time. Sparklines show month-over-month trends with percentage changes.
Features:
Organized tree structure grouping CWEs by category. Perfect for understanding weakness classifications.
Features:
Top 12 CWEs displayed as star centers with their CNAs radiating outward. Shows which organizations focus on which weaknesses.
Features:
Top 40 CWEs arranged in a circle with interconnections. Symmetric view highlighting central weaknesses.
Features:
Statistical analysis showing CVSS score distributions across different CWE types. Box plots reveal median severity and outliers for each weakness.
Features:
CNAs connected by shared CWE focus areas. Reveals collaboration patterns and common research interests.
Features:
MITRE Corporation at center with all directly connected CNAs. Shows immediate collaboration sphere.
Features:
Bipartite graph linking top vendors to their most common weakness types. Identify systemic development issues.
Features:
Each CNA displayed as an isolated mini-network with its own CWEs. Perfect for analyzing individual CNA vulnerability profiles.
Features:
Parsed from the official CVE List V5 repository. Analyzing CVEs published in the last 365 days with CNA assignments and CWE mappings from both primary sources and authorized data publishers (ADPs).
Automatically rebuilds every 3 hours via GitHub Actions, ensuring you always see the latest vulnerability landscape and emerging patterns from recent CVEs.
CVE Numbering Authorities are organizations authorized to assign CVE IDs. Examples include MITRE, Oracle, Microsoft, and hundreds of others.
Common Weakness Enumerations categorize software vulnerabilities (e.g., CWE-79: Cross-Site Scripting, CWE-89: SQL Injection).
17 interactive network graphs and analytical visualizations covering CNA-CWE relationships, co-occurrence patterns, vendor profiles, CVSS severity analysis, temporal trends, trending analysis, and more. All visualizations support zoom, pan, and click-to-highlight interactions.
Built using NetworkX and D3.js force simulations. Graph layouts include force-directed, bipartite, hierarchical tree, circular, star, and ego network arrangements optimized for pattern discovery.
365-day rolling window keeps visualizations focused on current threats. As new CVEs are published, older ones roll off, maintaining a consistent view of the active vulnerability landscape.
Fully open source under MIT License. Fork, modify, and contribute on GitHub. All build scripts and data processing pipelines are available for transparency and reproducibility.