CVE and KEV tracking