Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-03-09	CVE-2021-21170	Incorrect security UI in Loader in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. network low complexity google fedoraproject debian	6.5
2021-03-09	CVE-2021-21168	Insufficient policy enforcement in appcache in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. network low complexity google fedoraproject debian	6.5
2021-03-09	CVE-2021-21164	Origin Validation Error vulnerability in multiple products Insufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. network low complexity google fedoraproject debian CWE-346	6.5
2021-03-09	CVE-2021-21163	Origin Validation Error vulnerability in multiple products Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server. network low complexity google fedoraproject debian CWE-346	6.5
2021-03-09	CVE-2021-20243	A flaw was found in ImageMagick in MagickCore/resize.c. local low complexity imagemagick debian	5.5
2021-03-09	CVE-2021-20241	A flaw was found in ImageMagick in coders/jp2.c. local low complexity imagemagick debian	5.5
2021-03-07	CVE-2021-27363	An issue was discovered in the Linux kernel through 5.11.3. local low complexity linux debian netapp	4.4
2021-03-05	CVE-2021-28038	Allocation of Resources Without Limits or Throttling vulnerability in multiple products An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. local low complexity linux debian netapp CWE-770	6.5
2021-02-27	CVE-2021-25284	Insufficiently Protected Credentials vulnerability in multiple products An issue was discovered in through SaltStack Salt before 3002.5. local low complexity saltstack fedoraproject debian CWE-522	4.4
2021-02-27	CVE-2020-28972	Improper Certificate Validation vulnerability in multiple products In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate. network high complexity saltstack fedoraproject debian CWE-295	5.9