Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2023-25135 | CVE-2023-25135 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2023-23489 | CVE-2023-23489 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2023-23333 | CVE-2023-23333 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2023-22527 | Atlassian Confluence Data Center and Server Template Injection Vulnerability | CRITICAL | 10.0 | N/A | cvelistv5 | 2024-01-24 |
| cve-2023-20887 | Vmware Aria Operations for Networks Command Injection Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2023-06-22 |
| cve-2023-1698 | CVE-2023-1698 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2023-1671 | Sophos Web Appliance Command Injection Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2023-11-16 |
| cve-2023-1454 | CVE-2023-1454 | MEDIUM | 6.5 | N/A | cvelistv5 | |
| cve-2023-1177 | CVE-2023-1177 | CRITICAL | 9.3 | N/A | cvelistv5 | |
| cve-2023-1020 | CVE-2023-1020 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2023-0669 | Fortra GoAnywhere MFT Remote Code Execution Vulnerability | HIGH | 7.2 | N/A | cvelistv5 | 2023-02-10 |
| cve-2023-0159 | CVE-2023-0159 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-50993 | CVE-2022-50993 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2022-47986 | IBM Aspera Faspex Code Execution Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2023-02-21 |
| cve-2022-47966 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2023-01-23 |
| cve-2022-47615 | CVE-2022-47615 | CRITICAL | 9.3 | N/A | cvelistv5 | |
| cve-2022-45835 | CVE-2022-45835 | MEDIUM | 5.8 | N/A | cvelistv5 | |
| cve-2022-4447 | CVE-2022-4447 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2022-4328 | CVE-2022-4328 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2022-41840 | WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability | HIGH | 7.5 | N/A | cvelistv5 | 2026-06-17 |
| cve-2022-4117 | CVE-2022-4117 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2022-41082 | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH | 8.0 | N/A | cvelistv5 | 2022-09-30 |
| cve-2022-40881 | SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-06-17 |
| cve-2022-4059 | CVE-2022-4059 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2022-4050 | CVE-2022-4050 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2022-40022 | CVE-2022-40022 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2022-39986 | CVE-2022-39986 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-39960 | CVE-2022-39960 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-3980 | An XML External Entity (XEE) vulnerability allows server-side request forgery (SSRF) and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4. | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-06-17 |
| cve-2022-38840 | CVE-2022-38840 | HIGH | 7.5 | N/A | cvelistv5 |