national vulnerability database issues