Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2022-31847 | CVE-2022-31847 | HIGH | N/A | 6.55% | cvelistv5 | |
| cve-2022-31814 | CVE-2022-31814 | CRITICAL | 9.8 | 91.88% | cvelistv5 | |
| cve-2022-3180 | CVE-2022-3180 | CRITICAL | 9.8 | 9.21% | cvelistv5 | |
| cve-2022-31793 | CVE-2022-31793 | HIGH | N/A | 15.85% | cvelistv5 | |
| cve-2022-31656 | CVE-2022-31656 | HIGH | N/A | 22.94% | cvelistv5 | |
| cve-2022-31474 | CVE-2022-31474 | HIGH | 7.5 | 63.76% | cvelistv5 | |
| cve-2022-31208 | An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary commands by manipulating the cmd_string URL parameter. | HIGH | 8.8 | 1.46% | cvelistv5 | 2026-06-17 |
| cve-2022-31199 | Netwrix Auditor Insecure Object Deserialization Vulnerability | CRITICAL | 9.8 | 36.01% | cvelistv5 | 2023-07-11 |
| cve-2022-31161 | CVE-2022-31161 | HIGH | N/A | 28.41% | cvelistv5 | |
| cve-2022-31137 | Unauthenticated Remote Code Execution in Roxy-WI | CRITICAL | 10.0 | 90.58% | cvelistv5 | 2026-06-17 |
| cve-2022-31126 | Unauthenticated Remote Code Execution in Roxy-wi | CRITICAL | 10.0 | 52.65% | cvelistv5 | 2026-06-17 |
| cve-2022-3075 | Google Chromium Mojo Insufficient Data Validation Vulnerability | HIGH | N/A | 5.76% | cvelistv5 | 2022-09-08 |
| cve-2022-30525 | Zyxel Multiple Firewalls OS Command Injection Vulnerability | CRITICAL | 9.8 | 99.94% | cvelistv5 | 2022-05-16 |
| cve-2022-3038 | Google Chromium Network Service Use-After-Free Vulnerability | HIGH | N/A | 24.74% | cvelistv5 | 2023-03-30 |
| cve-2022-30333 | RARLAB UnRAR Directory Traversal Vulnerability | CRITICAL | N/A | 99.09% | cvelistv5 | 2022-08-09 |
| cve-2022-30190 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | HIGH | 7.8 | 99.23% | cvelistv5 | 2022-06-14 |
| cve-2022-2958 | BadgeOS < 3.7.1.3 - Subscriber+ SQLi | HIGH | 8.8 | 1.29% | cvelistv5 | 2026-06-17 |
| cve-2022-29499 | Mitel MiVoice Connect Data Validation Vulnerability | CRITICAL | N/A | 54.32% | cvelistv5 | 2022-06-27 |
| cve-2022-29464 | WSO2 Multiple Products Unrestrictive Upload of File Vulnerability | CRITICAL | 9.8 | 100.00% | cvelistv5 | 2022-04-25 |
| cve-2022-29383 | CVE-2022-29383 | HIGH | N/A | 48.54% | cvelistv5 | |
| cve-2022-29303 | SolarView Compact Command Injection Vulnerability | CRITICAL | 9.8 | 98.00% | cvelistv5 | 2023-07-13 |
| cve-2022-29153 | consul: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector | HIGH | 7.5 | 8.68% | cvelistv5 | 2026-08-14 |
| cve-2022-29081 | CVE-2022-29081 | HIGH | N/A | 83.54% | cvelistv5 | |
| cve-2022-29078 | ejs: server-side template injection in outputFunctionName | CRITICAL | 9.8 | 32.81% | cvelistv5 | 2026-08-04 |
| cve-2022-29014 | CVE-2022-29014 | HIGH | N/A | 11.82% | cvelistv5 | |
| cve-2022-29013 | CVE-2022-29013 | HIGH | N/A | 76.91% | cvelistv5 | |
| cve-2022-29007 | CVE-2022-29007 | HIGH | N/A | 19.25% | cvelistv5 | |
| cve-2022-28912 | CVE-2022-28912 | HIGH | N/A | 2.56% | cvelistv5 | |
| cve-2022-28908 | CVE-2022-28908 | HIGH | N/A | 2.56% | cvelistv5 | |
| cve-2022-28907 | CVE-2022-28907 | HIGH | N/A | 2.56% | cvelistv5 |