CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2021-22054 Omnissa Workspace ONE Server-Side Request Forgery n/a VMware Workspace ONE UEM console Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2021-22017 VMware vCenter Server Improper Access Control n/a VMware vCenter Server, VMware Cloud Foundation Versions & vendor guidance →	Known exploitedCISA KEV	5.3Medium
CVE-2021-22005 VMware vCenter Server File Upload Vulnerability n/a VMware vCenter Server, VMware Cloud Foundation Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2021-21985 VMware vCenter Server Improper Input Validation Vulnerability n/a VMware vCenter Server and VMware Cloud Foundation Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2021-21975 VMware Server Side Request Forgery in vRealize Operations Manager API n/a VMware vRealize Operations Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2021-21973 VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability n/a VMware vCenter Server, n/a VMware Cloud Foundation Versions & vendor guidance →	Known exploitedCISA KEV	5.3Medium
CVE-2021-21972 VMware vCenter Server Remote Code Execution Vulnerability n/a VMware vCenter Server, n/a VMware Cloud Foundation Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2021-21551 Dell dbutil Driver Insufficient Access Control Vulnerability Dell dbutil Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2021-21315 Command Injection Vulnerability sebhildebrandt systeminformation Versions & vendor guidance →	Known exploitedCISA KEV	7.1High
CVE-2021-21311 SSRF in adminer vrana adminer Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2021-21224 Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2021-21220 Google Chromium V8 Improper Input Validation Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2021-21206 Google Chromium Blink Use-After-Free Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2021-21193 Google Chromium Blink Use-After-Free Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2021-21166 Google Chromium Race Condition Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2021-21148 Google Chromium V8 Heap Buffer Overflow Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2021-21017 Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution Adobe Acrobat Reader Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2021-20124 Draytek VigorConnect Path Traversal Vulnerability n/a Draytek VigorConnect Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2021-20123 Draytek VigorConnect Path Traversal Vulnerability n/a Draytek VigorConnect Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2021-20090 Arcadyan Buffalo Firmware Path Traversal Vulnerability n/a Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3 Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2021-20038 SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability SonicWall SonicWall SMA100 Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2021-20035 SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall SMA100 Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2021-20028 SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability SonicWall SonicWall SRA/SMA100 Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2021-20023 SonicWall Email Security Path Traversal Vulnerability SonicWall Email Security Versions & vendor guidance →	Known exploitedCISA KEV	4.9Medium
CVE-2021-20022 SonicWall Email Security Unrestricted Upload of File Vulnerability SonicWall Email Security Versions & vendor guidance →	Known exploitedCISA KEV	7.2High

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.