By publication date
Exploited and new serious CVEs: February 2022
104 records · 18 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
Page 2 of 2
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
47Plan | CVE-2022-25359Proof of concept | On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files.iclinks · scadaflex ii firmware · CWE-306 | Critical9.1 | — | 37.2% | Feb 26, 2022 |
25Monitor | CVE-2022-26159Proof of concept | The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/serviceametys · ametys · CWE-425 | Medium5.3 | — | 13.3% | Feb 28, 2022 |
61This week | CVE-2022-0412Proof of concept | TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injectiontemplateinvaders · ti woocommerce wishlist · CWE-89 | Critical9.8 | — | 73.9% | Feb 28, 2022 |
39Monitor | CVE-2022-24711No exploit | Remote CLI Command Execution Vulnerability in CodeIgniter4codeigniter · codeigniter · CWE-20 | Critical9.8 | — | 1.1% | Feb 28, 2022 |
- CVE-2022-2535947Plan
On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files.
CriticalCVSS 9.1Proof of conceptEPSS 37%iclinks · scadaflex ii firmwareFeb 26, 2022
- CVE-2022-2615925Monitor
The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service
MediumCVSS 5.3Proof of conceptEPSS 13%ametys · ametysFeb 28, 2022
- CVE-2022-041261This week
TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injection
CriticalCVSS 9.8Proof of conceptEPSS 73%templateinvaders · ti woocommerce wishlistFeb 28, 2022
- CVE-2022-2471139Monitor
Remote CLI Command Execution Vulnerability in CodeIgniter4
CriticalCVSS 9.8No exploitEPSS 1%codeigniter · codeigniterFeb 28, 2022