https://jericho.blog/2008/04/03/vulnerability-counts-and-osvdb-advocacy/