Lol, I completely agree with you here.
Possible identifiers could be for example their most intuitive abbreviations (not claiming they are good ones):
NDVs (non-disclosed vulnerability) vs PDV (publicly disclosed vulnerability)