Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2022-41033 Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability HIGH N/A 1.70% cvelistv5 2022-10-11
cve-2022-40881 SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php CRITICAL 9.8 30.11% cvelistv5 2026-06-17
cve-2022-40843 CVE-2022-40843 HIGH N/A 28.80% cvelistv5
cve-2022-40799 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability HIGH N/A 33.65% cvelistv5 2025-08-05
cve-2022-40765 Mitel MiVoice Connect Command Injection Vulnerability CRITICAL N/A 10.57% cvelistv5 2023-02-21
cve-2022-40734 UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0. MEDIUM 6.5 5.18% cvelistv5 2026-06-17
cve-2022-40684 Fortinet Multiple Products Authentication Bypass Vulnerability CRITICAL 9.8 99.98% cvelistv5 2022-10-11
cve-2022-4063 CVE-2022-4063 CRITICAL 9.8 9.52% cvelistv5
cve-2022-40619 FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsq_access_token parameter. This affects R6230 before 1.1.0.112, R6260 before 1.1.0.88, R7000 before 1.0.11.134, R8900 before 1.0.5.42, R9000 before 1.0.5.42, and XR300 before 1.0.3.72 and Orbi RBR20 before 2.7.2.26, RBR50 before 2.7.4.26, RBS20 before 2.7.2.26, and RBS50 before 2.7.4.26. HIGH 7.7 2.32% cvelistv5 2026-06-17
cve-2022-4059 CVE-2022-4059 CRITICAL 9.8 4.79% cvelistv5
cve-2022-4050 CVE-2022-4050 CRITICAL 9.8 4.76% cvelistv5
cve-2022-40139 Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability HIGH N/A 3.29% cvelistv5 2022-09-15
cve-2022-40022 CVE-2022-40022 CRITICAL 9.8 92.47% cvelistv5
cve-2022-39986 CVE-2022-39986 HIGH N/A 99.03% cvelistv5
cve-2022-39960 CVE-2022-39960 HIGH N/A 25.68% cvelistv5
cve-2022-39952 A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP request. CRITICAL 9.8 99.79% cvelistv5 2026-06-17
cve-2022-3982 Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload CRITICAL 9.8 4.54% cvelistv5 2026-06-17
cve-2022-3980 An XML External Entity (XEE) vulnerability allows server-side request forgery (SSRF) and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4. CRITICAL 9.8 8.91% cvelistv5 2026-06-17
cve-2022-39197 Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability MEDIUM 6.1 46.45% cvelistv5 2023-03-30
cve-2022-38840 CVE-2022-38840 HIGH 7.5 9.80% cvelistv5
cve-2022-38627 CVE-2022-38627 CRITICAL 9.8 4.30% cvelistv5
cve-2022-38296 CVE-2022-38296 HIGH N/A 5.14% cvelistv5
cve-2022-38181 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability HIGH 8.8 13.56% cvelistv5 2023-03-30
cve-2022-38130 CVE-2022-38130 HIGH N/A 54.07% cvelistv5
cve-2022-3801 CVE-2022-3801 MEDIUM 6.3 30.08% cvelistv5
cve-2022-37969 Windows Common Log File System Driver Elevation of Privilege Vulnerability HIGH 7.8 28.27% cvelistv5 2026-09-10
cve-2022-3723 SUSE CVE CVE-2022-3723 HIGH 8.8 7.92% cvelistv5 2025-03-15
cve-2022-37061 CVE-2022-37061 HIGH N/A 99.61% cvelistv5
cve-2022-37055 D-Link Routers Buffer Overflow Vulnerability CRITICAL 9.8 55.53% cvelistv5 2025-12-08
cve-2022-36923 CVE-2022-36923 MEDIUM 5.4 7.10% cvelistv5