Analysis of the distribution of the severity of vulnerabilities in the U.S. National Vulnerability Database