to CVE data. Finally, (3) with approximately 4,000
vulnerabilities marked ‘other’ or ‘not specified’, it is costprohibitive to review each CVE when the set of categories is
updated.
5) Why isn't my favorite web vulnerability here?