On the Effectiveness of Software Diversity: A Systematic Study on Real-World Vulnerabilities