Opera Girl by Vivienne Tam - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Opera Girl by Vivienne Tam published at the 'play' market has multiple vulnerabilities...

opera-guide.ch XSS vulnerability

Vulnerable URL: http://www.opera-guide.ch/opera.php?id=275%22/%3E%3Csvg/onload=alert%28%27XSSPOSED%27%29%3E=3=de Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1557070 Google...

PT-2016-1610

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.108 Opera versions prior to 49.0.2623.108 Description The issue is related to the PageCaptureSaveAsMHTMLFunction::ReturnFailure function in the browser/extensions/api/page capture/page capture api.cc...

PT-2016-1613

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.108 Opera versions prior to 49.0.2623.108 Description A use-after-free issue exists in the RenderWidgetHostImpl::Destroy function, which is part of the Navigation implementation. This could allow remot...

PT-2016-1612

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.108 Opera versions prior to 49.0.2623.108 Description The issue is related to a use-after-free vulnerability in the GetLoadTimes function in the Extensions implementation. This vulnerability can be...

opera-guide.ch XSS vulnerability

Vulnerable URL: http://www.opera-guide.ch/index.php?searchFor=c&first-letter;=A=de=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1738117 Google Pagerank| 4 VIP website status:| ...

PT-2016-1468

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.87 Opera affected versions not specified Description The issue is related to the WebKit/Source/core/layout/LayoutObject.cpp function in the Blink engine, which does not properly restrict relayout...

PT-2016-1469

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.87 Opera affected versions not specified Description The issue is related to the ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, which does n...

PT-2016-1467

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to 49.0.2623.87 Google Chrome versions prior to 49.0.2623.87 PDFium versions prior to 49.0.2623.87 Opera versions prior to 49.0.2623.87 Description The issue is caused by multiple integer signedness errors in the opj j2...

PT-2016-1357

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Opera versions prior to 49.0.2623.75 Description The Content Security Policy CSP implementation in Blink does not ignore a URL's path component in the case of a ServiceWorker fetch. This allows remo...

PT-2016-1356

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Opera versions prior to 49.0.2623.75 Description The issue arises from inadequate determination of when anonymous block wrappers may exist in the WebKit/Source/core/layout/LayoutBlock.cpp function o...

PT-2016-1355

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Google V8 versions prior to 4.9.385.26 Opera affected versions not specified Description The issue is related to multiple unspecified vulnerabilities in the Google V8 engine and Google Chrome browse...

PT-2016-1344

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Opera affected versions not specified Description The issue is related to the Extensions subsystem, which does not properly maintain its own properties. This allows remote attackers to bypass intend...

PT-2016-1354

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Opera affected versions not specified Description The issue is related to multiple unspecified vulnerabilities in the code. These vulnerabilities can be exploited by a remote attacker to cause a...

PT-2016-1346

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Opera affected versions not specified Description The issue is related to a use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function. This vulnerability can be exploited by a...

PT-2016-1353

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Opera versions prior to 49.0.2623.75 Description The issue is related to a use-after-free vulnerability in the content/browser/web contents/web contents impl.cc component. This vulnerability can be...

PT-2016-1345

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Opera affected versions not specified Description The issue is related to a use-after-free vulnerability in Blink, which can be exploited by remote attackers to cause a denial of service or possibly...

PT-2016-1347

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Opera versions prior to 49.0.2623.75 Description The issue is related to the handling of OnDocumentElementCreated in the extensions/renderer/render frame observer natives.cc file, which does not...

PT-2016-1351

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Opera affected versions not specified Description The issue is related to a use-after-free vulnerability in the WebRTC Audio Private API implementation. This vulnerability can be exploited by a remo...

PT-2016-1350

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Opera affected versions not specified Description The issue is related to the extensions/renderer/resources/platform app.js in the Extensions subsystem, which does not properly restrict the use of W...