KLA11732 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, bypass security restrictions, perform cross-site scripting attack, spoof user interface, execute arbitrary code. Below is a complete list of...

Adobe Flash Player <= 29.0.0.171 (APSB18-19)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 29.0.0.171. It is therefore affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Opera asks for my keychain password on macOS – what do I do? Opera 53 has a new signing certificate

Security Opera asks for my keychain password on macOS – what do I do? Opera 53 has a new signing certificate Share May 30th, 2018 Hello, We would like to let you know that we have updated our software signing certificate from Opera Software ASA to Opera Software AS. This is why your macOS is aski...

KLA11731 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. PE vulnerability in extensions components can be exploited to gain privileges. 2. Type confusio...

Opera Browser Content Length Buffer Overflow (CVE-2010-1349)

A buffer overflow vulnerability exists in Opera Browser. The vulnerability is due to a boundary error in the way the browser processes HTTP server replies. Remote attackers could exploit this vulnerability by persuading a target user to connect to an attacker-controlled HTTP server with a...

PT-2018-3228

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.170 Opera versions prior to 66.0.3359.170 Description The issue is related to an integer overflow in PDFium, a PDF content handler in Google Chrome and Opera, which could lead to a heap out-of-bounds...

Opera Portable Detection (Windows SMB Login)

SMB login and WMI file search based detection of Opera Portable. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2018-17361

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description The issue allows Service Workers to intercept requests made by or tags in the Fetch API, enabling a remote attacker to leak cross-origin data via a...

PT-2018-17381

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera versions prior to 66.0.3359.117 Description An object lifetime issue in the developer tools network handler allowed a local attacker to execute arbitrary code via a crafted HTML page. This...

PT-2018-17384

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera versions prior to 66.0.3359.117 Description The issue concerns the incorrect application of Content Security Policy CSP for tags in Blink, allowing a remote attacker to bypass the content...

PT-2018-17357

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description A use-after-free issue in WebAssembly allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Recommendations...

PT-2018-17368

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description The issue involves incorrect handling of confusable characters in the URL Formatter, allowing a remote attacker to perform domain spoofing via IDN...

PT-2018-17377

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera versions prior to 66.0.3359.117 Description The issue is related to the incorrect handling of confusable characters in the URL Formatter, allowing a remote attacker to perform domain spoofing...

PT-2018-17374

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description The issue involves incorrect handling of confusable characters in the URL Formatter, allowing a remote attacker to perform domain spoofing via IDN...

PT-2018-17385

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera versions prior to 66.0.3359.117 Description The issue is related to the inappropriate setting of the SEE MASK FLAG NO UI flag in file downloads, which could allow a remote attacker to...

PT-2018-17360

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera versions prior to 66.0.3359.117 Description The issue is related to an integer overflow that leads to a heap buffer-overflow in Skia, allowing a remote attacker to execute arbitrary code insi...

PT-2018-17366

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description A remote attacker could obscure the full screen warning via a crafted HTML page by overlapping the fullscreen notification in Fullscreen with a...

PT-2018-17365

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description The issue involves the inappropriate dismissal of a file picker on keyboard events in Blink, allowing a remote attacker to read local files via a...

PT-2018-17373

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description A stagnant permission prompt in Prompts allowed a remote attacker to bypass permission policy via a crafted HTML page. Recommendations For Google...

PT-2018-17372

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description The issue is related to missing confusable characters in Internationalization, allowing a remote attacker to spoof the contents of the Omnibox URL...