This taxonomy is originally maintained by MISP project and done
for the vulnerability-lookup project
https://github.com/cve-search/vulnerability-lookup
The taxonomy will be extended and improved. Contributions are also
very welcome.
Thanks to @cedricbonhomme for the original discussions.