Understanding common vulnerabilities and exposures (CVEs)