Text this: A framework for classification software security using common vulnerabilities and exposures