Exploited vulnerabilities
CVEs published in the last 120 days, plus everything on CISA’s known-exploited list. Scores, exploit likelihood and exploitation status in one place.
| Score | CVE | Affected | EPSS | Published |
|---|---|---|---|---|
| 7.8 high | CVE-2022-22675 KEV | Apple iOS and iPadOS An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.. | 12% | 26 May 2022 |
| 5.5 medium | CVE-2022-22674 KEV | Apple macOS An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory. | 1.1% | 26 May 2022 |
| 6.5 medium | CVE-2022-20821 KEV | Cisco IOS XR Software A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is running within the NOSi container. This vulnerability exists because the health check RPM opens TCP port 6379 by default upon activation. An attacker could exploit this vulnerability by connecting to the Redis instance on the open port. A successful exploit could allow the attacker to write to the Redis in-memory database, write arbitrary files to the container filesystem, and retrieve information about the Redis database. Given the configuration of the sandboxed container that the Redis instance runs in, a remote attacker would be unable to execute remote code or abuse the integrity of the Cisco IOS XR Software host system. | 11% | 26 May 2022 |
| 9.8 critical | CVE-2022-29303 KEV | contec sv-cpt-mc310 firmware SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php. | 98% | 12 May 2022 |
| 9.8 critical | CVE-2022-30525 KEV | Zyxel USG FLEX 100(W) firmware A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 50(W) firmware versions 5.10 through 5.21 Patch 1, USG20(W)-VPN firmware versions 5.10 through 5.21 Patch 1, ATP series firmware versions 5.10 through 5.21 Patch 1, VPN series firmware versions 4.60 through 5.21 Patch 1, which could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device. | >99% | 12 May 2022 |
| 5.9 medium | CVE-2022-26925 KEV | Microsoft Windows 10 Version 1809 Windows LSA Spoofing Vulnerability | 10% | 10 May 2022 |
| 8.8 high | CVE-2022-26923 KEV | Microsoft Windows 10 Version 1809 Active Directory Domain Services Elevation of Privilege Vulnerability | 84% | 10 May 2022 |
| 7.5 high | CVE-2022-30333 KEV | rarlab unrar RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected. | 99% | 9 May 2022 |
| 9.8 critical | CVE-2022-1388 KEV | F5 BIG-IP On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated | >99% | 5 May 2022 |
| 9.8 critical | CVE-2022-24706 KEV | Apache Software Foundation Apache CouchDB In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations. | 93% | 26 Apr 2022 |
| 9.8 critical | CVE-2022-29499 KEV | mitel mivoice connect The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA. | 55% | 26 Apr 2022 |
| 6.1 medium | CVE-2022-27926 KEV | synacor zimbra collaboration suite A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters. | 18% | 21 Apr 2022 |
| 7.2 high | CVE-2022-27925 KEV | synacor zimbra collaboration suite Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal. | 99% | 21 Apr 2022 |
| 7.5 high | CVE-2022-27924 KEV | synacor zimbra collaboration suite Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries. | 94% | 21 Apr 2022 |
| 9.8 critical | CVE-2022-21445 KEV | Oracle Corporation Application Development Framework (ADF) Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Development Framework (ADF). Successful attacks of this vulnerability can result in takeover of Oracle Application Development Framework (ADF). Note: Oracle Application Development Framework (ADF) is downloaded via Oracle JDeveloper Product. Please refer to Fusion Middleware Patch Advisor for more details. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). | 62% | 19 Apr 2022 |
| 9.8 critical | CVE-2022-29464 KEV | wso2 api manager Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a ../../../../repository/deployment/server/webapps directory. This affects WSO2 API Manager 2.2.0 up to 4.0.0, WSO2 Identity Server 5.2.0 up to 5.11.0, WSO2 Identity Server Analytics 5.4.0, 5.4.1, 5.5.0 and 5.6.0, WSO2 Identity Server as Key Manager 5.3.0 up to 5.11.0, WSO2 Enterprise Integrator 6.2.0 up to 6.6.0, WSO2 Open Banking AM 1.4.0 up to 2.0.0 and WSO2 Open Banking KM 1.4.0, up to 2.0.0. | >99% | 18 Apr 2022 |
| 6.8 medium | CVE-2022-28810 KEV | zohocorp manageengine adselfservice plus Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the policy custom script feature. Due to the use of a default administrator password, attackers may be able to abuse this functionality with minimal effort. Additionally, a remote and partially authenticated attacker may be able to inject arbitrary commands into the custom script due to an unsanitized password field. | 71% | 18 Apr 2022 |
| 7.0 high | CVE-2022-26904 KEV | Microsoft Windows 10 Version 1809 Windows User Profile Service Elevation of Privilege Vulnerability | 17% | 15 Apr 2022 |
| 7.8 high | CVE-2022-24521 KEV | Microsoft Windows 10 Version 1809 Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.1% | 15 Apr 2022 |
| 10.0 critical | CVE-2022-24816 KEV | geosolutions-it jai-ext JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects the downstream GeoServer project. Version 1.2.22 will contain a patch that disables the ability to inject malicious code into the resulting script. Users unable to upgrade may negate the ability to compile Jiffle scripts from the final application, by removing janino-x.y.z.jar from the classpath. | >99% | 13 Apr 2022 |