11.0

DATE	CVE	VULNERABILITY TITLE	RISK
2021-03-23	CVE-2021-21346	XStream is a Java library to serialize objects to XML and back again. network low complexity xstream-project debian fedoraproject oracle critical	9.8
2021-03-23	CVE-2021-21345	OS Command Injection vulnerability in multiple products XStream is a Java library to serialize objects to XML and back again. network low complexity xstream-project debian fedoraproject oracle CWE-78 critical	9.9
2021-03-23	CVE-2021-21344	XStream is a Java library to serialize objects to XML and back again. network low complexity xstream-project debian fedoraproject oracle critical	9.8
2021-03-23	CVE-2021-21343	XStream is a Java library to serialize objects to XML and back again. network low complexity xstream-project debian fedoraproject oracle	7.5
2021-03-23	CVE-2021-21342	XStream is a Java library to serialize objects to XML and back again. network low complexity xstream-project debian fedoraproject oracle critical	9.1
2021-03-23	CVE-2021-21341	XStream is a Java library to serialize objects to XML and back again. network low complexity xstream-project debian fedoraproject oracle	7.5
2021-03-09	CVE-2021-28116	Out-of-bounds Read vulnerability in multiple products Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. network low complexity squid-cache fedoraproject debian CWE-125	5.3
2021-02-27	CVE-2021-3197	Injection vulnerability in multiple products An issue was discovered in SaltStack Salt before 3002.5. network low complexity saltstack fedoraproject debian CWE-74 critical	9.8
2021-02-27	CVE-2021-3148	Command Injection vulnerability in multiple products An issue was discovered in SaltStack Salt before 3002.5. network low complexity saltstack fedoraproject debian CWE-77 critical	9.8
2021-02-27	CVE-2021-3144	Insufficient Session Expiration vulnerability in multiple products In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration. network low complexity saltstack fedoraproject debian CWE-613 critical	9.1