fixes #7697 - enable searching by CVE

Yea, I had the originally, I wasn't sure if it was worth the double SQL query (and cve_id isn't unique), but will add it