Vulnerability management for cloud computing