Providing on-line non-downloadable software for prioritizing fixing software vulnerabilities, communicating regarding their exploitability, and managing and analyzing software bills of material