Cve parsing works with references and vuln_soft.