Opera may allow scripts to access feeds

Opera may allow scripts to run on the feed subscription page, thereby gaining access to the feeds object. This can be used for automatic subscription of feeds, or reading other feeds...

Adobe Acrobat < 9.2 / 8.1.7 / 7.1.4 Multiple Vulnerabilities (APSB09-15)

The version of Adobe Acrobat installed on the remote host is earlier than 9.2 / 8.1.7 / 7.1.4. Such versions are reportedly affected by multiple vulnerabilities : - A heap overflow vulnerability. CVE-2009-3459 - A memory corruption issue. CVE-2009-2985 - Multiple heap overflow vulnerabilities...

New vulnerabilities in OpenX

Hello 3APA3A! I want to warn you about Denial of Service, Cross-Site Scripting and Redirector vulnerabilities in OpenX. DoS Looped DoS: http://site/adclick.php About Looped DoS I wrote in my classification of DoS vulnerabilities in web applications http://websecurity.com.ua/2663/. Vulnerable are...

openSUSE 10 Security Update : opera (opera-6473)

Opera version 10 includes at least security fixes for an XML denial-of-service bug CVE-2009-1234 and the 'SSL tampering' attack CVE-2009-2059, CVE-2009-2063, CVE-2009-2067, CVE-2009-2070. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Opera Multiple Cross-Site Scripting Vulnerabilities (Sep 2009) - Windows

Opera is prone to multiple Cross-Site Scripting vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Multiple Cross-Site Scripting Vulnerabilities (Sep 2009) - Linux

Opera is prone to multiple Cross-Site Scripting vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Multiple Cross-Site Scripting Vulnerabilities - Sep09 (Linux)

This host is installed with Opera and is prone to multiple Cross-Site Scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultxssvulnsep09lin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Multiple Cross-Site Scripting Vulnerabilities - Sep09 Linux Authors: Sharath S Copyright:...

Opera Multiple Cross-Site Scripting Vulnerabilities - Sep09 (Windows)

This host is installed with Opera and is prone to multiple Cross-Site Scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultxssvulnsep09win.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Multiple Cross-Site Scripting Vulnerabilities - Sep09 Windows Authors: Sharath S Copyright:...

CVE-2008-7245

Opera 9.52 and earlier allows remote attackers to cause a denial of service unusable browser by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821...

Cross site scripting

Cross-site scripting XSS vulnerability in Opera 9 and 10 allows remote attackers to inject arbitrary web script or HTML via a 1 RSS or 2 Atom feed, related to the rendering of the application/rss+xml content type as "scripted content." NOTE: the vendor reportedly considers this behavior a "design...

CVE-2009-3265

Cross-site scripting XSS vulnerability in Opera 9 and 10 allows remote attackers to inject arbitrary web script or HTML via a 1 RSS or 2 Atom feed, related to the rendering of the application/rss+xml content type as "scripted content." NOTE: the vendor reportedly considers this behavior a "design...

Sql injection

Opera 9.52 and earlier allows remote attackers to cause a denial of service CPU consumption via a series of automatic submissions of a form containing a KEYGEN element, a related issue to CVE-2009-1828...

CVE-2009-3269

Opera 9.52 and earlier allows remote attackers to cause a denial of service CPU consumption via a series of automatic submissions of a form containing a KEYGEN element, a related issue to CVE-2009-1828...

Cross site scripting

Opera before 10.01 does not properly restrict HTML in a 1 RSS or 2 Atom feed, which allows remote attackers to conduct cross-site scripting XSS attacks, and conduct cross-zone scripting attacks involving the Feed Subscription Page to read feeds or create feed subscriptions, via a crafted feed,...

CVE-2009-3266

Opera before 10.01 does not properly restrict HTML in a 1 RSS or 2 Atom feed, which allows remote attackers to conduct cross-site scripting XSS attacks, and conduct cross-zone scripting attacks involving the Feed Subscription Page to read feeds or create feed subscriptions, via a crafted feed,...

CVE-2009-3269

Affected software: Opera 9.52 and earlier. Vulnerability: remote attackers can cause a denial of service (CPU consumption) through a series of automatic submissions of a form containing a KEYGEN element. This is the described impact. Root cause / context: the issue is linked to CVE-2009-1828 in r...

CVE-2009-3266

Opera before 10.01 is vulnerable to cross-site scripting via crafted RSS/Atom feeds due to improper HTML restriction when processing application/rss+xml as scripted content. This can enable remote XSS and cross-zone scripting on the Feed Subscription Page to read feeds or create subscriptions. Af...

CVE-2009-3265

Opera 9.x/10.x is affected by CVE-2009-3265, a Cross-site scripting (XSS) flaw where rendering of RSS/Atom feeds as scripted content enables injection of arbitrary script/HTML. The underlying issue is the handling of application/rss+xml as scripted content. The vendor reportedly viewed this as a ...

CVE-2008-7245

Opera 9.52 and earlier allows remote attackers to cause a denial of service unusable browser by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821...

CVE-2008-7245

CVE-2008-7245 : The available connected material confirms a denial-of-service in Opera 9.52 and earlier caused by repeatedly invoking the window.print function, leading to an unusable browser. The issue is described as a “printing DoS attack,” and is linked in related entries to CVE-2009-0821 (Fi...