well how many CVE vulns did it find?