NIST gives up enriching most CVEs