"has reported 1,182 vulnerabilities from March through October"

Reported, but how many actually valid? Big difference. Reported are useless unless they're valid.