Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2022-0846 | CVE-2022-0846 | HIGH | N/A | 8.79% | cvelistv5 | |
| cve-2022-0827 | CVE-2022-0827 | HIGH | N/A | 9.13% | cvelistv5 | |
| cve-2022-0826 | CVE-2022-0826 | HIGH | N/A | 9.13% | cvelistv5 | |
| cve-2022-0786 | CVE-2022-0786 | HIGH | N/A | 13.27% | cvelistv5 | |
| cve-2022-0785 | CVE-2022-0785 | HIGH | N/A | 9.04% | cvelistv5 | |
| cve-2022-0769 | Users Ultra <= 3.1.0 - Unauthenticated SQL Injection | CRITICAL | 9.8 | 8.33% | cvelistv5 | 2026-06-17 |
| cve-2022-0760 | CVE-2022-0760 | HIGH | N/A | 10.82% | cvelistv5 | |
| cve-2022-0747 | CVE-2022-0747 | HIGH | N/A | 14.88% | cvelistv5 | |
| cve-2022-0679 | CVE-2022-0679 | HIGH | N/A | 47.83% | cvelistv5 | |
| cve-2022-0656 | CVE-2022-0656 | HIGH | N/A | 7.88% | cvelistv5 | |
| cve-2022-0592 | CVE-2022-0592 | HIGH | N/A | 10.43% | cvelistv5 | |
| cve-2022-0540 | CVE-2022-0540 | CRITICAL | 9.8 | 88.06% | cvelistv5 | |
| cve-2021-45092 | Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter. | CRITICAL | 9.8 | 40.58% | cvelistv5 | 2026-06-17 |
| cve-2021-4462 | CVE-2021-4462 | CRITICAL | 9.3 | 3.19% | cvelistv5 | |
| cve-2021-44515 | Zoho Desktop Central Authentication Bypass Vulnerability | CRITICAL | 9.8 | 99.87% | cvelistv5 | 2021-12-10 |
| cve-2021-44228 | log4j-core: Remote code execution in Log4j 2.x when logs contain an attacker-controlled string value | CRITICAL | 9.8 | 100.00% | cvelistv5 | 2026-09-03 |
| cve-2021-43778 | CVE-2021-43778 | CRITICAL | 9.1 | 52.66% | cvelistv5 | |
| cve-2021-43287 | CVE-2021-43287 | HIGH | N/A | 28.04% | cvelistv5 | |
| cve-2021-42013 | Apache HTTP Server Path Traversal Vulnerability | CRITICAL | N/A | 99.96% | cvelistv5 | 2021-11-03 |
| cve-2021-4191 | CVE-2021-4191 | MEDIUM | 5.3 | 80.00% | cvelistv5 | |
| cve-2021-41277 | Metabase GeoJSON API Local File Inclusion Vulnerability | CRITICAL | 10.0 | 97.18% | cvelistv5 | 2024-11-12 |
| cve-2021-40875 | CVE-2021-40875 | HIGH | N/A | 48.42% | cvelistv5 | |
| cve-2021-40438 | httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:" | CRITICAL | 9.0 | 100.00% | cvelistv5 | 2026-08-08 |
| cve-2021-36260 | Hikvision Improper Input Validation | CRITICAL | 9.8 | 99.87% | cvelistv5 | 2022-01-10 |
| cve-2021-34473 | Microsoft Exchange Server Remote Code Execution Vulnerability | CRITICAL | 9.1 | 100.00% | cvelistv5 | 2021-11-03 |
| cve-2021-33564 | CVE-2021-33564 | HIGH | N/A | 72.14% | cvelistv5 | |
| cve-2021-3223 | CVE-2021-3223 | HIGH | N/A | 18.51% | cvelistv5 | |
| cve-2021-32030 | ASUS Routers Improper Authentication Vulnerability | CRITICAL | 9.8 | 99.39% | cvelistv5 | 2025-06-02 |
| cve-2021-3129 | Laravel Ignition File Upload Vulnerability | CRITICAL | 9.8 | 99.94% | cvelistv5 | 2023-09-18 |
| cve-2021-29442 | Authentication bypass | HIGH | 8.6 | 66.63% | cvelistv5 | 2026-06-17 |