Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2021-4102 chromium-browser: Use after free in V8 HIGH 8.8 7.84% cvelistv5 2025-11-21
cve-2021-44515 Zoho Desktop Central Authentication Bypass Vulnerability CRITICAL 9.8 99.87% cvelistv5 2021-12-10
cve-2021-44228 log4j-core: Remote code execution in Log4j 2.x when logs contain an attacker-controlled string value CRITICAL 9.8 100.00% cvelistv5 2026-09-03
cve-2021-44168 A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages. LOW 3.3 0.87% cvelistv5 2026-06-17
cve-2021-35394 Realtek Jungle SDK Remote Code Execution Vulnerability CRITICAL 9.8 99.86% cvelistv5 2021-12-10
cve-2020-8816 Pi-Hole AdminLTE Remote Code Execution Vulnerability CRITICAL 9.1 78.19% cvelistv5 2021-12-10
cve-2020-17463 Fuel CMS SQL Injection Vulnerability CRITICAL 9.8 89.69% cvelistv5 2021-12-10
cve-2019-7238 Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability CRITICAL 9.8 77.15% cvelistv5 2021-12-10
cve-2019-13272 Linux Kernel Improper Privilege Management Vulnerability HIGH N/A 52.20% cvelistv5 2021-12-10
cve-2019-10758 MongoDB mongo-express Remote Code Execution Vulnerability HIGH N/A 84.73% cvelistv5 2021-12-10
cve-2019-0193 Apache Solr DataImportHandler Code Injection Vulnerability HIGH N/A 83.55% cvelistv5 2021-12-10
cve-2017-17562 Embedthis GoAhead Remote Code Execution Vulnerability HIGH N/A 96.26% cvelistv5 2021-12-10
cve-2017-12149 Red Hat JBoss Application Server Remote Code Execution Vulnerability CRITICAL N/A 90.71% cvelistv5 2021-12-10
cve-2010-1871 Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability HIGH N/A 83.40% cvelistv5 2021-12-10
cve-2021-44077 Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability CRITICAL 9.8 93.30% cvelistv5 2021-12-01
cve-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:" CRITICAL 9.0 100.00% cvelistv5 2026-08-08
cve-2021-37415 Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability CRITICAL 9.8 99.83% cvelistv5 2021-12-01
cve-2020-11261 Qualcomm Multiple Chipsets Improper Input Validation Vulnerability HIGH N/A 1.60% cvelistv5 2021-12-01
cve-2018-14847 MikroTik Router OS Directory Traversal Vulnerability CRITICAL 9.1 96.09% cvelistv5 2021-12-01
cve-2021-42321 Microsoft Exchange Server Remote Code Execution Vulnerability HIGH 8.8 91.74% cvelistv5 2021-11-17
cve-2021-42292 Microsoft Excel Security Feature Bypass HIGH 7.8 43.00% cvelistv5 2021-11-17
cve-2021-40449 Microsoft Windows Win32k Privilege Escalation Vulnerability HIGH 7.8 74.13% cvelistv5 2021-11-17
cve-2021-22204 perl-Image-ExifTool: improper neutralization of user data in the DjVu file format allows arbitrary code execution when parsing a malicious image MEDIUM 6.8 99.98% cvelistv5 2025-11-21
cve-2021-42258 BQE BillQuick Web Suite SQL Injection Vulnerability CRITICAL 9.8 74.43% cvelistv5 2021-11-03
cve-2021-42013 httpd: path traversal and remote code execution (incomplete fix of CVE-2021-41773) HIGH 8.1 99.96% cvelistv5 2026-08-04
cve-2021-41773 httpd: path traversal and file disclosure vulnerability HIGH 7.5 99.99% cvelistv5 2026-08-04
cve-2021-40539 Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability CRITICAL 9.8 98.96% cvelistv5 2021-11-03
cve-2021-40444 Microsoft MSHTML Remote Code Execution Vulnerability CRITICAL N/A 97.45% cvelistv5 2021-11-03
cve-2021-38649 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability HIGH N/A 2.89% cvelistv5 2021-11-03
cve-2021-38648 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability HIGH N/A 11.42% cvelistv5 2021-11-03