I have seen what’s the problem.
In the same Sonarqube version (7.0), with another project, after doing the analysis it shows me in the overview 1 New Bug and 1 New Vulnerabilty.
The last analysis is comparing the latest version (1.66.75) from 05 December with the previous version (1.66.73) from 19 September.
In the Issues page I see that it appears 3 new Bugs and 3 new Vulnerabilities, and the point is that 2 of the Bugs and 2 of the Vulnerabilities are created on 19 September, and it should show only the latest, created correctly on 05 December:
The question is why Sonarqube is showing as new bugs or new vulnerabilities in the Issues page issues created in the last 3 months, and in the overview it only takes into account the issues created in the new code.
I think that’s the problem: in the Overview and on Measures page it shows as new issues, new issues created on really new code, but on Issues page, it shows as new bugs or vulnerabilities new issues created both on new and old code