Text this: Characterization of security defects and analysis of vulnerability criticality in software for automated systems of internal affairs bodies