278 matches found
VulnCheck KEV: CVE-2012-6467
Opera before 12.10 follows Internet shortcuts that are referenced by a 1 IMG element or 2 other inline element, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site, as exploited in the wild in November 2012...
CORS requests can incorrectly retrieve contents of cross origin pages
CORS Cross-Origin Resource Sharing allows web pages to retrieve the contents of pages from other sites, with their permission, as they would appear for the current user. When requests are made in this way, the browser should only allow the page content to be retrieved if the target site sends the...
CVE-2010-5227
Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .htm, .mht, .mhtml, .xht, .xhtm, or .xhtl file. NOTE: some of these details are...
Opera < 12.02 Truncated Dialog Vulnerability
Binary data 800820.prm...
Code injection
Opera before 12.00 Beta allows remote attackers to cause a denial of service memory consumption or application hang via an IFRAME element that uses the src="" syntax to embed a parent document...
CVE-2012-3567
Opera before 12.00 Beta allows remote attackers to cause a denial of service memory consumption or application hang via an IFRAME element that uses the src="" syntax to embed a parent document...
CVE-2011-2615
Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service application hang via unknown content on a web page, as demonstrated by domiteca.com...
Code injection
The Cascading Style Sheets CSS implementation in Opera before 11.11 does not properly handle the column-count property, which allows remote attackers to cause a denial of service infinite repaint loop and application hang via a web page, as demonstrated by an unspecified Wikipedia page...
Opera < 11.11 Frameset Memory Corruption
Binary data 800867.prm...
CVE-2011-0685
CVE-2011-0685 affects Opera before 11.01 where the Delete Private Data feature’s Clear all email account passwords option was not properly implemented, potentially allowing a physically proximate attacker to access an email account on an unattended workstation. Connected advisories (SUSE/OpenSUSE...
WAP form content can be leaked to other sites – Opera Security Advisories
When accepting user input in form fields on a WAP page, WML requires that the input contents are remembered, and used to populate every further input sharing the same name. This should continue as long as the user continues to click links known as a WAP session, even populating similarly named...
Sql injection
Opera before 10.61 does not properly suppress clicks on download dialogs that became visible after a recent tab change, which allows remote attackers to conduct clickjacking attacks, and consequently execute arbitrary code, via vectors involving 1 closing a tab or 2 hiding a tab, a related issue ...
A JPEG image with a malformed header can crash Opera – Opera Security Advisories
A JPEG image with a malformed header can crash Opera – Opera Security Advisories OPCOM Team | December 16, 2008 Summary A JPEG image with a malformed header can crash Opera, and causearbitrary code to be run. Severity Moderate Problem description A specially crafted DHT marker in the JPEG file...
Vulnerability in createSVGTransformFromMatrix (JavaScript, SVG) – Opera Security Advisories
Vulnerability in createSVGTransformFromMatrix JavaScript, SVG – Opera Security Advisories OPCOM Team | December 16, 2008 Summary A vulnerability in createSVGTransformFromMatrix ObjectTypecasting can crash Opera. Severity Moderate Problem description Passing an incorrect object to...
Opera 9.10 - 'alert()' Remote Denial of Service
\n" File.write"\n" Bof = 'A'44444 File.write"alert'"+Bof+"'\n" File.write"\n" File.write"" File.close --...
A forged SSL server certificate can be accepted by Opera as a valid certificate – Opera Security Advisories
A forged SSL server certificate can be accepted by Opera as a valid certificate – Opera Security Advisories OPCOM Team | September 21, 2006 Summary: A forged SSL server certificate can be accepted by Opera as a valid certificate. Severity: Highly critical Vulnerable versions: Opera for desktop...
Opera <= 8.02 Remote Denial of Service Exploit (2)
No description provided by source. !-- Vulnerable: Opera 8.2 Windows XP Prof. SP2 Tested opera.py ; opera opera.html [email protected] html = open"opera.html", "w" html.write"html style="content: url0;"\n" html.write"head/head\n" buff1 = 'A'32499 html.write"bodyA\n"+buff1+"\n" buff2 = 'B'153...
opera -- image dragging vulnerability
A Secunia Advisory reports: Secunia Research has discovered a vulnerability in Opera, which can be exploited by malicious people to conduct cross-site scripting attacks and retrieve a user's files. The vulnerability is caused due to Opera allowing a user to drag e.g. an image, which is actually a...
CVE-2004-1615
Opera allows remote attackers to cause a denial of service invalid memory reference and application crash via a web page or HTML email that contains a TBODY tag with a large COL SPAN value, as demonstrated by mangleme...
CVE-2004-1489
Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remote attackers to gain sensitive information, such as user names and the installation directory...