Tracking known security vulnerabilities in proprietary software systems