How MITRE has mismanaged the world's vulnerability database for decades and wasted millions along the way.