Discovering Vulnerabilities In The Wild: An Empirical Study