Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2022-3075 chromium-browser: Insufficient data validation in Mojo HIGH 8.8 5.76% cvelistv5 2025-11-21
cve-2022-27593 QNAP Photo Station Externally Controlled Reference Vulnerability CRITICAL 10.0 87.91% cvelistv5 2022-09-08
cve-2022-26258 D-Link DIR-820L Remote Code Execution Vulnerability HIGH N/A 91.98% cvelistv5 2022-09-08
cve-2020-9934 Apple iOS, iPadOS, and macOS Input Validation Vulnerability MEDIUM 5.5 3.21% cvelistv5 2022-09-08
cve-2018-7445 MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability CRITICAL 9.8 60.81% cvelistv5 2022-09-08
cve-2018-6530 D-Link Multiple Routers OS Command Injection Vulnerability CRITICAL 9.8 96.68% cvelistv5 2022-09-08
cve-2018-2628 Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). CRITICAL 9.8 99.45% cvelistv5 2026-06-17
cve-2018-13374 Fortinet FortiOS and FortiADC Improper Access Control Vulnerability MEDIUM 4.3 37.83% cvelistv5 2022-09-08
cve-2017-5521 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability HIGH N/A 89.24% cvelistv5 2022-09-08
cve-2011-4723 D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability HIGH N/A 3.06% cvelistv5 2022-09-08
cve-2011-1823 Android OS Privilege Escalation Vulnerability HIGH N/A 41.37% cvelistv5 2022-09-08
cve-2022-26352 dotCMS Unrestricted Upload of File Vulnerability CRITICAL 9.8 91.55% cvelistv5 2022-08-25
cve-2022-24706 Apache CouchDB Insecure Default Initialization of Resource Vulnerability HIGH N/A 92.51% cvelistv5 2022-08-25
cve-2022-24112 Apache APISIX Authentication Bypass Vulnerability HIGH N/A 96.07% cvelistv5 2022-08-25
cve-2022-22963 SUSE CVE CVE-2022-22963 UNKNOWN N/A 99.94% cvelistv5 2025-02-16
cve-2022-2294 chromium-browser: Heap buffer overflow in WebRTC HIGH 8.8 70.46% cvelistv5 2025-11-21
cve-2021-39226 Grafana Authentication Bypass Vulnerability HIGH N/A 99.93% cvelistv5 2022-08-25
cve-2021-38406 Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability HIGH 7.8 76.43% cvelistv5 2022-08-25
cve-2021-31010 Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability HIGH 7.5 3.67% cvelistv5 2022-08-25
cve-2020-36193 PEAR Archive_Tar Improper Link Resolution Vulnerability HIGH N/A 70.59% cvelistv5 2022-08-25
cve-2020-28949 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability HIGH N/A 84.55% cvelistv5 2022-08-25
cve-2022-0028 Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability HIGH 8.6 2.38% cvelistv5 2022-08-22
cve-2022-32894 Apple iOS and macOS Out-of-Bounds Write Vulnerability HIGH 7.8 3.29% cvelistv5 2022-08-18
cve-2022-32893 SUSE CVE CVE-2022-32893 HIGH 8.8 9.93% cvelistv5 2026-08-31
cve-2022-2856 chromium-browser: Insufficient validation of untrusted input in Intents HIGH 8.8 4.53% cvelistv5 2025-11-21
cve-2022-26923 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability HIGH 8.8 83.50% cvelistv5 2022-08-18
cve-2022-22536 SAP Multiple Products HTTP Request Smuggling Vulnerability CRITICAL 9.8 97.95% cvelistv5 2022-08-18
cve-2022-21971 Microsoft Windows Runtime Remote Code Execution Vulnerability HIGH 7.8 53.93% cvelistv5 2022-08-18
cve-2017-15944 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability CRITICAL 9.8 98.30% cvelistv5 2022-08-18
cve-2022-37042 Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability CRITICAL 9.8 91.89% cvelistv5 2022-08-11