4492 matches found
Cross site scripting
Opera before 10.01 does not properly restrict HTML in a 1 RSS or 2 Atom feed, which allows remote attackers to conduct cross-site scripting XSS attacks, and conduct cross-zone scripting attacks involving the Feed Subscription Page to read feeds or create feed subscriptions, via a crafted feed,...
CVE-2009-3269
Affected software: Opera 9.52 and earlier. Vulnerability: remote attackers can cause a denial of service (CPU consumption) through a series of automatic submissions of a form containing a KEYGEN element. This is the described impact. Root cause / context: the issue is linked to CVE-2009-1828 in r...
CVE-2008-7245
Opera 9.52 and earlier allows remote attackers to cause a denial of service unusable browser by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821...
CVE-2009-3266
Opera before 10.01 is vulnerable to cross-site scripting via crafted RSS/Atom feeds due to improper HTML restriction when processing application/rss+xml as scripted content. This can enable remote XSS and cross-zone scripting on the Feed Subscription Page to read feeds or create subscriptions. Af...
CVE-2009-3265
Opera 9.x/10.x is affected by CVE-2009-3265, a Cross-site scripting (XSS) flaw where rendering of RSS/Atom feeds as scripted content enables injection of arbitrary script/HTML. The underlying issue is the handling of application/rss+xml as scripted content. The vendor reportedly viewed this as a ...
CVE-2008-7245
CVE-2008-7245 : The available connected material confirms a denial-of-service in Opera 9.52 and earlier caused by repeatedly invoking the window.print function, leading to an unusable browser. The issue is described as a “printing DoS attack,” and is linked in related entries to CVE-2009-0821 (Fi...
CVE-2009-3269
Opera 9.52 and earlier allows remote attackers to cause a denial of service CPU consumption via a series of automatic submissions of a form containing a KEYGEN element, a related issue to CVE-2009-1828...
CVE-2009-3266
Opera before 10.01 does not properly restrict HTML in a 1 RSS or 2 Atom feed, which allows remote attackers to conduct cross-site scripting XSS attacks, and conduct cross-zone scripting attacks involving the Feed Subscription Page to read feeds or create feed subscriptions, via a crafted feed,...
CVE-2009-3265
Cross-site scripting XSS vulnerability in Opera 9 and 10 allows remote attackers to inject arbitrary web script or HTML via a 1 RSS or 2 Atom feed, related to the rendering of the application/rss+xml content type as "scripted content." NOTE: the vendor reportedly considers this behavior a "design...
Third-party cookie issue in Opera
Overview Opera contains an issue in which third-party cookies are not handled properly. Opera contains an issue in which third-party cookies are not handled properly. Please note that this issue only occurs when the user changes the setting for "Accept only cookies from the site I visit" from the...
JVN#39157969 Third-party cookie issue in Opera
Opera contains an issue in which third-party cookies are not handled properly. Please note that this issue only occurs when the user changes the setting for "Accept only cookies from the site I visit" from the default installation of Opera. Impact A remote attacker may be able to trace an user's...
Chrome/Opera ATOM/RSS Reader Script Execution
Exploiting Chrome and Operas inbuilt ATOM/RSS reader with Script Execution and more ---------------------------------------------------------------------------- --------- For complete post with images, please visit - http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomr...
Opera 9 Configuration Overwrite
Opera web browser in versions HttpClients::OPERA, :uamaxver = "9.10", :osname = OperatingSystems::Match::WINDOWS, OperatingSystems::Match::LINUX , :javascript = true, :rank = ExcellentRanking, reliable cmd exec, cleans up after itself :vulntest = nil, def initializeinfo = superupdateinfoinfo,...
FreeBSD Ports: opera, linux-opera
The remote host is missing an update to the system as announced in the referenced advisory. VID 4582948a-9716-11de-83a5-001999392805 OpenVAS Vulnerability Test $ Description: Auto generated from VID 4582948a-9716-11de-83a5-001999392805 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
FreeBSD Ports: opera, linux-opera
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Opera Multiple URL Spoofing Vulnerabilities (Sep 2009) - Windows
Opera Web Browser is prone to Multiple Spoof URL vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Opera 'javascript: URI' XSS Vulnerability (Sep 2009)
Opera Web Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Opera 'javascript: URI' XSS Vulnerability - Sep09 (Linux)
This host is installed with Opera Web Browser and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gboperajsurixssvulnsep09lin.nasl 4869 2016-12-29 11:01:45Z teissa $ Opera 'javascript: URI' XSS Vulnerability - Sep0 Linux Authors: Sharath S Copyright: Copyright c 20...
Opera 'javascript: URI' XSS Vulnerability - Sep09
This host is installed with Opera Web Browser and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gboperajsurixssvulnsep09win.nasl 4869 2016-12-29 11:01:45Z teissa $ Opera 'javascript: URI' XSS Vulnerability - Sep09 Authors: Sharath S Copyright: Copyright c 2009...
Opera Multiple URL Spoofing Vulnerabilities - Sep09 (Linux)
This host is installed with Opera Web Browser and is prone to Multiple Spoof URL vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamulturlspoofvulnsep09lin.nasl 4869 2016-12-29 11:01:45Z teissa $ Opera Multiple URL Spoofing Vulnerabilities - Sep09 Linux Authors: Sharath S Copyright: Copyrig...