fields filled out.) CVE includes all types of software, whether from a
major vendor or an individual hobbyist programmer, as long as the
associated vulnerability has been reported by the developer or
posted by a researcher or third party to sources such as mailing