Hardcoded credentials

Opera before 10.63 allows remote attackers to cause a denial of service application crash via a Flash movie with a transparent Window Mode aka wmode property, which is not properly handled during navigation away from the containing HTML document...

Cross site scripting

Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote attackers to spoof the Address Bar, conduct cross-site scripting XSS attacks, and possibly execute arbitrary code by leveraging the ability of a script to...

CVE-2010-4049

Opera before 10.63 allows remote attackers to cause a denial of service application crash via a Flash movie with a transparent Window Mode aka wmode property, which is not properly handled during navigation away from the containing HTML document...

CVE-2010-4043

Technical details (affected product/version/root cause/impact) for CVE-2010-4043 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2010-4047

Opera before 10.63 does not properly select the security context of JavaScript code associated with an error page, which allows user-assisted remote attackers to conduct cross-site scripting XSS attacks via a crafted web site...

CVE-2010-4045

CVE-2010-4045 affects Opera before 10.63. The vulnerability arises because Opera does not properly restrict web scripts in unspecified circumstances involving reloads and redirects, allowing a remote attacker to spoof the Address Bar and perform cross-site scripting (XSS) attacks; in some cases t...

CVE-2010-4049

Opera before 10.63 is vulnerable to a denial-of-service via a Flash movie with a transparent Window Mode (wmode) property not handled correctly when navigating away from the containing HTML document. Affected products are Opera on Mac, Linux, and Windows; root cause is improper handling of Flash ...

CVE-2010-4044

Opera before 10.63 does not ensure that the portion of a URL shown in the Address Bar contains the beginning of the URL, which allows remote attackers to spoof URLs by changing a window's size...

CVE-2010-4044

CVE-2010-4044 affects Opera Browser prior to 10.63. The vulnerability allows spoofing the address bar by resizing the window, causing the visible URL to omit the true beginning of the address, which could mislead users about the site they are visiting. The OpenVAS entries label this as multiple v...

CVE-2010-4045

Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote attackers to spoof the Address Bar, conduct cross-site scripting XSS attacks, and possibly execute arbitrary code by leveraging the ability of a script to...

CVE-2010-4043

Opera before 10.63 does not prevent interpretation of a cross-origin document as a CSS stylesheet when the document lacks a CSS token sequence, which allows remote attackers to obtain sensitive information via a crafted document...

CVE-2010-4048

Opera before 10.63 allows user-assisted remote web servers to cause a denial of service application crash by sending a redirect during the saving of a file...

CVE-2010-4047

Opera before 10.63 is affected by a vulnerability where the security context of JavaScript on the error page is not correctly enforced, enabling user‑assisted remote XSS via a crafted site. Affected component: Opera browser (pre-10.63). Underlying cause: improper security context handling for err...

CVE-2010-4046

CVE-2010-4046 affects Opera browsers prior to 10.63. The vulnerability stems from Opera’s insufficient verification of video content origins, enabling a remote attacker to cause a video stream to be used as HTML5 canvas content and potentially reveal sensitive information. The issue is documented...

CVE-2010-4048

Opera before 10.63 is affected. The issue allows a user-assisted remote web server to cause a denial of service (application crash) by sending a redirect during the saving of a file. The CVE is listed in OpenVAS SUSE/OpenVAS entries for Mac, Linux, and Windows. The documents do not provide specif...

CVE-2010-4050

CVE-2010-4050 affects Opera before 10.63, with memory corruption leading to a denial of service when an SVG document is referenced in an IMG element. The affected software is the Opera browser (across Windows, Linux, macOS as cited in connected OpenVAS entries). Root cause: handling of SVG in IMG...

CVE-2010-4046

Opera before 10.63 does not properly verify the origin of video content, which allows remote attackers to obtain sensitive information by using a video stream as HTML5 canvas content...

CVE-2010-4050

Opera before 10.63 allows remote attackers to cause a denial of service memory corruption by referencing an SVG document in an IMG element...

Opera v10.63 SVG animation Element Denial of Service

Exploit for windows platform in category dos / poc ==================================================== Opera v10.63 SVG animation Element Denial of Service ==================================================== Software Link: http://www.opera.com/ Version: 10.63 and previous Tested on: Ubuntu 10.1...

openSUSE Security Update : opera (openSUSE-SU-2010:0728-1)

Opera 10.63 fixes some security issues as described in their changelog: http://www.opera.com/docs/changelogs/unix/1063/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-3324. The text...