Vulnerability monitoring and patch management