In each data set, vulnerabilities were not removed if they were
marked as ‘disputed.’ Many disputes are incorrect or unresolved.
For 2006 data, 95% of all of CVE's primary data sources were
covered, in order to offer the most complete data feasible for this