Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2021-25370 | Samsung Mobile Devices Memory Corruption Vulnerability | MEDIUM | 6.1 | 0.89% | cvelistv5 | 2022-11-08 |
| cve-2021-25369 | Samsung Mobile Devices Improper Access Control Vulnerability | MEDIUM | 6.2 | 1.12% | cvelistv5 | 2022-11-08 |
| cve-2021-25337 | Samsung Mobile Devices Improper Access Control Vulnerability | HIGH | N/A | 2.81% | cvelistv5 | 2022-11-08 |
| cve-2021-25298 | Nagios XI OS Command Injection | HIGH | 8.8 | 75.15% | cvelistv5 | 2022-01-18 |
| cve-2021-25297 | Nagios XI OS Command Injection | HIGH | 8.8 | 56.66% | cvelistv5 | 2022-01-18 |
| cve-2021-25296 | Nagios XI OS Command Injection | HIGH | 8.8 | 72.18% | cvelistv5 | 2022-01-18 |
| cve-2021-25114 | CVE-2021-25114 | HIGH | N/A | 81.83% | cvelistv5 | |
| cve-2021-25003 | CVE-2021-25003 | HIGH | N/A | 56.15% | cvelistv5 | |
| cve-2021-24943 | CVE-2021-24943 | HIGH | N/A | 7.47% | cvelistv5 | |
| cve-2021-24931 | CVE-2021-24931 | HIGH | N/A | 78.81% | cvelistv5 | |
| cve-2021-24915 | Contest Gallery < 13.1.0.6 - Missing Access Controls to Unauthenticated SQL injection / Email Address Disclosure | CRITICAL | 9.8 | 12.00% | cvelistv5 | 2026-06-17 |
| cve-2021-24762 | CVE-2021-24762 | HIGH | N/A | 86.78% | cvelistv5 | |
| cve-2021-24499 | CVE-2021-24499 | HIGH | N/A | 60.11% | cvelistv5 | |
| cve-2021-24442 | CVE-2021-24442 | HIGH | N/A | 46.00% | cvelistv5 | |
| cve-2021-24370 | Fancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE | CRITICAL | 9.8 | 47.37% | cvelistv5 | 2026-06-17 |
| cve-2021-24285 | CVE-2021-24285 | HIGH | N/A | 14.70% | cvelistv5 | |
| cve-2021-24284 | CVE-2021-24284 | HIGH | N/A | 42.14% | cvelistv5 | |
| cve-2021-24227 | CVE-2021-24227 | HIGH | N/A | 5.93% | cvelistv5 | |
| cve-2021-24219 | CVE-2021-24219 | HIGH | N/A | 2.06% | cvelistv5 | |
| cve-2021-24217 | CVE-2021-24217 | HIGH | N/A | 3.52% | cvelistv5 | |
| cve-2021-24212 | CVE-2021-24212 | HIGH | N/A | 7.91% | cvelistv5 | |
| cve-2021-24170 | CVE-2021-24170 | HIGH | N/A | 4.79% | cvelistv5 | |
| cve-2021-23874 | McAfee Total Protection (MTP) Improper Privilege Management Vulnerability | HIGH | 8.2 | 1.03% | cvelistv5 | 2021-11-03 |
| cve-2021-23758 | Ajax.NET Professional Deserialization of Untrusted Data Vulnerability | HIGH | N/A | 83.63% | cvelistv5 | 2026-08-26 |
| cve-2021-22991 | F5 BIG-IP Traffic Management Microkernel Buffer Overflow | CRITICAL | 9.8 | 61.06% | cvelistv5 | 2022-01-18 |
| cve-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability | CRITICAL | 9.8 | 99.90% | cvelistv5 | 2021-11-03 |
| cve-2021-22941 | Citrix ShareFile Improper Access Control Vulnerability | CRITICAL | 9.8 | 53.59% | cvelistv5 | 2022-03-25 |
| cve-2021-22911 | CVE-2021-22911 | HIGH | N/A | 95.24% | cvelistv5 | |
| cve-2021-22900 | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | HIGH | 7.2 | 14.15% | cvelistv5 | 2021-11-03 |
| cve-2021-22899 | Ivanti Pulse Connect Secure Command Injection Vulnerability | HIGH | 8.8 | 22.91% | cvelistv5 | 2021-11-03 |