There are no shortage of people wanting to be able to say they found CVE-XXXX-XXX or a bug in product X.