scan for vulnerabilities