Software vulnerability details frequently leak before an official Common Vulnerabilities and Exposures identifier is published