US NIST's vulnerability database hacked