CVE-2011-4685

Dragonfly in Opera before 11.60 allows remote attackers to cause a denial of service application crash via unspecified content on a web page, as demonstrated by forbes.com...

CVE-2011-4683

Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe issue."...

CVE-2010-5072

The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method...

CVE-2010-5068

The Cascading Style Sheets CSS implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...

Design/Logic Flaw

Dragonfly in Opera before 11.60 allows remote attackers to cause a denial of service application crash via unspecified content on a web page, as demonstrated by forbes.com...

Code injection

Unspecified vulnerability in the Web Workers implementation in Opera before 11.60 allows remote attackers to cause a denial of service application crash via unknown vectors...

Design/Logic Flaw

The Cascading Style Sheets CSS implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...

Security feature bypass

The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method...

Design/Logic Flaw

Opera before 11.60 does not properly consider the number of . dot characters that conventionally exist in domain names of different top-level domains, which allows remote attackers to bypass the Same Origin Policy by leveraging access to a different domain name in the same top-level domain, as...

Design/Logic Flaw

The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Origin Policy via vectors related to variables on different web sites...

Design/Logic Flaw

Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corner cases."...

Code injection

Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe issue."...

Design/Logic Flaw

Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code...

Code injection

Opera before 11.60 allows remote attackers to cause a denial of service CPU and memory consumption via unspecified content on a web page, as demonstrated by a page under the cisco.com home page...

CVE-2011-4681

Opera before 11.60 is affected by a vulnerability where the browser does not properly account for the number of dot characters in domain names within the same top-level domain, allowing a remote attacker to bypass the Same Origin Policy by accessing a differently named domain in the same TLD (e.g...

CVE-2011-4685

CVE-2011-4685 affects Opera prior to version 11.60. The issue allows remote attackers to cause a denial of service (application crash) via content on a web page (e.g., Forbes demonstrates). Affected software: Opera before 11.60. Root cause details are not elaborated in the provided text beyond th...

CVE-2011-4683

Opera before 11.60 is affected by multiple vulnerabilities (described in GLSA-201206-03). A remote attacker could entice a user to open a crafted page, potentially allowing execution of arbitrary code or other impacts; local attackers could abuse symlink attacks; there are broader DoS/spoofing im...

CVE-2011-4686

Unspecified vulnerability in the Web Workers implementation in Opera before 11.60 allows remote attackers to cause a denial of service application crash via unknown vectors...

CVE-2011-4690

CVE-2011-4690 affects Opera 11.60 and earlier. The vulnerability arises because Opera does not prevent capturing timing data related to Same Origin Policy violations during IFRAME loading, enabling remote attackers to determine whether a document exists in the browser cache via crafted JavaScript...

CVE-2010-5068

The Cascading Style Sheets CSS implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...