Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2022-28079 CVE-2022-28079 HIGH N/A N/A cvelistv5
cve-2022-28005 CVE-2022-28005 HIGH N/A N/A cvelistv5
cve-2022-27926 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability MEDIUM 6.1 N/A cvelistv5 2023-04-03
cve-2022-27925 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability HIGH 7.2 N/A cvelistv5 2022-08-11
cve-2022-27924 Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability HIGH 7.5 N/A cvelistv5 2022-08-04
cve-2022-27593 QNAP Photo Station Externally Controlled Reference Vulnerability CRITICAL 10.0 N/A cvelistv5 2022-09-08
cve-2022-27518 Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability HIGH N/A N/A cvelistv5 2022-12-13
cve-2022-26925 Microsoft Windows LSA Spoofing Vulnerability HIGH 8.1 N/A cvelistv5 2022-07-01
cve-2022-26923 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability HIGH 8.8 N/A cvelistv5 2022-08-18
cve-2022-26904 Microsoft Windows User Profile Service Privilege Escalation Vulnerability HIGH N/A N/A cvelistv5 2022-04-25
cve-2022-26871 Trend Micro Apex Central Arbitrary File Upload Vulnerability HIGH N/A N/A cvelistv5 2022-03-31
cve-2022-26833 CVE-2022-26833 CRITICAL 9.4 N/A cvelistv5
cve-2022-26501 Veeam Backup & Replication Remote Code Execution Vulnerability CRITICAL 9.8 N/A cvelistv5 2022-12-13
cve-2022-26486 Mozilla Firefox Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2022-03-07
cve-2022-26485 SUSE CVE CVE-2022-26485 HIGH 8.8 N/A cvelistv5 2026-08-29
cve-2022-26352 dotCMS Unrestricted Upload of File Vulnerability CRITICAL 9.8 N/A cvelistv5 2022-08-25
cve-2022-26258 D-Link DIR-820L Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2022-09-08
cve-2022-26186 CVE-2022-26186 HIGH N/A N/A cvelistv5
cve-2022-26143 MiCollab, MiVoice Business Express Access Control Vulnerability HIGH N/A N/A cvelistv5 2022-03-25
cve-2022-26138 Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability CRITICAL 9.8 N/A cvelistv5 2022-07-29
cve-2022-26134 Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability CRITICAL 9.8 N/A cvelistv5 2022-06-02
cve-2022-2586 SUSE CVE CVE-2022-2586 MEDIUM 6.7 N/A cvelistv5 2026-09-05
cve-2022-25487 CVE-2022-25487 HIGH N/A N/A cvelistv5
cve-2022-25486 CVE-2022-25486 HIGH N/A N/A cvelistv5
cve-2022-25485 CVE-2022-25485 HIGH N/A N/A cvelistv5
cve-2022-25369 An issue was discovered in Dynamicweb before 9.12.8. An attacker can add a new administrator user without authentication. This flaw exists due to a logic issue when determining if the setup phases of the product can be run again. Once an attacker is authenticated as the new admin user they have added, it is possible to upload an executable file and achieve command execution. This is fixed in 9.5.9, 9.6.16, 9.7.8, 9.8.11, 9.9.8, 9.10.18, 9.12.8, and 9.13.0 (and later). CRITICAL 9.8 N/A cvelistv5 2026-06-17
cve-2022-25322 CVE-2022-25322 HIGH N/A N/A cvelistv5
cve-2022-25237 CVE-2022-25237 HIGH N/A N/A cvelistv5
cve-2022-25075 CVE-2022-25075 HIGH N/A N/A cvelistv5
cve-2022-24990 TerraMaster OS Remote Command Execution Vulnerability CRITICAL N/A N/A cvelistv5 2023-02-10