Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2022-2488 | WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection | HIGH | 8.0 | N/A | cvelistv5 | 2026-06-17 |
| cve-2022-2487 | CVE-2022-2487 | HIGH | 8.0 | N/A | cvelistv5 | |
| cve-2022-2486 | WAVLINK WN535K2/WN535K3 os command injection | HIGH | 8.0 | N/A | cvelistv5 | 2026-06-17 |
| cve-2022-24816 | OSGeo GeoServer JAI-EXT Code Injection Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2024-06-26 |
| cve-2022-24716 | SUSE CVE CVE-2022-24716 | UNKNOWN | N/A | N/A | cvelistv5 | 2025-02-16 |
| cve-2022-24706 | SUSE CVE CVE-2022-24706 | UNKNOWN | N/A | N/A | cvelistv5 | 2025-04-25 |
| cve-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability | MEDIUM | 6.1 | N/A | cvelistv5 | 2022-02-25 |
| cve-2022-24521 | Microsoft Windows CLFS Driver Privilege Escalation Vulnerability | HIGH | 7.8 | N/A | cvelistv5 | 2022-04-13 |
| cve-2022-24288 | Airflow: RCE in example DAGs | CRITICAL | 9.9 | N/A | cvelistv5 | 2025-11-21 |
| cve-2022-24260 | CVE-2022-24260 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-2414 | SUSE CVE CVE-2022-2414 | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-13 |
| cve-2022-24112 | Apache APISIX Authentication Bypass Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2022-08-25 |
| cve-2022-24086 | Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2022-02-15 |
| cve-2022-23961 | CVE-2022-23961 | MEDIUM | 6.1 | N/A | cvelistv5 | |
| cve-2022-23900 | CVE-2022-23900 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-2376 | CVE-2022-2376 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-23748 | Dante Discovery Process Control Vulnerability | HIGH | 7.8 | N/A | cvelistv5 | 2025-02-06 |
| cve-2022-23347 | CVE-2022-23347 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-23178 | CVE-2022-23178 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-2314 | CVE-2022-2314 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-23134 | Zabbix Frontend Improper Access Control Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2022-02-22 |
| cve-2022-23131 | Zabbix Frontend Authentication Bypass Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2022-02-22 |
| cve-2022-22965 | Spring Framework JDK 9+ Remote Code Execution Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2022-04-04 |
| cve-2022-22963 | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2022-08-25 |
| cve-2022-22960 | VMware Multiple Products Privilege Escalation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2022-04-15 |
| cve-2022-22956 | CVE-2022-22956 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-22954 | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2022-04-14 |
| cve-2022-22947 | VMware Spring Cloud Gateway Code Injection Vulnerability | CRITICAL | 10.0 | N/A | cvelistv5 | 2022-05-16 |
| cve-2022-2294 | WebRTC Heap Buffer Overflow Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2022-08-25 |
| cve-2022-22897 | CVE-2022-22897 | HIGH | N/A | N/A | cvelistv5 |