Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2022-28079 college_management_system_project college_management_system Improper Neutralization of Special Elements used in an SQL Command HIGH N/A 28.51% cvelistv5 2023-11-13
cve-2022-28005 3cx 3cx Insufficiently Protected Credentials HIGH N/A 8.35% cvelistv5 2023-11-25
cve-2022-27927 microfinance_management_system_project microfinance_management_system Improper Neutralization of Special Elements used in an SQL Command HIGH N/A 13.83% cvelistv5 2026-09-14
cve-2022-27926 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability MEDIUM 6.1 17.63% cvelistv5 2023-03-30
cve-2022-27925 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability HIGH 7.2 98.68% cvelistv5 2022-08-11
cve-2022-27924 Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability HIGH 7.5 93.91% cvelistv5 2022-08-04
cve-2022-27593 QNAP Photo Station Externally Controlled Reference Vulnerability CRITICAL 10.0 87.91% cvelistv5 2022-05-18
cve-2022-27518 Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability HIGH N/A 6.86% cvelistv5 2022-12-13
cve-2022-26925 Microsoft Windows LSA Spoofing Vulnerability CRITICAL N/A 10.48% cvelistv5 2022-05-10
cve-2022-26923 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability HIGH 8.8 83.50% cvelistv5 2022-08-18
cve-2022-26904 Microsoft Windows User Profile Service Privilege Escalation Vulnerability HIGH N/A 16.95% cvelistv5 2022-04-14
cve-2022-26871 Trend Micro Apex Central Arbitrary File Upload Vulnerability HIGH N/A 19.48% cvelistv5 2022-03-31
cve-2022-26833 openautomationsoftware oas_platform Missing Authentication for Critical Functionality CRITICAL 9.4 37.64% cvelistv5 2024-01-22
cve-2022-26501 Veeam Backup & Replication Remote Code Execution Vulnerability CRITICAL 9.8 4.10% cvelistv5 2022-10-24
cve-2022-26486 Mozilla Firefox Use-After-Free Vulnerability HIGH N/A 2.36% cvelistv5 2022-03-05
cve-2022-26485 Mozilla Firefox Use-After-Free Vulnerability HIGH N/A 14.26% cvelistv5 2022-03-05
cve-2022-26352 dotCMS Unrestricted Upload of File Vulnerability CRITICAL N/A 91.25% cvelistv5 2022-05-18
cve-2022-26258 D-Link DIR-820L Remote Code Execution Vulnerability HIGH N/A 91.63% cvelistv5 2022-09-06
cve-2022-26186 TOTOLINK n600r_firmware Improper Neutralization of Special Elements used in a Command HIGH N/A 3.95% cvelistv5 2022-04-01
cve-2022-26143 MiCollab, MiVoice Business Express Access Control Vulnerability HIGH N/A 87.33% cvelistv5 2022-03-08
cve-2022-26138 Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability CRITICAL N/A 98.24% cvelistv5 2022-07-29
cve-2022-26134 Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability CRITICAL 9.8 100.00% cvelistv5 2022-03-06
cve-2022-2586 Linux Kernel Use-After-Free Vulnerability HIGH N/A 10.20% cvelistv5 2024-06-19
cve-2022-25497 cuppacms cuppacms Files or Directories Accessible to External Parties HIGH N/A 3.64% cvelistv5 2026-09-17
cve-2022-25487 thedigitalcraft atomcms Unrestricted Upload of File with Dangerous Type HIGH N/A 53.84% cvelistv5 2023-12-03
cve-2022-25486 cuppacms cuppacms Inclusion of Functionality from Untrusted Control Sphere HIGH N/A 9.97% cvelistv5 2024-01-22
cve-2022-25485 cuppacms cuppacms Inclusion of Functionality from Untrusted Control Sphere HIGH N/A 7.93% cvelistv5 2024-01-22
cve-2022-25369 Dynamicweb Logic Flaw Leading to Remote Code Execution HIGH N/A 39.56% cvelistv5 2023-11-14
cve-2022-25322 zerof web_server Improper Neutralization of Special Elements used in an SQL Command HIGH N/A 9.58% cvelistv5 2024-01-22
cve-2022-25237 Bonita Web RestAPIAuthorizationFilter Authentication Bypass Vulnerability HIGH N/A 56.72% cvelistv5 2024-05-15