cvecheck: improve performance and update CVE/NIST information when necessary and incremental only