4492 matches found
CVE-2011-4681
Opera before 11.60 does not properly consider the number of . dot characters that conventionally exist in domain names of different top-level domains, which allows remote attackers to bypass the Same Origin Policy by leveraging access to a different domain name in the same top-level domain, as...
CVE-2011-4687
Opera before 11.60 allows remote attackers to cause a denial of service CPU and memory consumption via unspecified content on a web page, as demonstrated by a page under the cisco.com home page...
CVE-2010-5068
The Cascading Style Sheets CSS implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...
CVE-2010-5072
The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method...
Design/Logic Flaw
The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Origin Policy via vectors related to variables on different web sites...
Design/Logic Flaw
Opera before 11.60 does not properly consider the number of . dot characters that conventionally exist in domain names of different top-level domains, which allows remote attackers to bypass the Same Origin Policy by leveraging access to a different domain name in the same top-level domain, as...
Code injection
Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe issue."...
Security feature bypass
The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method...
Design/Logic Flaw
Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code...
Code injection
Unspecified vulnerability in the Web Workers implementation in Opera before 11.60 allows remote attackers to cause a denial of service application crash via unknown vectors...
Design/Logic Flaw
Dragonfly in Opera before 11.60 allows remote attackers to cause a denial of service application crash via unspecified content on a web page, as demonstrated by forbes.com...
Code injection
Opera before 11.60 allows remote attackers to cause a denial of service CPU and memory consumption via unspecified content on a web page, as demonstrated by a page under the cisco.com home page...
Design/Logic Flaw
Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corner cases."...
Design/Logic Flaw
The Cascading Style Sheets CSS implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...
CVE-2011-4687
CVE-2011-4687 affects Opera before 11.60. The issue is a remote denial-of-service vulnerability caused by processing unspecified content on a web page (demonstrated via a Cisco homepage page), leading to CPU and memory consumption. Public documents identify Opera 11.60 as the fixed version; OpenV...
CVE-2010-5068
The Cascading Style Sheets CSS implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...
CVE-2010-5072
Opera 10.5 JavaScript getComputedStyle implementation is vulnerable to information disclosure. The vulnerability arises because the set of values returned by getComputedStyle is not properly restricted, allowing an attacker to remotely obtain sensitive information about visited web pages. This af...
CVE-2011-4684
Opera before 11.60 does not properly handle certificate revocation, per CVE-2011-4684. Connected sources confirm affected product: Opera browser; root cause: improper certificate revocation handling; impact is described as unspecified in the initial entry. Remediation evident in the connected doc...
CVE-2011-4681
Opera before 11.60 does not properly consider the number of . dot characters that conventionally exist in domain names of different top-level domains, which allows remote attackers to bypass the Same Origin Policy by leveraging access to a different domain name in the same top-level domain, as...