4506 matches found
CVE-2009-3265
Cross-site scripting XSS vulnerability in Opera 9 and 10 allows remote attackers to inject arbitrary web script or HTML via a 1 RSS or 2 Atom feed, related to the rendering of the application/rss+xml content type as "scripted content." NOTE: the vendor reportedly considers this behavior a "design...
CVE-2009-3266
Opera before 10.01 does not properly restrict HTML in a 1 RSS or 2 Atom feed, which allows remote attackers to conduct cross-site scripting XSS attacks, and conduct cross-zone scripting attacks involving the Feed Subscription Page to read feeds or create feed subscriptions, via a crafted feed,...
CVE-2009-3269
Opera 9.52 and earlier allows remote attackers to cause a denial of service CPU consumption via a series of automatic submissions of a form containing a KEYGEN element, a related issue to CVE-2009-1828...
Third-party cookie issue in Opera
Overview Opera contains an issue in which third-party cookies are not handled properly. Opera contains an issue in which third-party cookies are not handled properly. Please note that this issue only occurs when the user changes the setting for "Accept only cookies from the site I visit" from the...
JVN#39157969 Third-party cookie issue in Opera
Opera contains an issue in which third-party cookies are not handled properly. Please note that this issue only occurs when the user changes the setting for "Accept only cookies from the site I visit" from the default installation of Opera. Impact A remote attacker may be able to trace an user's...
Chrome/Opera ATOM/RSS Reader Script Execution
Exploiting Chrome and Operas inbuilt ATOM/RSS reader with Script Execution and more ---------------------------------------------------------------------------- --------- For complete post with images, please visit - http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomr...
Opera 9 Configuration Overwrite
Opera web browser in versions HttpClients::OPERA, :uamaxver = "9.10", :osname = OperatingSystems::Match::WINDOWS, OperatingSystems::Match::LINUX , :javascript = true, :rank = ExcellentRanking, reliable cmd exec, cleans up after itself :vulntest = nil, def initializeinfo = superupdateinfoinfo,...
FreeBSD Ports: opera, linux-opera
The remote host is missing an update to the system as announced in the referenced advisory. VID 4582948a-9716-11de-83a5-001999392805 OpenVAS Vulnerability Test $ Description: Auto generated from VID 4582948a-9716-11de-83a5-001999392805 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
FreeBSD Ports: opera, linux-opera
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Opera Multiple URL Spoofing Vulnerabilities (Sep 2009) - Windows
Opera Web Browser is prone to Multiple Spoof URL vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Opera 'javascript: URI' XSS Vulnerability (Sep 2009)
Opera Web Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Opera 'javascript: URI' XSS Vulnerability - Sep09 (Linux)
This host is installed with Opera Web Browser and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gboperajsurixssvulnsep09lin.nasl 4869 2016-12-29 11:01:45Z teissa $ Opera 'javascript: URI' XSS Vulnerability - Sep0 Linux Authors: Sharath S Copyright: Copyright c 20...
Opera Multiple URL Spoofing Vulnerabilities - Sep09 (Linux)
This host is installed with Opera Web Browser and is prone to Multiple Spoof URL vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamulturlspoofvulnsep09lin.nasl 4869 2016-12-29 11:01:45Z teissa $ Opera Multiple URL Spoofing Vulnerabilities - Sep09 Linux Authors: Sharath S Copyright: Copyrig...
Opera 'javascript: URI' XSS Vulnerability - Sep09
This host is installed with Opera Web Browser and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gboperajsurixssvulnsep09win.nasl 4869 2016-12-29 11:01:45Z teissa $ Opera 'javascript: URI' XSS Vulnerability - Sep09 Authors: Sharath S Copyright: Copyright c 2009...
Opera Multiple URL Spoofing Vulnerabilities - Sep09 (Windows)
This host is installed with Opera Web Browser and is prone to Multiple Spoof URL vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamulturlspoofvulnsep09win.nasl 4869 2016-12-29 11:01:45Z teissa $ Opera Multiple URL Spoofing Vulnerabilities - Sep09 Windows Authors: Sharath S Copyright:...
Opera Multiple URL Spoofing Vulnerabilities (Sep 2009) - Linux
Opera Web Browser is prone to Multiple Spoof URL vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Opera 'javascript: URI' XSS Vulnerability (Sep 2009) - Linux
Opera Web Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Auto-Updater Added to Opera Browser
The Opera Web browser has undergone a minor security makeover with one significant improvement — the ability to update itself when patches are released. The latest browser update will, by default, notify the user about available updates in very much the same way Mozilla Firefox handles automatic...
FreeBSD : opera -- multiple vulnerabilities (4582948a-9716-11de-83a5-001999392805)
Opera Team Reports : - Issue where sites using revoked intermediate certificates might be shown as secure - Issue where the collapsed address bar didn't show the current domain - Issue where pages could trick users into uploading files - Some IDNA characters not correctly displaying in the addres...
openSUSE Security Update : opera (opera-1261)
Opera version 10 includes at least security fixes for an XML denial-of-service bug CVE-2009-1234 and the 'SSL tampering' attack CVE-2009-2059, CVE-2009-2063, CVE-2009-2067, CVE-2009-2070. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...