5419 matches found
CVE-2012-6465: Improper Control of Generation of Code
Opera before 12.10 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a malformed SVG image...
CVE-2012-6464: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript code that overrides methods of unspecified native objects in documents that have different origins...
CVE-2012-6462: Undefined Security Weakness
Opera before 12.10 does not properly implement the Cross-Origin Resource Sharing CORS specification, which allows remote attackers to bypass intended page-content restrictions via a crafted request...
CVE-2012-6461: Improper Input Validation
The X.509 certificate-validation functionality in the https implementation in Opera before 12.10 allows remote attackers to trigger a false indication of successful revocation-status checking by causing a failure of a single checking service...
CVE-2012-6470: Improper Restriction of Operations within the Bounds of a Memory Buffer
Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary code or cause a denial of service memory overwrite via a malformed image...
CVE-2012-6469: Exposure of Sensitive Information to an Unauthorized Actor
Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors involving web script in an error page...
PT-2013-1954
Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.10 Description The issue concerns the X.509 certificate-validation functionality in Opera's https implementation. It allows remote attackers to trigger a false indication of successful revocation-status checking by...
CVE-2012-6466: Exposure of Sensitive Information to an Unauthorized Actor
Opera before 12.10 does not properly handle incorrect size data in a WebP image, which allows remote attackers to obtain potentially sensitive information from process memory by using a crafted image as the fill pattern for a canvas...
CVE-2012-6472: Undefined Security Weakness
Opera before 12.12 on UNIX uses weak permissions for the profile directory, which allows local users to obtain sensitive information by reading a 1 cache file, 2 password file, or 3 configuration file, or 4 possibly gain privileges by modifying or overwriting a configuration file...
PT-2013-1957
Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.10 Description The issue allows remote attackers to conduct phishing attacks via a crafted web site, as it follows Internet shortcuts referenced by a 1 IMG element or 2 other inline element. This has been exploited i...
CVE-2012-6467: Undefined Security Weakness
Opera before 12.10 follows Internet shortcuts that are referenced by a 1 IMG element or 2 other inline element, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site, as exploited in the wild in November 2012...
VulnCheck KEV: CVE-2012-6467
Opera before 12.10 follows Internet shortcuts that are referenced by a 1 IMG element or 2 other inline element, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site, as exploited in the wild in November 2012...
FreeBSD : otrs -- XSS vulnerability in Firefox and Opera (95a69d1a-52a5-11e2-a289-1c4bd681f0cf)
OTRS Security Advisory reports : This advisory covers vulnerabilities discovered in the OTRS core system. This is a variance of the XSS vulnerability, where an attacker could send a specially prepared HTML email to OTRS which would cause JavaScript code to be executed in your browser while...
Firefox/Chrome/Chromium Multiple Web Browsers (Memory Exhaustion)
This is a very stupid bug that can fill the memory and processor simply by entering a URL with a specially crafted web server The Evil Server This bug is based on an incorrect parsing of HTTP responses with "Connection: Keep-Alive" in ... basically all web browsers xD Chrome Firefox Chromium Lynx...
CVE-2012-5180
The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application...
Code injection
The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application...
CVE-2012-5180
The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application...
CVE-2012-5180
The CVE-2012-5180 issue affects Opera Mini for Android versions prior to 7.5 and Opera Mobile for Android versions prior to 12.1. The vulnerability arises from improper handling/implementation of the WebView class, enabling information disclosure when a user runs a crafted malicious Android appli...
PT-2012-5828
Name of the Vulnerable Software and Affected Versions Opera Mobile versions prior to 12.1 Opera Mini versions prior to 7.5 Description The issue is related to the improper implementation of the WebView class in the affected applications, which allows attackers to obtain sensitive information via ...