agentprime: CWE-324

CVE-2026-39923: Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /reset

Wed, 05 Aug 2026 14:38:35 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

sigstore-go fails to check signature timestamps against a signing key's validity period

Fri, 31 Jul 2026 21:58:39 GMT

github.com/sigstore/sigstore-go <1.2.1, fixed in 1.2.1. CVSS 3.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Gogs's password-reset tokens use account-activation lifetime, ignoring RESET_PASSWORD_CODE_LIVES

Tue, 23 Jun 2026 17:03:25 GMT

gogs.io/gogs <0.14.3, fixed in 0.14.3. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotation

Fri, 17 Apr 2026 22:32:02 GMT

openclaw <2026.4.15, fixed in 2026.4.15. CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-13723: IBM Sterling Partner Engagement Manager Information Disclosure

Fri, 13 Mar 2026 18:32:45 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-33012: IBM Db2 improper account lockout

Fri, 07 Nov 2025 18:38:29 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-48813: Virtual Secure Mode Spoofing Vulnerability

Tue, 14 Oct 2025 17:00:53 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token

Thu, 28 Aug 2025 19:36:04 GMT

github.com/coder/coder/v2 <2.23.0, fixed in 2.23.0. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-5342: Shim: expired secure boot certificate

Fri, 15 Aug 2025 12:06:35 GMT

CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-2291: PgBouncer default auth_query does not take Postgres password expiry into account

Wed, 16 Apr 2025 18:00:05 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-31123: Zitadel Expired JWT Keys Usable for Authorization Grants

Mon, 31 Mar 2025 19:31:40 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

Keycloaks's One Time Passcode (OTP) is valid longer than expiration timeSeverity

Mon, 14 Oct 2024 20:56:43 GMT

org.keycloak:keycloak-core <24.0.7 || >=25.0.0, <25.0.4, fixed in 24.0.7, 25.0.4. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: Keycloak Uses a Key Past its Expiration Date

Mon, 09 Sep 2024 21:31:22 GMT

org.keycloak:keycloak-core <24.0.7, fixed in 24.0.7. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-6299: Use of a Key Past its Expiration Date in Conduit

Tue, 25 Jun 2024 13:02:25 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Moodle uses the same key for QR login and auto-login

Tue, 18 Jun 2024 21:30:36 GMT

moodle/moodle <4.1.11 || >=4.2.0-beta, <4.2.8 || >=4.3.0-beta, <4.3.5 || >=4.4.0-beta, <4.4.1, fixed in 4.1.11, 4.2.8, 4.3.5, 4.4.1. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-36031: keys: Fix overwrite of key expiration on instantiation

Thu, 30 May 2024 15:23:46 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-31894: IBM App Connect Enterprise information disclosure

Wed, 22 May 2024 19:17:51 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-31895: IBM App Connect Enterprise information disclosure

Wed, 22 May 2024 19:16:30 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-31893: IBM App Connect Enterprise information disclosure

Wed, 22 May 2024 19:04:53 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-25679: In PQUIC before 5bde5bb, retention of unused initial encryption keys allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTION_CLOSE frame that is encrypted via the in…

Fri, 09 Feb 2024 00:00:00 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-35401: Asus RT-AX82U: An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of…

Tue, 10 Jan 2023 20:44:50 GMT

CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. CVSS score 9.0 (7.0 or more) and EPSS 0.21 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-2447: A flaw was found in Keystone.

Thu, 01 Sep 2022 20:30:20 GMT

Published by the CVE Program. Not analysed by agentprime yet.

Contao Does Not Expire Tokens Correctly

Fri, 13 May 2022 01:07:57 GMT

contao/contao >=4.7.0, <4.7.3, fixed in 4.7.3. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2021-33020: Philips Vue PACS Use of a Key Past its Expiration Date

Fri, 01 Apr 2022 22:17:17 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

Use of a Key Past its Expiration Date and Insufficient Session Expiration in Maddy Mail Server

Mon, 07 Mar 2022 16:59:31 GMT

github.com/foxcpp/maddy <0.5.4, fixed in 0.5.4. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2019-3790: Ops Manager uaa client issues tokens after refresh token expiration

Thu, 06 Jun 2019 19:16:16 GMT

CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.