Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2022-38296 | CVE-2022-38296 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-38130 | CVE-2022-38130 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-3801 | CVE-2022-3801 | MEDIUM | 6.3 | N/A | cvelistv5 | |
| cve-2022-37042 | Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2022-08-11 |
| cve-2022-36923 | CVE-2022-36923 | MEDIUM | 5.4 | N/A | cvelistv5 | |
| cve-2022-36509 | CVE-2022-36509 | HIGH | 7.8 | N/A | cvelistv5 | |
| cve-2022-35914 | Teclib GLPI Remote Code Execution Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2023-03-07 |
| cve-2022-35413 | WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidential information (such as SSL keys) via an HTTPS request to the /webapi/ URI on port 443 or 5001. | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-06-17 |
| cve-2022-3481 | CVE-2022-3481 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-34753 | CVE-2022-34753 | HIGH | 8.8 | N/A | cvelistv5 | |
| cve-2022-34121 | Cuppa CMS v1.0 was discovered to contain a local file inclusion (LFI) vulnerability via the component /templates/default/html/windows/right.php. | HIGH | 7.5 | N/A | cvelistv5 | 2026-06-17 |
| cve-2022-33891 | Apache Spark Command Injection Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2023-03-07 |
| cve-2022-31847 | CVE-2022-31847 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-31814 | CVE-2022-31814 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2022-31656 | CVE-2022-31656 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-31161 | CVE-2022-31161 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-31137 | Unauthenticated Remote Code Execution in Roxy-WI | CRITICAL | 10.0 | N/A | cvelistv5 | 2026-06-17 |
| cve-2022-31126 | Unauthenticated Remote Code Execution in Roxy-wi | CRITICAL | 10.0 | N/A | cvelistv5 | 2026-06-17 |
| cve-2022-30525 | Zyxel Multiple Firewalls OS Command Injection Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2022-05-16 |
| cve-2022-29464 | WSO2 Multiple Products Unrestrictive Upload of File Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2022-04-25 |
| cve-2022-29383 | CVE-2022-29383 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-29303 | SolarView Compact Command Injection Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2023-07-13 |
| cve-2022-29153 | consul: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector | HIGH | 7.5 | N/A | cvelistv5 | 2026-08-14 |
| cve-2022-29078 | ejs: server-side template injection in outputFunctionName | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-08-04 |
| cve-2022-29014 | CVE-2022-29014 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-29007 | CVE-2022-29007 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-28219 | CVE-2022-28219 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-28079 | CVE-2022-28079 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-28005 | CVE-2022-28005 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-27593 | QNAP Photo Station Externally Controlled Reference Vulnerability | CRITICAL | 10.0 | N/A | cvelistv5 | 2022-09-08 |