The CVE date data and graphs in the paper "Security impact ratings considered harmful" can be generated by downloading the files linked below and then running:

makegraph.py cve-data.txt

on a system with the matplotlib python module installed.