By publishing this they increase the vendors incentive to fix the security bugs.