Patrick Garrity and Darren Kingsnorth discuss the significant challenges currently facing the CVE program and the National Vulnerability Database