Parsed CVE records (2022–2024, CNA CVSS v3 severity) used in "A null-controlled audit of machine learning on cybersecurity data"

Table of 56,486 published CVE records with a CVSS v3.0/v3.1 base severity supplied by the CVE Numbering Authority, parsed from the CVE Program's cvelistV5 repository (https://github.com/CVEProject/cvelistV5, commit e528f4f8a0886863db770cf54205f2b2212acc76, 18 October 2026). Each row holds the record's publication date, assigning organisation, first CWE identifier, first vendor name, counts of products, versions and references, reference-tag indicators, description text and the severity label. The table was used as a positive-control dataset in the manuscript "A null-controlled audit of machine learning on cybersecurity data: telemetry, vulnerability records and network connections". The checksums and download sources of the three other datasets used in that study (Kaggle cyber-security-attacks, NSL-KDD, UNSW-NB15) are listed in checksums.txt; those datasets are not redistributed here.