Answer: That's an observation, not a question. If a certain
vulnerability type is not on the list, then it probably didn't
appear frequently enough for the CVE project to track closely.
There are several reasons: (1) the vulnerability type is selected