I thought that the point of the CVE database is to improve security, not wreck it?