[cpe2cve] Matching fix
[cpe2cve] Matching fix

Vulnerable flag in cpe match means whether or not the product in
configuration is vulnerable to some cve. It's not the same as Negate
operator.

go test ./...
ran cpe2cve with previously false positive input, not outputed anymore

facebookincubator/nvdtools