Almost none of what you've said is correct regarding the use and purpose of the CVE database.