Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2022-28906 CVE-2022-28906 HIGH N/A 2.88% cvelistv5
cve-2022-28810 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability MEDIUM 6.8 70.97% cvelistv5 2023-03-07
cve-2022-2856 Google Chromium Intents Insufficient Input Validation Vulnerability HIGH N/A 4.53% cvelistv5 2022-08-18
cve-2022-28365 CVE-2022-28365 HIGH N/A 9.32% cvelistv5
cve-2022-28363 CVE-2022-28363 HIGH N/A 4.90% cvelistv5
cve-2022-28290 Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request MEDIUM 6.1 1.40% cvelistv5 2026-06-17
cve-2022-28221 CVE-2022-28221 HIGH N/A 2.40% cvelistv5
cve-2022-28219 CVE-2022-28219 HIGH N/A 97.19% cvelistv5
cve-2022-28079 CVE-2022-28079 HIGH N/A 28.51% cvelistv5
cve-2022-28005 An issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3 FINAL. An unauthenticated attacker could abuse improperly secured access to arbitrary files on the server (via /Electron/download directory traversal in conjunction with a path component that uses backslash characters), leading to cleartext credential disclosure. Afterwards, the authenticated attacker is able to upload a file that overwrites a 3CX service binary, leading to Remote Code Execution as NT AUTHORITY\SYSTEM on Windows installations. NOTE: this issue exists because of an incomplete fix for CVE-2022-48482. CRITICAL 9.8 6.73% cvelistv5 2026-06-17
cve-2022-27926 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability MEDIUM 6.1 17.63% cvelistv5 2023-04-03
cve-2022-27925 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability HIGH 7.2 98.68% cvelistv5 2022-08-11
cve-2022-27924 Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability HIGH 7.5 85.40% cvelistv5 2022-08-04
cve-2022-27593 QNAP Photo Station Externally Controlled Reference Vulnerability CRITICAL 10.0 87.91% cvelistv5 2022-09-08
cve-2022-27518 Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability HIGH N/A 6.68% cvelistv5 2022-12-13
cve-2022-26925 Microsoft Windows LSA Spoofing Vulnerability HIGH 8.1 10.72% cvelistv5 2022-07-01
cve-2022-26923 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability HIGH 8.8 83.50% cvelistv5 2022-08-18
cve-2022-26904 Microsoft Windows User Profile Service Privilege Escalation Vulnerability HIGH N/A 16.95% cvelistv5 2022-04-25
cve-2022-26871 Trend Micro Apex Central Arbitrary File Upload Vulnerability HIGH N/A 19.48% cvelistv5 2022-03-31
cve-2022-26833 CVE-2022-26833 CRITICAL 9.4 37.64% cvelistv5
cve-2022-26501 Veeam Backup & Replication Remote Code Execution Vulnerability CRITICAL 9.8 4.10% cvelistv5 2022-12-13
cve-2022-26500 Veeam Backup & Replication Remote Code Execution Vulnerability HIGH 8.8 5.83% cvelistv5 2022-12-13
cve-2022-26486 Mozilla Firefox Use-After-Free Vulnerability HIGH N/A 2.35% cvelistv5 2022-03-07
cve-2022-26485 SUSE CVE CVE-2022-26485 HIGH 8.8 14.26% cvelistv5 2026-08-29
cve-2022-26352 dotCMS Unrestricted Upload of File Vulnerability CRITICAL 9.8 91.55% cvelistv5 2022-08-25
cve-2022-26318 WatchGuard Firebox and XTM Appliances Arbitrary Code Execution CRITICAL 9.8 78.16% cvelistv5 2022-03-25
cve-2022-26258 D-Link DIR-820L Remote Code Execution Vulnerability HIGH N/A 91.98% cvelistv5 2022-09-08
cve-2022-26186 CVE-2022-26186 HIGH N/A 3.95% cvelistv5
cve-2022-26143 MiCollab, MiVoice Business Express Access Control Vulnerability HIGH N/A 87.33% cvelistv5 2022-03-25
cve-2022-26138 Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability CRITICAL 9.8 98.17% cvelistv5 2022-07-29