Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2021-40438 | SUSE CVE CVE-2021-40438 | HIGH | 7.5 | N/A | cvelistv5 | 2026-08-31 |
| cve-2021-40407 | Reolink RLC-410W IP Camera OS Command Injection Vulnerability | CRITICAL | 9.1 | N/A | cvelistv5 | 2024-12-18 |
| cve-2021-4034 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2022-06-27 |
| cve-2021-39935 | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability | MEDIUM | 6.8 | N/A | cvelistv5 | 2026-02-03 |
| cve-2021-39793 | Google Pixel Out-of-Bounds Write Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2022-04-11 |
| cve-2021-39509 | CVE-2021-39509 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-39316 | CVE-2021-39316 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2021-39312 | CVE-2021-39312 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2021-39226 | Grafana Authentication Bypass Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2022-08-25 |
| cve-2021-39211 | CVE-2021-39211 | MEDIUM | 5.3 | N/A | cvelistv5 | |
| cve-2021-39144 | XStream Remote Code Execution Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2023-03-10 |
| cve-2021-38649 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2021-11-03 |
| cve-2021-38648 | SUSE CVE CVE-2021-38648 | UNKNOWN | N/A | N/A | cvelistv5 | 2025-07-08 |
| cve-2021-38647 | SUSE CVE CVE-2021-38647 | UNKNOWN | N/A | N/A | cvelistv5 | 2025-07-08 |
| cve-2021-38646 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability | HIGH | 7.8 | N/A | cvelistv5 | 2022-03-28 |
| cve-2021-38645 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2021-11-03 |
| cve-2021-38406 | Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability | HIGH | 7.8 | N/A | cvelistv5 | 2022-08-25 |
| cve-2021-38163 | SAP NetWeaver Unrestricted File Upload Vulnerability | CRITICAL | 9.9 | N/A | cvelistv5 | 2022-06-09 |
| cve-2021-38154 | CVE-2021-38154 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-38003 | Google Chromium V8 Memory Corruption Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2021-11-03 |
| cve-2021-38000 | Google Chromium Intents Improper Input Validation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2021-11-03 |
| cve-2021-37976 | Google Chromium Information Disclosure Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2021-11-03 |
| cve-2021-37975 | Google Chromium V8 Use-After-Free Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2021-11-03 |
| cve-2021-37973 | Google Chromium Portals Use-After-Free Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2021-11-03 |
| cve-2021-37580 | CVE-2021-37580 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-37415 | Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2021-12-01 |
| cve-2021-37291 | CVE-2021-37291 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-3708 | CVE-2021-3708 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2021-36955 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | HIGH | 7.8 | N/A | cvelistv5 | 2021-11-03 |
| cve-2021-36948 | Microsoft Windows Update Medic Service Privilege Escalation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2021-11-03 |