unknown vendor Software Component Vulnerabilities