Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2021-43163 | A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the checkNet function in /cgi-bin/luci/api/auth. | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-07-09 |
| cve-2021-42912 | CVE-2021-42912 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-42567 | CVE-2021-42567 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-42359 | CVE-2021-42359 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2021-42321 | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH | 8.8 | N/A | cvelistv5 | 2021-11-17 |
| cve-2021-42292 | Microsoft Excel Security Feature Bypass | HIGH | 7.8 | N/A | cvelistv5 | 2021-11-17 |
| cve-2021-42287 | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2022-04-11 |
| cve-2021-42278 | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | HIGH | 7.5 | N/A | cvelistv5 | 2022-04-11 |
| cve-2021-42258 | BQE BillQuick Web Suite SQL Injection Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2021-11-03 |
| cve-2021-42237 | Sitecore XP Remote Command Execution Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2022-03-25 |
| cve-2021-42013 | Apache HTTP Server Path Traversal Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2021-11-03 |
| cve-2021-4191 | CVE-2021-4191 | MEDIUM | 5.3 | N/A | cvelistv5 | |
| cve-2021-41773 | SUSE CVE CVE-2021-41773 | HIGH | 7.5 | N/A | cvelistv5 | 2026-08-31 |
| cve-2021-41653 | CVE-2021-41653 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-41649 | CVE-2021-41649 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-41569 | SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library (included by default) in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro. Users can escape the context of the configured user-controllable variable and append additional functions native to the macro but not included as variables within the library. This includes a function that retrieves files from the host OS. | HIGH | 7.5 | N/A | cvelistv5 | 2026-06-17 |
| cve-2021-41379 | Microsoft Windows Installer Privilege Escalation Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2022-03-03 |
| cve-2021-41357 | Microsoft Win32k Privilege Escalation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2022-04-25 |
| cve-2021-41293 | CVE-2021-41293 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-41277 | Metabase GeoJSON API Local File Inclusion Vulnerability | CRITICAL | 10.0 | N/A | cvelistv5 | 2024-11-12 |
| cve-2021-41266 | CVE-2021-41266 | HIGH | 8.6 | N/A | cvelistv5 | |
| cve-2021-4102 | Google Chromium V8 Use-After-Free Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2021-12-15 |
| cve-2021-40875 | CVE-2021-40875 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-40870 | Aviatrix Controller Unrestricted Upload of File | CRITICAL | 9.8 | N/A | cvelistv5 | 2022-01-18 |
| cve-2021-40822 | CVE-2021-40822 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-40655 | D-Link DIR-605 Router Information Disclosure Vulnerability | HIGH | 7.5 | N/A | cvelistv5 | 2024-05-16 |
| cve-2021-40539 | Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2021-11-03 |
| cve-2021-40450 | Microsoft Win32k Privilege Escalation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2022-04-25 |
| cve-2021-40449 | Microsoft Windows Win32k Privilege Escalation Vulnerability | HIGH | 7.8 | N/A | cvelistv5 | 2021-11-17 |
| cve-2021-40444 | Microsoft MSHTML Remote Code Execution Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2021-11-03 |