could anyone please let me know how to obtain a vulnerability only (CVE) list output