5419 matches found
CVE-2012-4145
Unspecified vulnerability in Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, has unknown impact and attack vectors, related to a "low severity issue."...
CVE-2010-5072
The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method...
CVE-2010-5068
The Cascading Style Sheets CSS implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...
CVE-2011-2636
Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service application crash via unknown content on a web page, as demonstrated by a certain Tomato Firmware page...
CVE-2012-5180
The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application...
CVE-2011-2639
Opera before 11.10 does not properly handle hidden animated GIF images, which allows remote attackers to cause a denial of service CPU consumption via an image file that triggers continual repaints...
CVE-2011-2613
The Array.prototype.join method in Opera before 11.50 allows remote attackers to cause a denial of service application crash via a non-array object that contains initial holes...
CVE-2011-2618
Opera before 11.50 allows remote attackers to cause a denial of service application crash via web script that moves a 1 AUDIO element or 2 VIDEO element between windows...
CVE-2011-2632
Opera before 11.11 does not properly handle destruction of a Silverlight instance, which allows remote attackers to cause a denial of service application crash via a web page, as demonstrated by vod.onet.pl...
CVE-2012-6464
Cross-site scripting XSS vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript code that overrides methods of unspecified native objects in documents that have different origins...
CVE-2012-6466
Opera before 12.10 does not properly handle incorrect size data in a WebP image, which allows remote attackers to obtain potentially sensitive information from process memory by using a crafted image as the fill pattern for a canvas...
CVE-2005-4718
Opera 8.02 and earlier allows remote attackers to cause a denial of service client crash via 1 a crafted HTML file with a "content: url0;" style attribute, a "bodyA" tag, a long string, and a "u" tag with a long attribute, as demonstrated by opera.html; and 2 a BGSOUND element with a "margin:-99;...
CVE-2009-2059
Opera, possibly before 9.25, uses the HTTP Host header to determine the context of a document provided in a 1 4xx or 2 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" atta...
CVE-2005-2309
Opera 8.01 allows remote attackers to cause a denial of service CPU consumption via a crafted JPEG image, as demonstrated using random.jpg...
CVE-2002-2358
Cross-site scripting XSS vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title tag of an FTP URL...
CVE-2002-2332
Buffer overflow in Opera 6.01 allows remote attackers to cause a denial of service crash via an IMG tag with large width and height attributes...
CVE-2002-2312
Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript 1 event.ctrlKey or 2 event.shiftKey onkeydown event contained in a webpage...
CVE-2005-3699
Opera Web Browser 8.50 and 8.0 through 8.0.2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site...
KLA83720 SB vulnerability in Opera
Security vulnerability was found in Opera. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories Opera 119.0.5497.38 Stable update Exploitation Public exploits exist for this vulnerability. CVE list CVE-2025-4664 warning Solution Update to the latest...
openSUSE 15 Security Update : opera (openSUSE-SU-2025:0111-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2025:0111-1 advisory. - Update to 117.0.5408.163 DNA-120683 Issue back Sometimes onboarding is blank and useless DNA-121682 Backport fix for CVE-2025-2783 to O132, O133, GX132...