Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2011-04-15 CVE-2011-1301 USE After Free vulnerability in Google Chrome
Use-after-free vulnerability in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.
network
low complexity
google CWE-416
critical
9.3
2011-04-15 CVE-2011-1300 Numeric Errors vulnerability in multiple products
The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the WebGLES library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox 4.x before 4.0.1 on Windows and in the GPU process in Google Chrome before 10.0.648.205 on Windows, allows remote attackers to execute arbitrary code via unspecified vectors, related to an "off-by-three" error.
network
low complexity
mozilla microsoft google CWE-189
critical
10.0
2011-04-15 CVE-2011-0195 Information Exposure vulnerability in Apple Iphone OS 4.3.0/4.3.1
The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site.
network
apple CWE-200
4.3
2011-04-15 CVE-2011-1691 Null Pointer Dereference vulnerability in Google Chrome
The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets (CSS) implementation in WebCore in WebKit before r82222, as used in Google Chrome before 11.0.696.43 and other products, does not properly handle access to the (1) counterIncrement and (2) counterReset attributes of CSSStyleDeclaration data provided by a getComputedStyle method call, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code.
network
low complexity
apple google CWE-476
5.0
2011-04-15 CVE-2011-1533 Cross-Site Scripting vulnerability in HP products
Cross-site scripting (XSS) vulnerability on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
hp CWE-79
4.3
2011-04-15 CVE-2011-1532 Multiple Security vulnerability in HP Photosmart Printers
Unspecified vulnerability in the SNMP component on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to obtain sensitive information or modify data via vectors related to the Embedded Web Server (EWS).
network
low complexity
hp
7.5
2011-04-15 CVE-2011-1531 Information Exposure vulnerability in HP products
The webscan component in the Embedded Web Server (EWS) on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to read documents on the scan surface via unspecified vectors.
network
hp CWE-200
4.3
2011-04-15 CVE-2011-0898 Cross-Site Scripting vulnerability in HP Network Node Manager I 9.00
Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.00 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
hp CWE-79
4.3
2011-04-15 CVE-2011-0897 Cross Site Scripting and Unauthorized Access vulnerability in HP Network Node Manager I 9.00
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.00 allows local users to read arbitrary files via unknown vectors.
local
low complexity
hp
4.6
2011-04-15 CVE-2011-0896 Remote Denial Of Service vulnerability in HP Hp-Ux and Nfs/Oncplus
Unspecified vulnerability in HP NFS/ONCplus B.11.31.10 and earlier on HP-UX B.11.31 allows remote authenticated users to cause a denial of service via unknown vectors.
network
low complexity
hp
6.8