update vulnerable program list