Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2022-46381 Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e. MEDIUM 6.1 1.76% cvelistv5 2026-06-17
cve-2022-46169 Cacti Command Injection Vulnerability HIGH N/A 99.83% cvelistv5 2023-02-16
cve-2022-45933 CVE-2022-45933 CRITICAL 9.8 51.70% cvelistv5
cve-2022-45835 CVE-2022-45835 MEDIUM 5.8 37.67% cvelistv5
cve-2022-45359 CVE-2022-45359 CRITICAL 9.8 13.51% cvelistv5
cve-2022-44877 CWP Control Web Panel OS Command Injection Vulnerability CRITICAL 9.8 100.00% cvelistv5 2023-01-17
cve-2022-44698 Microsoft Defender SmartScreen Security Feature Bypass Vulnerability MEDIUM 5.4 76.27% cvelistv5 2022-12-13
cve-2022-4447 CVE-2022-4447 CRITICAL 9.8 4.76% cvelistv5
cve-2022-44149 CVE-2022-44149 HIGH 8.8 64.35% cvelistv5
cve-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability HIGH 8.6 92.27% cvelistv5 2025-03-03
cve-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability HIGH 8.8 97.67% cvelistv5 2025-03-03
cve-2022-4328 CVE-2022-4328 CRITICAL 9.8 4.43% cvelistv5
cve-2022-42953 CVE-2022-42953 HIGH 7.5 4.83% cvelistv5
cve-2022-42948 Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability CRITICAL 9.8 2.71% cvelistv5 2023-03-30
cve-2022-42889 apache-commons-text: variable interpolation RCE CRITICAL 9.8 99.93% cvelistv5 2026-08-19
cve-2022-42856 Apple iOS Type Confusion Vulnerability HIGH N/A 8.52% cvelistv5 2022-12-14
cve-2022-42827 Apple iOS and iPadOS Out-of-Bounds Write Vulnerability HIGH 7.8 1.05% cvelistv5 2022-10-25
cve-2022-4262 SUSE CVE CVE-2022-4262 HIGH 8.8 15.98% cvelistv5 2025-03-15
cve-2022-4257 CVE-2022-4257 MEDIUM 6.3 43.93% cvelistv5
cve-2022-42475 Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability CRITICAL 9.3 99.47% cvelistv5 2022-12-13
cve-2022-41840 WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability HIGH 7.5 5.52% cvelistv5 2026-06-17
cve-2022-41800 CVE-2022-41800 HIGH 8.7 76.87% cvelistv5
cve-2022-41412 An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks. HIGH 8.6 4.20% cvelistv5 2026-06-17
cve-2022-41352 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability CRITICAL 9.8 95.48% cvelistv5 2022-10-20
cve-2022-4135 Google Chromium GPU Heap Buffer Overflow Vulnerability HIGH N/A 31.86% cvelistv5 2022-11-28
cve-2022-41328 Fortinet FortiOS Path Traversal Vulnerability MEDIUM 6.5 10.68% cvelistv5 2023-03-14
cve-2022-41223 Mitel MiVoice Connect Code Injection Vulnerability CRITICAL N/A 10.66% cvelistv5 2023-02-21
cve-2022-4117 CVE-2022-4117 CRITICAL 9.8 4.96% cvelistv5
cve-2022-41128 Microsoft Windows Scripting Languages Remote Code Execution Vulnerability HIGH 8.8 24.62% cvelistv5 2022-11-08
cve-2022-41125 Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability HIGH N/A 3.05% cvelistv5 2022-11-08