A Multivariate Bayesian Approach to Modeling Vulnerability Discovery in the Software Security Lifecycle