Thousands of internet-connected databases contain high or critical CVEs, says report by cloud security biz