lower log level of backends in rpmkit.updateinfo.main
process cases if CVE does not have CVSS base metrics and score; only CVEs since 2009 may have these
make rpmkit.updateinfo.main.prepare less verbose
skip processing older CVEs not having CVSS base metrics and score