vulnerabilities and assets