Matching services with known security vulnerabilities