Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2021-46422 Telesquare sdt-cs3b1_firmware Improper Neutralization of Special Elements used in an OS Command HIGH N/A N/A cvelistv5 2022-12-06
cve-2021-46417 franklinfueling colibri_firmware Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2023-11-17
cve-2021-46381 D-Link dap-1620_firmware Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2024-01-22
cve-2021-46379 D-Link dir-850l_firmware URL Redirection to Untrusted Site HIGH N/A N/A cvelistv5 2024-01-22
cve-2021-45967 pascom cloud_phone_system Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2024-01-22
cve-2021-45461 FreePBX restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 Remote Code Execution HIGH N/A N/A cvelistv5 2021-12-22
cve-2021-45422 reprisesoftware reprise_license_manager Improper Neutralization of Input During Web Page Generation HIGH N/A N/A cvelistv5 2025-06-05
cve-2021-45420 emerson dixell_xweb-500_firmware Exposure of Sensitive Information to an Unauthorized Actor HIGH N/A N/A cvelistv5 2024-01-21
cve-2021-45382 D-Link Multiple Routers Remote Code Execution Vulnerability CRITICAL 9.8 N/A cvelistv5 2022-04-04
cve-2021-45092 Thinfinity VirtualUI before 3.0 lab.html IFRAME Injection HIGH N/A N/A cvelistv5 2024-01-22
cve-2021-45046 Apache Log4j2 Deserialization of Untrusted Data Vulnerability CRITICAL N/A N/A cvelistv5 2023-05-01
cve-2021-44892 ThinkPHP '_filename' in index.php Remote Code Execution HIGH N/A N/A cvelistv5 2024-07-15
cve-2021-44868 mingsoft mcms Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-03-10
cve-2021-4462 skittles employee_records_system Unrestricted Upload of File with Dangerous Type HIGH N/A N/A cvelistv5 2025-11-10
cve-2021-4458 webnus modern_events_calendar_lite Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-03-10
cve-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-03-25
cve-2021-44515 Zoho Desktop Central Authentication Bypass Vulnerability CRITICAL 9.8 N/A cvelistv5 2021-12-10
cve-2021-44427 rosariosis rosariosis Improper Neutralization of Special Elements used in an SQL Command CRITICAL 9.8 N/A cvelistv5 2024-09-18
cve-2021-44228 Apache Log4j2 Remote Code Execution Vulnerability CRITICAL N/A N/A cvelistv5 2021-12-10
cve-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability HIGH 8.1 N/A cvelistv5 2024-12-23
cve-2021-44168 Fortinet FortiOS Arbitrary File Download HIGH N/A N/A cvelistv5 2021-12-10
cve-2021-44077 Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability CRITICAL 9.8 N/A cvelistv5 2021-12-01
cve-2021-44026 Roundcube Webmail SQL Injection Vulnerability HIGH N/A N/A cvelistv5 2023-06-22
cve-2021-43890 Microsoft Windows AppX Installer Spoofing Vulnerability CRITICAL N/A N/A cvelistv5 2021-12-15
cve-2021-43798 Grafana Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2025-10-09
cve-2021-43778 glpi-project barcode Improper Limitation of a Pathname to a Restricted Directory CRITICAL 9.1 N/A cvelistv5 2022-05-31
cve-2021-4374 ValvePress wordpress_automatic_plugin Missing Authorization CRITICAL 9.1 N/A cvelistv5 2021-09-06
cve-2021-43711 TOTOLINK ex200_firmware Improper Neutralization of Special Elements used in a Command HIGH N/A N/A cvelistv5 2022-08-19
cve-2021-43287 thoughtworks gocd Exposure of Sensitive Information to an Unauthorized Actor HIGH N/A N/A cvelistv5 2023-05-02
cve-2021-43226 Microsoft Windows Privilege Escalation Vulnerability CRITICAL N/A N/A cvelistv5 2025-10-06