I think these should be:
`['CVE', '2014-0160'],` 
etc