CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2021-26828 OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2021-26411 Internet Explorer Memory Corruption Vulnerability Microsoft Internet Explorer 11, Microsoft Internet Explorer 9, Microsoft Microsoft Edge (EdgeHTML-based) Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability Atlassian Jira Server, Atlassian Jira Data Center Versions & vendor guidance →	Known exploitedCISA KEV	5.3Medium
CVE-2021-26085 Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability Atlassian Confluence Server, Atlassian Confluence Data Center Versions & vendor guidance →	Known exploitedCISA KEV	5.3Medium
CVE-2021-26084 Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Atlassian Confluence Server, Atlassian Confluence Data Center Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2021-25489 Samsung Mobile Devices Improper Input Validation Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance →	Known exploitedCISA KEV	3.3Low
CVE-2021-25487 Samsung Mobile Devices Out-of-Bounds Read Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance →	Known exploitedCISA KEV	7.3High
CVE-2021-25395 Samsung Mobile Devices Race Condition Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance →	Known exploitedCISA KEV	6.4Medium
CVE-2021-25394 Samsung Mobile Devices Race Condition Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance →	Known exploitedCISA KEV	6.4Medium
CVE-2021-25372 Samsung Mobile Devices Improper Boundary Check Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance →	Known exploitedCISA KEV	6.1Medium
CVE-2021-25371 Samsung Mobile Devices Unspecified Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance →	Known exploitedCISA KEV	6.1Medium
CVE-2021-25370 Samsung Mobile Devices Memory Corruption Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance →	Known exploitedCISA KEV	6.1Medium
CVE-2021-25369 Samsung Mobile Devices Improper Access Control Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance →	Known exploitedCISA KEV	6.2Medium
CVE-2021-25337 Samsung Mobile Devices Improper Access Control Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance →	Known exploitedCISA KEV	4.4Medium
CVE-2021-25298 Nagios XI OS Command Injection n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2021-25297 Nagios XI OS Command Injection n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2021-25296 Nagios XI OS Command Injection n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2021-23874 McAfee Total Protection (MTP) privilege escalation vulnerability McAfee,LLC McAfee Total Protection (MTP) Versions & vendor guidance →	Known exploitedCISA KEV	8.2High
CVE-2021-23758 Deserialization of Untrusted Data n/a AjaxPro.2 Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2021-22991 F5 BIG-IP Traffic Management Microkernel Buffer Overflow n/a BIG-IP Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2021-22986 F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability n/a BIG-IP; BIG-IQ Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2021-22941 Citrix ShareFile Improper Access Control Vulnerability n/a Citrix ShareFile storage zones controller Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2021-22900 Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability n/a Pulse Secure Secure Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2021-22899 Ivanti Pulse Connect Secure Command Injection Vulnerability n/a Pulse Connect Secure Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2021-22894 Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability n/a Pulse Connect Secure Versions & vendor guidance →	Known exploitedCISA KEV	8.8High

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.