Set vulnerability score from cve advisory

[dejanb]

Instead of calculating vulnerability score as average of advisory scores, use the original score from the CVE file. It depends on the properly parsing scores from CVE files (#1605)