feat(cve/nvd): support CVSS v4.0

[MaineK00n]

If this Pull Request is work in progress, Add a prefix of “[WIP]” in the title.

What did you implement:

CVSS V4.0 Schema has been added to the NVD of go-cve-dictionary by the following PR. https://github.com/vulsio/go-cve-dictionary/pull/393

Vuls supports NVD CVSS v4.0.

Type of change

• [x] New feature (non-breaking change which adds functionality)

How Has This Been Tested?

• config.toml

  [servers]
  [servers.pseudo]
  type = "pseudo"
  cpeNames = [
  "cpe:2.3:a:clashforwindows:clash:0.1.0:*:*:*:*:windows:*:*"
  ]

  before

  
  $ go-cve-dictionary fetch mitre 2024
  $ go-cve-dictionary fetch nvd 2024

$ vuls scan $ vuls report $ cat results/2024-06-27T22-16-01+0900/pseudo.json | jq '.scannedCves[].cveContents[][] | {type: .type, cveID: .cveID, cvssv40Vector: .cvss40Vector, optional: .optional}' { "type": "mitre", "cveID": "CVE-2024-5732", "cvssv40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "optional": { "source": "CNA:VulDB" } } { "type": "mitre", "cveID": "CVE-2024-5732", "cvssv40Vector": "", "optional": { "source": "ADP:CISA-ADP" } } { "type": "nvd", "cveID": "CVE-2024-5732", "cvssv40Vector": "", "optional": { "source": "cna@vuldb.com" } } { "type": "nvd", "cveID": "CVE-2024-5732", "cvssv40Vector": "", "optional": { "source": "nvd@nist.gov" } }

## after
```console
$ go-cve-dictionary fetch mitre 2024
$ go-cve-dictionary fetch nvd 2024

$ vuls scan
$ vuls report
$ cat results/2024-06-27T22-16-01+0900/pseudo.json | jq '.scannedCves[].cveContents[][] | {type: .type, cveID: .cveID, cvssv40Vector: .cvss40Vector, optional: .optional}'
cat results/2024-07-03T14-58-36+0900/pseudo.json | jq '.scannedCves[].cveContents[][] | {type: .type, cveID: .cveID, cvssv40Vector: .cvss40Vector, optional: .optional}'
{
  "type": "mitre",
  "cveID": "CVE-2024-5732",
  "cvssv40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
  "optional": {
    "source": "CNA:VulDB"
  }
}
{
  "type": "mitre",
  "cveID": "CVE-2024-5732",
  "cvssv40Vector": "",
  "optional": {
    "source": "ADP:CISA-ADP"
  }
}
{
  "type": "nvd",
  "cveID": "CVE-2024-5732",
  "cvssv40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "optional": {
    "source": "cna@vuldb.com"
  }
}
{
  "type": "nvd",
  "cveID": "CVE-2024-5732",
  "cvssv40Vector": "",
  "optional": {
    "source": "nvd@nist.gov"
  }
}

Checklist:

You don't have to satisfy all of the following.

• [x] Write tests
• [ ] Write documentation
• [x] Check that there aren't other open pull requests for the same issue/feature
• [x] Format your source code by make fmt
• [x] Pass the test by make test
• [x] Provide verification config / commands
• [x] Enable "Allow edits from maintainers" for this PR
• [x] Update the messages below

Is this ready for review?: YES

Reference