Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2023-1698 | CVE-2023-1698 | CRITICAL | 9.8 | 82.04% | cvelistv5 | |
| cve-2023-1671 | Sophos Web Appliance Command Injection Vulnerability | CRITICAL | 9.8 | 100.00% | cvelistv5 | 2023-11-16 |
| cve-2023-1454 | CVE-2023-1454 | MEDIUM | 6.5 | 35.83% | cvelistv5 | |
| cve-2023-1434 | CVE-2023-1434 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2023-1177 | CVE-2023-1177 | CRITICAL | 9.3 | 69.68% | cvelistv5 | |
| cve-2023-1020 | CVE-2023-1020 | CRITICAL | 9.8 | 4.99% | cvelistv5 | |
| cve-2023-0669 | Fortra GoAnywhere MFT Remote Code Execution Vulnerability | HIGH | 7.2 | 100.00% | cvelistv5 | 2023-02-10 |
| cve-2023-0656 | CVE-2023-0656 | HIGH | N/A | 41.32% | cvelistv5 | |
| cve-2023-0611 | CVE-2023-0611 | CRITICAL | 9.0 | 3.85% | cvelistv5 | |
| cve-2023-0552 | CVE-2023-0552 | MEDIUM | 5.4 | 24.26% | cvelistv5 | |
| cve-2023-0386 | Linux Kernel Improper Ownership Management Vulnerability | HIGH | N/A | 7.88% | cvelistv5 | 2025-06-17 |
| cve-2023-0297 | CVE-2023-0297 | CRITICAL | 9.8 | 95.91% | cvelistv5 | |
| cve-2023-0266 | Linux Kernel Use-After-Free Vulnerability | HIGH | N/A | 3.70% | cvelistv5 | 2023-03-30 |
| cve-2023-0159 | CVE-2023-0159 | HIGH | N/A | 55.46% | cvelistv5 | |
| cve-2022-50997 | Weaver (Fanwei) E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint... | HIGH | 8.7 | 0.62% | cvelistv5 | 2026-09-08 |
| cve-2022-50993 | CVE-2022-50993 | CRITICAL | 9.8 | 0.77% | cvelistv5 | |
| cve-2022-50992 | CVE-2022-50992 | HIGH | 8.7 | 0.70% | cvelistv5 | |
| cve-2022-50973 | CVE-2022-50973 | CRITICAL | 9.8 | 1.52% | cvelistv5 | |
| cve-2022-4995 | Weaver (Fanwei) E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauth... | CRITICAL | 9.3 | 1.18% | cvelistv5 | 2026-09-16 |
| cve-2022-4984 | CVE-2022-4984 | HIGH | 8.7 | 0.45% | cvelistv5 | |
| cve-2022-4980 | CVE-2022-4980 | CRITICAL | 9.3 | 0.67% | cvelistv5 | |
| cve-2022-48503 | Apple Multiple Products Unspecified Vulnerability | HIGH | N/A | 3.21% | cvelistv5 | 2025-10-20 |
| cve-2022-48164 | CVE-2022-48164 | HIGH | 7.5 | 3.10% | cvelistv5 | |
| cve-2022-47986 | IBM Aspera Faspex Code Execution Vulnerability | CRITICAL | 9.8 | 99.97% | cvelistv5 | 2023-02-21 |
| cve-2022-47966 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | CRITICAL | N/A | 99.75% | cvelistv5 | 2023-01-23 |
| cve-2022-47945 | CVE-2022-47945 | CRITICAL | 9.8 | 28.25% | cvelistv5 | |
| cve-2022-47615 | CVE-2022-47615 | CRITICAL | 9.3 | 5.06% | cvelistv5 | |
| cve-2022-47075 | CVE-2022-47075 | HIGH | 7.5 | 59.41% | cvelistv5 | |
| cve-2022-46381 | Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e. | MEDIUM | 6.1 | 1.76% | cvelistv5 | 2026-06-17 |
| cve-2022-46169 | Cacti Command Injection Vulnerability | HIGH | N/A | 99.83% | cvelistv5 | 2023-02-16 |