checking vulnerabilities