Vulnerability discovery modelling: a general framework