CVE-2010-4579

Opera before 11.00 is affected by CVE-2010-4579 where dialogs (security information and download prompts) are not properly constrained to stay on top of rendered content, enabling a remote attacker to spoof dialogs and lure users to interact with crafted pages. The issue is documented across mult...

CVE-2010-4581

Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."...

CVE-2010-4583

Opera before 11.00, when Opera Turbo is enabled, does not display a page's security indication, which makes it easier for remote attackers to spoof trusted content via a crafted web site...

CVE-2010-4587

Opera before 11.00 on Windows does not properly implement the Insecure Third Party Module warning message, which might make it easier for user-assisted remote attackers to have an unspecified impact via a crafted module...

CVE-2010-4586

The CVE-2010-4586 issue concerns Opera before 11.00, where WebSockets functionality is enabled by default. The description indicates an unspecified impact and remote attack vectors, and notes a possible relation to CVE-2010-4508. Connected sources confirm that Opera 11.00 includes fixes, implying...

CVE-2010-4582

Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote attackers to bypass intended access restrictions via unspecified vectors...

CVE-2010-4584

Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites, which might make it easier for remote attackers to spoof trusted content via a crafted web site...

CVE-2010-4583

CVE-2010-4583 affects Opera prior to 11.00. When Opera Turbo is enabled, the browser may fail to display a page’s security indicator, enabling spoofing of trusted content via a crafted site. This vulnerability is addressed by upgrading Opera to a newer version (e.g., Opera 12.00.1467 or later as ...

CVE-2010-4580

Opera before 11.00 is affected by a vulnerability where WAP/WML form fields are not cleared when navigating to a new site, allowing a remote attacker to obtain sensitive information from an input field that shares a name with a previously visited site. The issue is confirmed in CVE-2010-4580 and ...

CVE-2010-4582

CVE-2010-4582 affects Opera browser. The flaw arises when updating extensions, where security policies are not properly enforced, potentially letting a remote attacker bypass intended access restrictions via unspecified vectors. Public advisories (SUSE/Gentoo GLSA 201206-03) describe this as part...

CVE-2010-4581

Opera before 11.00 is listed with an unspecified vulnerability (CVE-2010-4581) among multiple high‑severity issues. Connected advisories (SUSE/Gentoo GLSA 201206-03 and related Nessus plugins) indicate the risk includes remote code execution/DoS and other impacts; remediation guidance consistentl...

CVE-2010-4585

Unspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote attackers to cause a denial of service application crash by triggering an Opera Unite update...

CVE-2010-4579

Opera before 11.00 does not properly constrain dialogs to appear on top of rendered documents, which makes it easier for remote attackers to trick users into interacting with a crafted web site that spoofs the 1 security information dialog or 2 download dialog...

Opera < 11.00 Multiple Vulnerabilities

Binary data 5735.prm...

Opera < 11.00 Multiple Vulnerabilities

Binary data 800850.prm...

Opera may be used as a vector for multiple font issues in the underlying operating system – Opera Security Advisories

Opera may be used as a vector for multiple font issues in the underlying operating system – Opera Security Advisories OPCOM Team | December 17, 2010 Affected versions This vulnerability may be targeted through Opera for Windows. Severity Critical Description A flaw in the font handling on the...

Opera < 11 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 11.00. Such versions are potentially affected by the following issues : - An error exists such that web page content can be displayed over dialog boxes leading to security warning misrepresentation. 977, CVE-2010-4579 - An error...

WAP form content can be leaked to other sites

When accepting user input in form fields on a WAP page, WML requires that the input contents are remembered, and used to populate every further input sharing the same name. This should continue as long as the user continues to click links known as a WAP session, even populating similarly named...

WAP form content can be leaked to other sites – Opera Security Advisories

When accepting user input in form fields on a WAP page, WML requires that the input contents are remembered, and used to populate every further input sharing the same name. This should continue as long as the user continues to click links known as a WAP session, even populating similarly named...

FreeBSD Ports: opera

The remote host is missing an update to the system as announced in the referenced advisory. VID aab187d4-e0f3-11df-b1ea-001999392805 OpenVAS Vulnerability Test $ Description: Auto generated from VID aab187d4-e0f3-11df-b1ea-001999392805 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...