Are Vulnerabilities Discovered and Resolved Like Other Defects?