building vulnerability now fetched and visualised on click