Operation on a Resource after Expiration or Release

Every one of the 85 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Password reset links invalidation issue in WordPressCVE-2020-11027WordPress · CVSS 6.1 · 14% likely

   WordPress

2. In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens,…CVE-2019-17638The Eclipse Foundation · 11% likely

   Eclipse Foundation

3. ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOTE: as of 2025-10-14,…CVE-2020-240302.7% likely
4. A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP…CVE-2021-37204Siemens · CVSS 7.5 · 2.2% likely

   Siemens

5. A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.CVE-2021-42778opensc · 2.1% likely
6. The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP service operating on the WBM remains operational until the WBM is…CVE-2020-12043Baxter Sigma Spectrum Infusion Pumps · 2.1% likely
7. A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (…CVE-2021-37185Siemens · CVSS 7.5 · 2.1% likely

   Siemens

8. Reference count underflow in shiftfsCVE-2019-15791Ubuntu · CVSS 7.1 · 1.3% likely

   Ubuntu

9. When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitra…CVE-2021-23995Mozilla · 1.2% likely

   Mozilla

10. Improper session expiration in Parse ServerCVE-2020-15270parse-community · CVSS 4.3 · 1.2% likely

    Parse-Community

11. Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufsCVE-2019-15794Ubuntu · CVSS 7.1 · 1.2% likely

    Ubuntu

12. Junos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happeningCVE-2022-22197Juniper Networks · CVSS 7.5 · 1.1% likely

    Juniper Networks

13. Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityCVE-2026-58291Microsoft · CVSS 6.1 · 1.0% likely

    Microsoft

14. An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long…CVE-2022-30256CVSS 7.5 · 1.0% likely
15. An invalid memory address dereference was discovered in load_pnm in frompnm.c in libsixel before 1.8.3.CVE-2019-200220.9% likely
16. An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials.CVE-2024-47571Fortinet · CVSS 7.9 · 0.9% likely

    Fortinet

17. An elevation of privilege vulnerability in CameraBase could enable a local malicious application to execute arbitrary code. This issue is rated as High because it is a local arbit…CVE-2017-0544Google Inc. · 0.9% likely

    Google

18. Decidim's devise_invitable gem vulnerable to circumvention of invitation token expiry periodCVE-2023-48220decidim · CVSS 5.7 · 0.8% likely

    Decidim

19. IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocation mechanism for the JWT token. IBM X-Force ID: 219131.CVE-2022-22332IBM · CVSS 5.6 · 0.8% likely

    IBM

20. JWK Set's HTTP client only overwrites and appends JWK to local cache during refreshCVE-2025-22149MicahParks · CVSS 2.1 · 0.8% likely
21. get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate page mishandling) of…CVE-2020-252210.7% likely
22. Apache CXF: Revocation bypass in DefaultEncryptingOAuthDataProviderCVE-2026-68481Apache Software Foundation · CVSS 7.5 · 0.7% likely

    Apache

23. PostgreSQL plperl tied-object exceptions follow stale sigjmp_bufCVE-2026-116326PostgreSQL · CVSS 8.8 · 0.6% likely
24. By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within the bounds of the same-origin policy) eve…CVE-2022-22755Mozilla · CVSS 8.8 · 0.6% likely

    Mozilla

25. HCI Connection Creation Dangling State Reference Re-useCVE-2023-1902zephyrproject-rtos · CVSS 5.9 · 0.6% likely

    Zephyrproject-Rtos

26. HCI send_sync Dangling Semaphore Reference Re-useCVE-2023-1901zephyrproject-rtos · CVSS 5.9 · 0.6% likely

    Zephyrproject-Rtos

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.