Plan to resuscitate beleaguered vulnerability database draws criticism