A novel approach to evaluate software vulnerability prioritization · Study