Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2022-31161 | CVE-2022-31161 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-31137 | Unauthenticated Remote Code Execution in Roxy-WI | CRITICAL | 10.0 | N/A | cvelistv5 | 2026-06-17 |
| cve-2022-31126 | Unauthenticated Remote Code Execution in Roxy-wi | CRITICAL | 10.0 | N/A | cvelistv5 | 2026-06-17 |
| cve-2022-3075 | Google Chromium Mojo Insufficient Data Validation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2022-09-08 |
| cve-2022-30525 | Zyxel Multiple Firewalls OS Command Injection Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2022-05-16 |
| cve-2022-3038 | Google Chromium Network Service Use-After-Free Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2023-03-30 |
| cve-2022-30333 | SUSE CVE CVE-2022-30333 | MEDIUM | 6.6 | N/A | cvelistv5 | 2026-08-05 |
| cve-2022-30190 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | HIGH | 7.8 | N/A | cvelistv5 | 2022-06-14 |
| cve-2022-2958 | BadgeOS < 3.7.1.3 - Subscriber+ SQLi | HIGH | 8.8 | N/A | cvelistv5 | 2026-06-17 |
| cve-2022-29499 | Mitel MiVoice Connect Data Validation Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2022-06-27 |
| cve-2022-29464 | WSO2 Multiple Products Unrestrictive Upload of File Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2022-04-25 |
| cve-2022-29383 | CVE-2022-29383 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-29303 | SolarView Compact Command Injection Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2023-07-13 |
| cve-2022-29153 | consul: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector | HIGH | 7.5 | N/A | cvelistv5 | 2026-08-14 |
| cve-2022-29081 | CVE-2022-29081 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-29078 | ejs: server-side template injection in outputFunctionName | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-08-04 |
| cve-2022-29014 | CVE-2022-29014 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-29013 | CVE-2022-29013 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-29007 | CVE-2022-29007 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-28912 | CVE-2022-28912 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-28908 | CVE-2022-28908 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-28907 | CVE-2022-28907 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-28906 | CVE-2022-28906 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-28810 | Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability | MEDIUM | 6.8 | N/A | cvelistv5 | 2023-03-07 |
| cve-2022-2856 | Google Chromium Intents Insufficient Input Validation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2022-08-18 |
| cve-2022-28365 | CVE-2022-28365 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-28363 | CVE-2022-28363 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-28290 | Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request | MEDIUM | 6.1 | N/A | cvelistv5 | 2026-06-17 |
| cve-2022-28221 | CVE-2022-28221 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-28219 | CVE-2022-28219 | HIGH | N/A | N/A | cvelistv5 |