displaying vuln list modal when click on report -- first step