Why does the information on a scan seem to be static and vulnerability status is not changing?