JPCert has a better notification page (And the actual three, instead of dropping the Captive portal XSS) http://jvn.jp/en/jp/JVN87751554/index.html

But these are all pretty lame "vulenrabilities".