Use of a Key Past its Expiration Date

Every one of the 23 is a mark on the map. Named now: 1 to 23, most at risk first.

1. An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of Asus RT-AX82U 3.0.0.4.386_49674-ge182230. A specially-crafted HTTP request can lead to fu…CVE-2022-35401Asus · CVSS 9 · 21% likely

   ASUS

2. keys: Fix overwrite of key expiration on instantiationCVE-2024-36031Linux · CVSS 9.8 · 0.7% likely

   Linux

3. A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually…CVE-2022-2447Openstack · 0.7% likely

   Openstack

4. Ops Manager uaa client issues tokens after refresh token expirationCVE-2019-3790Pivotal · CVSS 6.1 · 0.7% likely

   Pivotal

5. Philips Vue PACS Use of a Key Past its Expiration DateCVE-2021-33020Philips · CVSS 8.2 · 0.6% likely

   Philips

6. Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /resetCVE-2026-39923Flarum · CVSS 8.1 · 0.4% likely

   Flarum

7. Maddy Mail Server does not implement account expiryCVE-2022-24732foxcpp · CVSS 6.3 · 0.4% likely
8. Zitadel Expired JWT Keys Usable for Authorization GrantsCVE-2025-31123zitadel · CVSS 8.7 · 0.4% likely

   Zitadel

9. Keycloak-core: one time passcode (otp) is valid longer than expiration timeseverityCVE-2024-7318Red Hat · CVSS 4.8 · 0.4% likely

   Red Hat

10. PgBouncer default auth_query does not take Postgres password expiry into accountCVE-2025-2291Pgbouncer · CVSS 8.1 · 0.4% likely

    Pgbouncer

11. IBM App Connect Enterprise information disclosureCVE-2024-31895IBM · CVSS 4.3 · 0.3% likely

    IBM

12. IBM App Connect Enterprise information disclosureCVE-2024-31894IBM · CVSS 4.3 · 0.3% likely

    IBM

13. IBM App Connect Enterprise information disclosureCVE-2024-31893IBM · CVSS 4.3 · 0.3% likely

    IBM

14. Virtual Secure Mode Spoofing VulnerabilityCVE-2025-48813Microsoft · CVSS 6.3 · 0.3% likely

    Microsoft

15. In PQUIC before 5bde5bb, retention of unused initial encryption keys allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTION_CLOSE frame that is…CVE-2024-25679Pquic · CVSS 6.5 · 0.3% likely
16. CVE-2023-6960Sciener · CVSS 7.5 · 0.3% likely

    Sciener

17. moodle: QR login key and auto-login key for the Moodle mobile app should be generated as separate keysCVE-2024-38277Moodle · CVSS 5.4 · 0.2% likely

    Moodle

18. IBM Sterling Partner Engagement Manager Information DisclosureCVE-2025-13723IBM · CVSS 5.3 · 0.2% likely

    IBM

19. Gogs: Password-reset tokens use account-activation lifetime, ignoring RESET_PASSWORD_CODE_LIVESCVE-2026-52809gogs · CVSS 6.8 · 0.2% likely

    Gogs

20. IBM Db2 improper account lockoutCVE-2025-33012IBM · CVSS 6.3 · 0.2% likely

    IBM

21. Use of a Key Past its Expiration Date in ConduitCVE-2024-6299The Conduit Contributors · CVSS 4.8 · 0.2% likely

    The Conduit Contributors

22. sigstore-go fails to check signature timestamps against a signing key's validity periodCVE-2026-54787sigstore · CVSS 3.1 · 0.1% likely

    Sigstore

23. Shim: expired secure boot certificateCVE-2023-5342Red Hat · CVSS 4.1 · 0.1% likely

    Red Hat

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.