"You've Got Your Nice List of Bugs, Now What?" Vulnerability Discovery and Management Processes in the Wild