Every vendor and weakness type (CWE) with published security stories: scores, exploited flaws and activity over time.