Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2021-35395 | Realtek AP-Router SDK Buffer Overflow Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2021-11-03 |
| cve-2021-35250 | CVE-2021-35250 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2021-34993 | CVE-2021-34993 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2021-34624 | CVE-2021-34624 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2021-34187 | CVE-2021-34187 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-33690 | CVE-2021-33690 | CRITICAL | 9.9 | N/A | cvelistv5 | |
| cve-2021-33544 | CVE-2021-33544 | HIGH | 7.2 | N/A | cvelistv5 | |
| cve-2021-33357 | CVE-2021-33357 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-33044 | Dahua IP Camera Authentication Bypass Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2024-08-21 |
| cve-2021-3297 | CVE-2021-3297 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-31755 | Tenda AC11 Router Stack Buffer Overflow Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2021-11-03 |
| cve-2021-31602 | CVE-2021-31602 | MEDIUM | 5.3 | N/A | cvelistv5 | |
| cve-2021-30497 | CVE-2021-30497 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-30118 | CVE-2021-30118 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2021-29441 | Authentication bypass | HIGH | 8.6 | N/A | cvelistv5 | 2026-06-17 |
| cve-2021-29203 | CVE-2021-29203 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-28799 | QNAP NAS Improper Authorization Vulnerability | CRITICAL | 10.0 | N/A | cvelistv5 | 2022-03-31 |
| cve-2021-28151 | CVE-2021-28151 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-27931 | CVE-2021-27931 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-27855 | CVE-2021-27855 | HIGH | 8.8 | N/A | cvelistv5 | |
| cve-2021-27850 | CVE-2021-27850 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-27561 | Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2021-11-03 |
| cve-2021-27358 | grafana: snapshot feature allow an unauthenticated remote attacker to trigger a DoS via a remote API call | HIGH | 7.5 | N/A | cvelistv5 | 2026-03-21 |
| cve-2021-26295 | CVE-2021-26295 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-26294 | CVE-2021-26294 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-25899 | CVE-2021-25899 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-25114 | CVE-2021-25114 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-25003 | CVE-2021-25003 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-24943 | CVE-2021-24943 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-24915 | Contest Gallery < 13.1.0.6 - Missing Access Controls to Unauthenticated SQL injection / Email Address Disclosure | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-06-17 |