Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2021-27964 | CVE-2021-27964 | HIGH | N/A | 47.52% | cvelistv5 | |
| cve-2021-27670 | CVE-2021-27670 | HIGH | N/A | 61.27% | cvelistv5 | |
| cve-2021-26855 | Microsoft Exchange Server Remote Code Execution Vulnerability | CRITICAL | 9.1 | 100.00% | cvelistv5 | 2021-11-03 |
| cve-2021-26086 | Atlassian Jira Server and Data Center Path Traversal Vulnerability | MEDIUM | 5.3 | 100.00% | cvelistv5 | 2024-11-12 |
| cve-2021-26084 | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | CRITICAL | 9.8 | 100.00% | cvelistv5 | 2021-11-03 |
| cve-2021-25864 | CVE-2021-25864 | HIGH | N/A | 9.33% | cvelistv5 | |
| cve-2021-25646 | druid: Authenticated javascript code injection | HIGH | 8.8 | 99.00% | cvelistv5 | 2025-11-21 |
| cve-2021-24931 | CVE-2021-24931 | HIGH | N/A | 78.81% | cvelistv5 | |
| cve-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability | CRITICAL | 9.8 | 99.90% | cvelistv5 | 2021-11-03 |
| cve-2021-22214 | CVE-2021-22214 | MEDIUM | 6.8 | 27.81% | cvelistv5 | |
| cve-2021-21985 | VMware vCenter Server Improper Input Validation Vulnerability | CRITICAL | 9.8 | 100.00% | cvelistv5 | 2021-11-03 |
| cve-2021-21975 | VMware Server Side Request Forgery in vRealize Operations Manager API | HIGH | 7.5 | 78.29% | cvelistv5 | 2022-01-18 |
| cve-2021-21972 | VMware vCenter Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 99.87% | cvelistv5 | 2021-11-03 |
| cve-2021-21805 | CVE-2021-21805 | CRITICAL | 9.8 | 69.84% | cvelistv5 | |
| cve-2021-21402 | Unauthenticated Arbitrary File Access in Jellyfin | HIGH | 7.7 | 79.31% | cvelistv5 | 2026-06-17 |
| cve-2021-21234 | Directory Traversal | HIGH | 7.7 | 21.01% | cvelistv5 | 2026-06-17 |
| cve-2021-20123 | Draytek VigorConnect Path Traversal Vulnerability | HIGH | 7.5 | 90.23% | cvelistv5 | 2024-09-03 |
| cve-2020-9054 | Zyxel Multiple NAS Devices OS Command Injection Vulnerability | CRITICAL | 9.8 | 99.99% | cvelistv5 | 2022-03-25 |
| cve-2020-8982 | CVE-2020-8982 | HIGH | N/A | 27.15% | cvelistv5 | |
| cve-2020-8515 | Multiple DrayTek Vigor Routers Web Management Page Vulnerability | CRITICAL | 9.8 | 99.99% | cvelistv5 | 2021-11-03 |
| cve-2020-8209 | CVE-2020-8209 | HIGH | N/A | 48.66% | cvelistv5 | |
| cve-2020-8193 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | MEDIUM | 6.5 | 88.41% | cvelistv5 | 2021-11-03 |
| cve-2020-8191 | CVE-2020-8191 | HIGH | N/A | 26.14% | cvelistv5 | |
| cve-2020-7980 | CVE-2020-7980 | HIGH | N/A | 82.54% | cvelistv5 | |
| cve-2020-7209 | CVE-2020-7209 | HIGH | N/A | 98.75% | cvelistv5 | |
| cve-2020-5902 | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | CRITICAL | 9.8 | 100.00% | cvelistv5 | 2021-11-03 |
| cve-2020-4427 | IBM Data Risk Manager Security Bypass Vulnerability | CRITICAL | 9.0 | 70.03% | cvelistv5 | 2021-11-03 |
| cve-2020-36870 | CVE-2020-36870 | CRITICAL | 9.2 | 0.75% | cvelistv5 | |
| cve-2020-35665 | CVE-2020-35665 | HIGH | N/A | 78.48% | cvelistv5 | |
| cve-2020-35131 | cockpit: registerCriteriaFunction in lib/MongoLite/Database.php allows for a Remote Command Execution via custom php code injection | CRITICAL | 9.8 | 51.30% | cvelistv5 | 2025-11-21 |