4488 matches found
Double-clicking a link can unexpectedly run a program from the Internet – Opera Security Advisories
Double-clicking a link can unexpectedly run a program from the Internet – Opera Security Advisories OPCOM Team | June 29, 2010 Severity Moderately severe Description When a user clicks a link on a Web page that points to an executable file, Opera will show a download dialog to allow the user to...
Widget properties exposed to third party domains – Opera Security Advisories
Widget properties exposed to third party domains – Opera Security Advisories OPCOM Team | June 29, 2010 Severity Moderately severe Description In some cases, widget properties could be exposed to third party domains, leading to the possibility of leak of widget information, or configuration optio...
File inputs can disclose the path to selected files – Opera Security Advisories
File inputs can disclose the path to selected files – Opera Security Advisories OPCOM Team | June 29, 2010 Severity Less severe Description When a file is selected in a file upload input, the path to that file is not exposed through the input’s value property. This is done to protect any sensitiv...
Unrestricted File I/O can be used by Widgets to execute arbitrary code – Opera Security Advisories
Unrestricted File I/O can be used by Widgets to execute arbitrary code – Opera Security Advisories OPCOM Team | June 29, 2010 Severity Highly severe Description Widgets may use File I/O to create, read, modify, or delete files, with the user’s permission. When using this functionality, Opera shou...
Certain characters may be used for domain name spoofing – Opera Security Advisories
Certain characters may be used for domain name spoofing – Opera Security Advisories OPCOM Team | June 29, 2010 Severity Moderately severe Description Opera uses several approaches to prevent spoofing of internationalized domain names IDN with characters that look similar to each other. With...
FreeBSD : opera -- Data URIs can be used to allow XSS (77b9f9bc-7fdf-11df-8a8d-0008743bf21a)
The Opera Desktop Team reports : Data URIs are allowed to run scripts that manipulate pages from the site that directly opened them. In some cases, the opening site is not correctly detected. In these cases, Data URIs may erroneously be able to run scripts so that they interact with sites that di...
CVE-2010-2455
Opera does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which might allow remote attackers to conduct spoofing attacks via a crafted HTML document, a related issue to CVE-2010-1206...
Design/Logic Flaw
Opera does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which might allow remote attackers to conduct spoofing attacks via a crafted HTML document, a related issue to CVE-2010-1206...
CVE-2010-2455
Technical details for CVE-2010-2455 are not provided in the supplied documents. The connected Nessus/OpenSUSE advisories reference other CVEs (1205-1215, etc.) but do not elaborate on this specific Opera spoofing issue. Monitor for updates.
CVE-2010-2455
Opera does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which might allow remote attackers to conduct spoofing attacks via a crafted HTML document, a related issue to CVE-2010-1206...
Opera Browser Multiple Vulnerabilities (Windows)
The host is installed with Opera Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultvulnwinjun10.nasl 5401 2017-02-23 09:46:07Z teissa $ Opera Browser Multiple Vulnerabilities Windows Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...
Opera Browser Multiple Vulnerabilities - Windows
Opera Web Browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-2421
Multiple unspecified vulnerabilities in Opera before 10.54 have unknown impact and attack vectors related to 1 "extremely severe," 2 "highly severe," 3 "moderately severe," and 4 "less severe" issues...
Design/Logic Flaw
Multiple unspecified vulnerabilities in Opera before 10.54 have unknown impact and attack vectors related to 1 "extremely severe," 2 "highly severe," 3 "moderately severe," and 4 "less severe" issues...
CVE-2010-2421
Multiple unspecified vulnerabilities in Opera before 10.54 have unknown impact and attack vectors related to 1 "extremely severe," 2 "highly severe," 3 "moderately severe," and 4 "less severe" issues...
CVE-2010-2421
Opera web browser vulnerable to multiple issues tracked under CVE-2010-2421. OpenVAS/Gentoo GLSA entries confirm affected platform Opera and reference CVE-2010-2421 among many; remediation advised is upgrading to Opera 12.00.1467 or newer. The exact root cause/impact details are not fully enumera...
Data URIs can be used to allow cross-site scripting – Opera Security Advisories
Data URIs can be used to allow cross-site scripting – Opera Security Advisories OPCOM Team | June 22, 2010 Severity Highly severe Description Data URIs are allowed to run scripts that manipulate pages from the site that directly opened them. In some cases, the opening site is not correctly...
Opera < 10.54 Multiple Vulnerabilities
The version of Opera installed on the remote host is earlier than 10.54. Such versions are potentially affected by the following issues : - Web fonts may be used to trigger a privilege elevation vulnerability in the Windows operating system MS10-032 954 - It may be possible to use data URIs in a...
Opera Closes Critical Vulns With 10.54
Norwegian vendor Opera has presented version 10.54 of its browser to close four security holes, one of which the company rates as extremely severe and as another highly severe. Read the full article. The H Security...