The agency wants to ensure that its public catalog of actively exploited flaws is as comprehensive as possible.