How do you evaluate and prioritize a list of critical vulnerabilities found during a routine network scan at Health Care Service?