Improve references to support exploit and more

[pombredanne]

Today, the VulnerabilityReference model is entirely tied to the Vulnerability model and not reusable.

We need to design improved references to support exploits and enhance the way we handle references for severities, weaknesses and more, such as Package