Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2021-34484 Microsoft Windows User Profile Service Privilege Escalation Vulnerability HIGH 7.8 21.83% cvelistv5 2022-03-28
cve-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability CRITICAL 9.1 100.00% cvelistv5 2021-08-30
cve-2021-34448 Microsoft Windows Scripting Engine Memory Corruption Vulnerability MEDIUM 6.8 40.06% cvelistv5 2021-07-13
cve-2021-34187 chamilo chamilo Improper Neutralization of Special Elements used in an SQL Command HIGH N/A 16.18% cvelistv5 2023-12-02
cve-2021-33771 Microsoft Windows Kernel Privilege Escalation Vulnerability HIGH 7.8 10.17% cvelistv5 2021-07-13
cve-2021-33766 Microsoft Exchange Server Information Disclosure HIGH N/A 98.18% cvelistv5 2021-12-21
cve-2021-33742 Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability HIGH N/A 59.41% cvelistv5 2021-06-03
cve-2021-33739 Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability HIGH N/A 6.61% cvelistv5 2021-06-08
cve-2021-33690 SAP NetWeaver Server-Side Request Forgery CRITICAL 9.9 69.08% cvelistv5 2024-01-22
cve-2021-33564 dragonfly_project dragonfly Improper Neutralization of Argument Delimiters in a Command HIGH N/A 72.14% cvelistv5 2023-11-29
cve-2021-33544 geutebruck g-cam_ebc-2110 Improper Neutralization of Special Elements used in an OS Command HIGH N/A 95.77% cvelistv5 2021-09-20
cve-2021-33357 raspap raspap Improper Neutralization of Special Elements used in an OS Command HIGH N/A 17.45% cvelistv5 2021-12-21
cve-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability HIGH N/A 99.59% cvelistv5 2024-08-21
cve-2021-33044 Dahua IP Camera Authentication Bypass Vulnerability HIGH N/A 99.99% cvelistv5 2024-08-21
cve-2021-3297 Zyxel nbg2105_firmware Improper Authentication HIGH N/A N/A cvelistv5 2025-08-19
cve-2021-3287 Zoho manageengine_opmanager Deserialization of Untrusted Data HIGH N/A N/A cvelistv5 2024-01-13
cve-2021-32849 gerapy gerapy Improper Neutralization of Special Elements used in an OS Command HIGH 8.8 7.65% cvelistv5 2024-03-04
cve-2021-32819 squirrelly squirrelly Exposure of Sensitive Information to an Unauthorized Actor HIGH N/A 58.29% cvelistv5 2024-02-07
cve-2021-32790 WooCommerce woocommerce Improper Neutralization of Special Elements used in an SQL Command MEDIUM 4.9 1.26% cvelistv5 2024-04-20
cve-2021-32648 October CMS Improper Authentication HIGH N/A 91.12% cvelistv5 2022-01-18
cve-2021-3223 nodered node-red-dashboard Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2023-11-14
cve-2021-32030 ASUS Routers Improper Authentication Vulnerability CRITICAL 9.8 99.39% cvelistv5 2025-06-02
cve-2021-3199 ONLYOFFICE Docs Server Path Traversal Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-10-08
cve-2021-31979 Microsoft Windows Kernel Privilege Escalation Vulnerability HIGH 7.8 4.54% cvelistv5 2021-07-13
cve-2021-31956 Microsoft Windows NTFS Privilege Escalation Vulnerability HIGH N/A 22.27% cvelistv5 2021-04-14
cve-2021-31955 Microsoft Windows Kernel Information Disclosure Vulnerability MEDIUM 5.5 81.11% cvelistv5 2021-04-14
cve-2021-31805 Apache Struts Improper Neutralization of Special Elements used in an Expression Language Statement HIGH N/A 85.43% cvelistv5 2022-05-11
cve-2021-31755 Tenda AC11 Router Stack Buffer Overflow Vulnerability HIGH N/A 86.51% cvelistv5 2021-06-24
cve-2021-31602 hitachi vantara_pentaho Improper Authentication MEDIUM 5.3 51.65% cvelistv5 2023-05-02
cve-2021-3156 SUSE CVE CVE-2021-3156 HIGH 7.8 N/A cvelistv5 2026-09-02