Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2021-27561 Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability CRITICAL 9.8 82.86% cvelistv5 2021-11-03
cve-2021-27358 grafana: snapshot feature allow an unauthenticated remote attacker to trigger a DoS via a remote API call HIGH 7.5 83.04% cvelistv5 2026-03-21
cve-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability HIGH 8.1 4.00% cvelistv5 2026-07-21
cve-2021-27104 Accellion FTA OS Command Injection Vulnerability CRITICAL N/A 56.69% cvelistv5 2021-11-03
cve-2021-27103 Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability CRITICAL N/A 11.41% cvelistv5 2021-11-03
cve-2021-27102 Accellion FTA OS Command Injection Vulnerability CRITICAL N/A 3.65% cvelistv5 2021-11-03
cve-2021-27101 Accellion FTA SQL Injection Vulnerability CRITICAL N/A 6.00% cvelistv5 2021-11-03
cve-2021-27085 Microsoft Internet Explorer Remote Code Execution Vulnerability HIGH 8.8 5.45% cvelistv5 2021-11-03
cve-2021-27065 Microsoft Exchange Server Remote Code Execution Vulnerability HIGH 7.8 99.88% cvelistv5 2021-11-03
cve-2021-27059 Microsoft Office Remote Code Execution Vulnerability HIGH 7.6 6.08% cvelistv5 2021-11-03
cve-2021-26858 Microsoft Exchange Server Remote Code Execution Vulnerability HIGH 7.8 93.65% cvelistv5 2021-11-03
cve-2021-26857 Microsoft Exchange Server Remote Code Execution Vulnerability HIGH 7.8 95.76% cvelistv5 2021-11-03
cve-2021-26855 Microsoft Exchange Server Remote Code Execution Vulnerability CRITICAL 9.1 100.00% cvelistv5 2021-11-03
cve-2021-26829 OpenPLC ScadaBR Cross-site Scripting Vulnerability MEDIUM 5.4 48.05% cvelistv5 2025-11-28
cve-2021-26828 OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability HIGH 8.8 39.36% cvelistv5 2025-12-03
cve-2021-26411 Microsoft Internet Explorer Memory Corruption Vulnerability HIGH 8.8 80.77% cvelistv5 2021-11-03
cve-2021-26295 CVE-2021-26295 HIGH N/A 97.82% cvelistv5
cve-2021-26294 CVE-2021-26294 HIGH N/A 16.90% cvelistv5
cve-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability MEDIUM 5.3 100.00% cvelistv5 2024-11-12
cve-2021-26085 Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability MEDIUM 5.3 99.94% cvelistv5 2022-03-28
cve-2021-26084 Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability CRITICAL 9.8 100.00% cvelistv5 2021-11-03
cve-2021-25899 CVE-2021-25899 HIGH N/A 12.25% cvelistv5
cve-2021-25864 CVE-2021-25864 HIGH N/A 9.33% cvelistv5
cve-2021-25646 druid: Authenticated javascript code injection HIGH 8.8 99.00% cvelistv5 2025-11-21
cve-2021-25489 Samsung Mobile Devices Improper Input Validation Vulnerability LOW 3.3 0.53% cvelistv5 2023-06-29
cve-2021-25487 Samsung Mobile Devices Out-of-Bounds Read Vulnerability HIGH 7.3 0.64% cvelistv5 2023-06-29
cve-2021-25395 Samsung Mobile Devices Race Condition Vulnerability MEDIUM 6.4 0.37% cvelistv5 2023-06-29
cve-2021-25394 Samsung Mobile Devices Race Condition Vulnerability MEDIUM 6.4 0.40% cvelistv5 2023-06-29
cve-2021-25372 Samsung Mobile Devices Improper Boundary Check Vulnerability MEDIUM 6.1 0.80% cvelistv5 2023-06-29
cve-2021-25371 Samsung Mobile Devices Unspecified Vulnerability MEDIUM 6.1 0.80% cvelistv5 2023-06-29