CVE Explained: How Vulnerabilities Get Named and Scored