Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2021-24762 | CVE-2021-24762 | HIGH | N/A | 86.78% | cvelistv5 | |
| cve-2021-24499 | CVE-2021-24499 | HIGH | N/A | 60.11% | cvelistv5 | |
| cve-2021-24442 | CVE-2021-24442 | HIGH | N/A | 46.00% | cvelistv5 | |
| cve-2021-24285 | CVE-2021-24285 | HIGH | N/A | 14.70% | cvelistv5 | |
| cve-2021-24284 | CVE-2021-24284 | HIGH | N/A | 42.14% | cvelistv5 | |
| cve-2021-24227 | CVE-2021-24227 | HIGH | N/A | 5.93% | cvelistv5 | |
| cve-2021-24212 | CVE-2021-24212 | HIGH | N/A | 7.91% | cvelistv5 | |
| cve-2021-22911 | CVE-2021-22911 | HIGH | N/A | 95.24% | cvelistv5 | |
| cve-2021-22707 | CVE-2021-22707 | HIGH | N/A | 64.61% | cvelistv5 | |
| cve-2021-22502 | Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability | CRITICAL | 9.8 | 96.74% | cvelistv5 | 2021-11-03 |
| cve-2021-22053 | Applications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to execute code submitted within the request URI path during the resolution of view templates. When a request is made at `/hystrix/monitor;[user-provided data]`, the path elements following `hystrix/monitor` are being evaluated as SpringEL expressions, which can lead to code execution. | HIGH | 8.8 | 13.23% | cvelistv5 | 2026-06-17 |
| cve-2021-22005 | VMware vCenter Server File Upload Vulnerability | CRITICAL | 9.8 | 100.00% | cvelistv5 | 2021-11-03 |
| cve-2021-21978 | CVE-2021-21978 | HIGH | N/A | 99.00% | cvelistv5 | |
| cve-2021-21479 | CVE-2021-21479 | HIGH | 8.1 | 10.12% | cvelistv5 | |
| cve-2021-21389 | CVE-2021-21389 | HIGH | 8.1 | 13.52% | cvelistv5 | |
| cve-2021-21315 | System Information Library for Node.JS Command Injection | HIGH | 7.1 | 90.67% | cvelistv5 | 2022-01-18 |
| cve-2021-21307 | CVE-2021-21307 | HIGH | 8.6 | 89.19% | cvelistv5 | |
| cve-2021-20837 | CVE-2021-20837 | HIGH | N/A | 88.14% | cvelistv5 | |
| cve-2021-20617 | CVE-2021-20617 | HIGH | N/A | 7.87% | cvelistv5 | |
| cve-2021-20166 | CVE-2021-20166 | HIGH | N/A | 2.20% | cvelistv5 | |
| cve-2021-20124 | Draytek VigorConnect Path Traversal Vulnerability | HIGH | 7.5 | 96.31% | cvelistv5 | 2024-09-03 |
| cve-2021-20028 | SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability | CRITICAL | N/A | 30.08% | cvelistv5 | 2022-03-28 |
| cve-2021-1497 | Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | HIGH | N/A | 99.93% | cvelistv5 | 2021-11-03 |
| cve-2020-8958 | CVE-2020-8958 | HIGH | N/A | 46.64% | cvelistv5 | |
| cve-2020-8656 | CVE-2020-8656 | HIGH | N/A | 84.60% | cvelistv5 | |
| cve-2020-7796 | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability | CRITICAL | 9.8 | 84.42% | cvelistv5 | 2026-02-17 |
| cve-2020-7136 | CVE-2020-7136 | HIGH | N/A | 79.52% | cvelistv5 | |
| cve-2020-6287 | SAP NetWeaver Missing Authentication for Critical Function Vulnerability | CRITICAL | 10.0 | 94.72% | cvelistv5 | 2021-11-03 |
| cve-2020-5847 | Unraid Remote Code Execution Vulnerability | CRITICAL | 9.8 | 95.84% | cvelistv5 | 2021-11-03 |
| cve-2020-4463 | CVE-2020-4463 | HIGH | 8.2 | 31.59% | cvelistv5 |