Vuln report matcher