Vulnerability Categories
"Local/remote: whether the attacker can attack from the network, or has to have a login shell first
"Impact: using classic integrity/privacy/availability
Penetration: raise privilege, or obtain a shell from the network
Disclosure: reveal information that should not be revealed
DoS: degrade or destroy service