Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2021-45967 | CVE-2021-45967 | HIGH | N/A | 20.80% | cvelistv5 | |
| cve-2021-45461 | CVE-2021-45461 | HIGH | N/A | 21.66% | cvelistv5 | |
| cve-2021-45422 | CVE-2021-45422 | HIGH | N/A | 3.24% | cvelistv5 | |
| cve-2021-45420 | CVE-2021-45420 | HIGH | N/A | 17.55% | cvelistv5 | |
| cve-2021-45382 | D-Link Multiple Routers Remote Code Execution Vulnerability | CRITICAL | 9.8 | 97.84% | cvelistv5 | 2022-04-04 |
| cve-2021-45092 | Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter. | CRITICAL | 9.8 | 40.58% | cvelistv5 | 2026-06-17 |
| cve-2021-45046 | SUSE CVE CVE-2021-45046 | HIGH | 8.1 | 99.98% | cvelistv5 | 2026-08-31 |
| cve-2021-44892 | CVE-2021-44892 | HIGH | N/A | 2.02% | cvelistv5 | |
| cve-2021-44868 | CVE-2021-44868 | HIGH | N/A | 1.41% | cvelistv5 | |
| cve-2021-4462 | CVE-2021-4462 | CRITICAL | 9.3 | 3.19% | cvelistv5 | |
| cve-2021-4458 | CVE-2021-4458 | MEDIUM | 5.9 | 0.35% | cvelistv5 | |
| cve-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability | CRITICAL | 9.8 | 99.11% | cvelistv5 | 2024-03-25 |
| cve-2021-44515 | Zoho Desktop Central Authentication Bypass Vulnerability | CRITICAL | 9.8 | 99.87% | cvelistv5 | 2021-12-10 |
| cve-2021-44427 | CVE-2021-44427 | CRITICAL | 9.8 | 50.64% | cvelistv5 | |
| cve-2021-44228 | log4j-core: Remote code execution in Log4j 2.x when logs contain an attacker-controlled string value | CRITICAL | 9.8 | 100.00% | cvelistv5 | 2026-09-03 |
| cve-2021-44207 | Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability | HIGH | 8.1 | 17.58% | cvelistv5 | 2024-12-23 |
| cve-2021-44168 | A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages. | LOW | 3.3 | 0.87% | cvelistv5 | 2026-06-17 |
| cve-2021-44077 | Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability | CRITICAL | 9.8 | 93.30% | cvelistv5 | 2021-12-01 |
| cve-2021-44026 | SUSE CVE CVE-2021-44026 | UNKNOWN | N/A | 69.88% | cvelistv5 | 2025-02-17 |
| cve-2021-43890 | Microsoft Windows AppX Installer Spoofing Vulnerability | HIGH | 7.1 | 10.29% | cvelistv5 | 2021-12-15 |
| cve-2021-43798 | grafana: path traversal vulnerability | HIGH | 7.5 | 88.50% | cvelistv5 | 2025-11-21 |
| cve-2021-43778 | CVE-2021-43778 | CRITICAL | 9.1 | 52.66% | cvelistv5 | |
| cve-2021-4374 | CVE-2021-4374 | CRITICAL | 9.1 | 16.41% | cvelistv5 | |
| cve-2021-43711 | CVE-2021-43711 | HIGH | N/A | 37.84% | cvelistv5 | |
| cve-2021-43287 | An issue was discovered in ThoughtWorks GoCD before 21.3.0. The business continuity add-on, which is enabled by default, leaks all secrets known to the GoCD server to unauthenticated attackers. | HIGH | 7.5 | 28.04% | cvelistv5 | 2026-06-17 |
| cve-2021-43226 | Microsoft Windows Privilege Escalation Vulnerability | HIGH | 7.8 | 3.07% | cvelistv5 | 2025-10-06 |
| cve-2021-43163 | A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the checkNet function in /cgi-bin/luci/api/auth. | CRITICAL | 9.8 | 2.14% | cvelistv5 | 2026-07-09 |
| cve-2021-42912 | CVE-2021-42912 | HIGH | N/A | 10.09% | cvelistv5 | |
| cve-2021-42567 | CVE-2021-42567 | HIGH | N/A | 8.06% | cvelistv5 | |
| cve-2021-42359 | CVE-2021-42359 | HIGH | 7.5 | 3.84% | cvelistv5 |