The problem with common vulnerability and exposure lists, however, is that the vulnerabilities being generated in modern applications aren’t known.