Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2021-45420 | CVE-2021-45420 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-45382 | D-Link Multiple Routers Remote Code Execution Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2022-04-04 |
| cve-2021-44868 | CVE-2021-44868 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-4458 | CVE-2021-4458 | MEDIUM | 5.9 | N/A | cvelistv5 | |
| cve-2021-44427 | CVE-2021-44427 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2021-4374 | CVE-2021-4374 | CRITICAL | 9.1 | N/A | cvelistv5 | |
| cve-2021-43711 | CVE-2021-43711 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-42237 | Sitecore XP Remote Command Execution Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2022-03-25 |
| cve-2021-41653 | CVE-2021-41653 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-41649 | CVE-2021-41649 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-41569 | SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library (included by default) in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro. Users can escape the context of the configured user-controllable variable and append additional functions native to the macro but not included as variables within the library. This includes a function that retrieves files from the host OS. | HIGH | 7.5 | N/A | cvelistv5 | 2026-06-17 |
| cve-2021-41293 | CVE-2021-41293 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-41266 | CVE-2021-41266 | HIGH | 8.6 | N/A | cvelistv5 | |
| cve-2021-40870 | Aviatrix Controller Unrestricted Upload of File | CRITICAL | 9.8 | N/A | cvelistv5 | 2022-01-18 |
| cve-2021-40539 | Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2021-11-03 |
| cve-2021-39316 | CVE-2021-39316 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2021-39312 | CVE-2021-39312 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2021-39226 | grafana: Snapshot authentication bypass | HIGH | 7.3 | N/A | cvelistv5 | 2026-08-14 |
| cve-2021-39144 | SUSE CVE CVE-2021-39144 | HIGH | 8.1 | N/A | cvelistv5 | 2026-09-05 |
| cve-2021-38647 | Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2021-11-03 |
| cve-2021-38154 | CVE-2021-38154 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-37580 | CVE-2021-37580 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-37291 | CVE-2021-37291 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-3708 | CVE-2021-3708 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-36888 | CVE-2021-36888 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2021-36380 | Sunhillo SureLine OS Command Injection Vulnerablity | HIGH | N/A | N/A | cvelistv5 | 2024-03-05 |
| cve-2021-36356 | CVE-2021-36356 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-3577 | CVE-2021-3577 | HIGH | 8.8 | N/A | cvelistv5 | |
| cve-2021-35587 | Oracle Fusion Middleware Unspecified Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2022-11-28 |
| cve-2021-35464 | ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2021-11-03 |