A Survey on Data-driven Software Vulnerability Assessment and Prioritization