Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2021-43163 ruijienetworks reyeeos Improper Neutralization of Special Elements used in a Command HIGH N/A N/A cvelistv5 2024-12-05
cve-2021-42912 fiberhome an5506-01-a_firmware Improper Neutralization of Special Elements used in an OS Command HIGH N/A N/A cvelistv5 2024-12-20
cve-2021-42567 apereo central_authentication_service Improper Neutralization of Input During Web Page Generation HIGH N/A N/A cvelistv5 2024-01-22
cve-2021-42359 legalweb wp_dsgvo_tools Improper Access Control HIGH N/A N/A cvelistv5 2021-11-02
cve-2021-42321 Microsoft Exchange Server Remote Code Execution Vulnerability HIGH 8.8 N/A cvelistv5 2021-11-17
cve-2021-42292 Microsoft Excel Security Feature Bypass HIGH 7.8 N/A cvelistv5 2021-11-17
cve-2021-42287 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability CRITICAL N/A N/A cvelistv5 2022-04-11
cve-2021-42278 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability HIGH 7.5 N/A cvelistv5 2022-04-11
cve-2021-42258 BQE BillQuick Web Suite SQL Injection Vulnerability CRITICAL N/A N/A cvelistv5 2021-11-03
cve-2021-42237 Sitecore XP Remote Command Execution Vulnerability CRITICAL N/A N/A cvelistv5 2022-03-25
cve-2021-42013 Apache HTTP Server Path Traversal Vulnerability CRITICAL N/A N/A cvelistv5 2021-11-03
cve-2021-4191 GitLab CE/EE 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2 Unauthenticated User Enumeration MEDIUM 5.3 N/A cvelistv5 2023-11-14
cve-2021-41826 CVE-2021-41826 HIGH N/A N/A cvelistv5
cve-2021-41773 Apache HTTP Server Path Traversal Vulnerability CRITICAL N/A N/A cvelistv5 2021-11-03
cve-2021-41653 TP-Link tl-wr840n_firmware Improper Control of Generation of Code HIGH N/A N/A cvelistv5 2021-12-08
cve-2021-41649 online-shopping-system-advanced_project online-shopping-system-advanced Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2024-01-22
cve-2021-41569 sas sas\/intrnet Inclusion of Functionality from Untrusted Control Sphere HIGH N/A N/A cvelistv5 2023-11-27
cve-2021-41379 Microsoft Windows Installer Privilege Escalation Vulnerability CRITICAL N/A N/A cvelistv5 2022-03-03
cve-2021-41357 Microsoft Win32k Privilege Escalation Vulnerability HIGH N/A N/A cvelistv5 2022-04-25
cve-2021-41293 ecoa ecs_router_controller-ecs_firmware Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2024-01-22
cve-2021-41277 Metabase GeoJSON API Local File Inclusion Vulnerability CRITICAL 10.0 N/A cvelistv5 2024-11-12
cve-2021-41266 min minio_console Missing Authentication for Critical Functionality HIGH N/A N/A cvelistv5 2024-01-22
cve-2021-4102 Google Chromium V8 Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2021-12-15
cve-2021-40875 gurock testrail Direct Request HIGH N/A N/A cvelistv5 2025-08-18
cve-2021-40870 Aviatrix Controller Unrestricted Upload of File CRITICAL 9.8 N/A cvelistv5 2022-01-18
cve-2021-40822 OSGeo GeoServer Server-Side Request Forgery HIGH N/A N/A cvelistv5 2024-01-22
cve-2021-40655 D-Link DIR-605 Router Information Disclosure Vulnerability HIGH N/A N/A cvelistv5 2024-05-16
cve-2021-40539 Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability CRITICAL 9.8 N/A cvelistv5 2021-11-03
cve-2021-40450 Microsoft Win32k Privilege Escalation Vulnerability HIGH N/A N/A cvelistv5 2022-04-25
cve-2021-40449 Microsoft Windows Win32k Privilege Escalation Vulnerability CRITICAL N/A N/A cvelistv5 2021-11-17