Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2021-46422 | CVE-2021-46422 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-46417 | CVE-2021-46417 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-46381 | CVE-2021-46381 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-46379 | CVE-2021-46379 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-45967 | CVE-2021-45967 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-45461 | CVE-2021-45461 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-45422 | CVE-2021-45422 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-45420 | CVE-2021-45420 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-45382 | D-Link Multiple Routers Remote Code Execution Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2022-04-04 |
| cve-2021-45092 | Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter. | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-06-17 |
| cve-2021-45046 | Apache Log4j2 Deserialization of Untrusted Data Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2023-05-01 |
| cve-2021-44892 | CVE-2021-44892 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-44868 | CVE-2021-44868 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-4462 | CVE-2021-4462 | CRITICAL | 9.3 | N/A | cvelistv5 | |
| cve-2021-4458 | CVE-2021-4458 | MEDIUM | 5.9 | N/A | cvelistv5 | |
| cve-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2024-03-25 |
| cve-2021-44515 | Zoho Desktop Central Authentication Bypass Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2021-12-10 |
| cve-2021-44427 | CVE-2021-44427 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2021-12-10 |
| cve-2021-44207 | Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability | HIGH | 8.1 | N/A | cvelistv5 | 2024-12-23 |
| cve-2021-44168 | Fortinet FortiOS Arbitrary File Download | LOW | 3.3 | N/A | cvelistv5 | 2021-12-10 |
| cve-2021-44077 | Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2021-12-01 |
| cve-2021-44026 | Roundcube Webmail SQL Injection Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2023-06-22 |
| cve-2021-43890 | Microsoft Windows AppX Installer Spoofing Vulnerability | HIGH | 7.1 | N/A | cvelistv5 | 2021-12-15 |
| cve-2021-43798 | Grafana Path Traversal Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2025-10-09 |
| cve-2021-43778 | CVE-2021-43778 | CRITICAL | 9.1 | N/A | cvelistv5 | |
| cve-2021-4374 | CVE-2021-4374 | CRITICAL | 9.1 | N/A | cvelistv5 | |
| cve-2021-43711 | CVE-2021-43711 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-43287 | CVE-2021-43287 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-43226 | Microsoft Windows Privilege Escalation Vulnerability | HIGH | 7.8 | N/A | cvelistv5 | 2025-10-06 |