File inputs can disclose the path to selected files – Opera Security Advisories

File inputs can disclose the path to selected files – Opera Security Advisories OPCOM Team | June 29, 2010 Severity Less severe Description When a file is selected in a file upload input, the path to that file is not exposed through the input’s value property. This is done to protect any sensitiv...

Widget properties exposed to third party domains – Opera Security Advisories

Widget properties exposed to third party domains – Opera Security Advisories OPCOM Team | June 29, 2010 Severity Moderately severe Description In some cases, widget properties could be exposed to third party domains, leading to the possibility of leak of widget information, or configuration optio...

Adobe Reader 9.3.2 - 'CoolType.dll' Remote Memory Corruption / Denial of Service

/ Title: Adobe Reader 9.3.2 CoolType.dll Remote Memory Corruption / DoS Vulnerability Summary: Adobe Reader software is the global standard for electronic document sharing. It is the only PDF file viewer that can open and interact with all PDF documents. Use Adobe Reader to view, search, digitall...

FreeBSD : opera -- Data URIs can be used to allow XSS (77b9f9bc-7fdf-11df-8a8d-0008743bf21a)

The Opera Desktop Team reports : Data URIs are allowed to run scripts that manipulate pages from the site that directly opened them. In some cases, the opening site is not correctly detected. In these cases, Data URIs may erroneously be able to run scripts so that they interact with sites that di...

CVE-2010-2455

Opera does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which might allow remote attackers to conduct spoofing attacks via a crafted HTML document, a related issue to CVE-2010-1206...

Design/Logic Flaw

Opera does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which might allow remote attackers to conduct spoofing attacks via a crafted HTML document, a related issue to CVE-2010-1206...

CVE-2010-2455

Technical details for CVE-2010-2455 are not provided in the supplied documents. The connected Nessus/OpenSUSE advisories reference other CVEs (1205-1215, etc.) but do not elaborate on this specific Opera spoofing issue. Monitor for updates.

CVE-2010-2455

Opera does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which might allow remote attackers to conduct spoofing attacks via a crafted HTML document, a related issue to CVE-2010-1206...

Opera Browser Multiple Vulnerabilities (Windows)

The host is installed with Opera Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultvulnwinjun10.nasl 5401 2017-02-23 09:46:07Z teissa $ Opera Browser Multiple Vulnerabilities Windows Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

Opera Browser Multiple Vulnerabilities - Windows

Opera Web Browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2421

Multiple unspecified vulnerabilities in Opera before 10.54 have unknown impact and attack vectors related to 1 "extremely severe," 2 "highly severe," 3 "moderately severe," and 4 "less severe" issues...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Opera before 10.54 have unknown impact and attack vectors related to 1 "extremely severe," 2 "highly severe," 3 "moderately severe," and 4 "less severe" issues...

CVE-2010-2421

Multiple unspecified vulnerabilities in Opera before 10.54 have unknown impact and attack vectors related to 1 "extremely severe," 2 "highly severe," 3 "moderately severe," and 4 "less severe" issues...

CVE-2010-2421

Opera web browser vulnerable to multiple issues tracked under CVE-2010-2421. OpenVAS/Gentoo GLSA entries confirm affected platform Opera and reference CVE-2010-2421 among many; remediation advised is upgrading to Opera 12.00.1467 or newer. The exact root cause/impact details are not fully enumera...

Data URIs can be used to allow cross-site scripting – Opera Security Advisories

Data URIs can be used to allow cross-site scripting – Opera Security Advisories OPCOM Team | June 22, 2010 Severity Highly severe Description Data URIs are allowed to run scripts that manipulate pages from the site that directly opened them. In some cases, the opening site is not correctly...

Opera < 10.54 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 10.54. Such versions are potentially affected by the following issues : - Web fonts may be used to trigger a privilege elevation vulnerability in the Windows operating system MS10-032 954 - It may be possible to use data URIs in a...

Opera Closes Critical Vulns With 10.54

Norwegian vendor Opera has presented version 10.54 of its browser to close four security holes, one of which the company rates as extremely severe and as another highly severe. Read the full article. The H Security...

Opera < 10.54 Multiple Vulnerabilities

Binary data 5576.prm...

Opera < 10.54 Multiple Vulnerabilities

Binary data 800860.prm...

opera -- Data URIs can be used to allow cross-site scripting

The Opera Desktop Team reports: Data URIs are allowed to run scripts that manipulate pages from the site that directly opened them. In some cases, the opening site is not correctly detected. In these cases, Data URIs may erroneously be able to run scripts so that they interact with sites that did...