Move SQL CVEs to their own check

To clean up CheckSQL a little bit.