4495 matches found
Code injection
Unspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote attackers to cause a denial of service application crash by triggering an Opera Unite update...
CVE-2010-4582
Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote attackers to bypass intended access restrictions via unspecified vectors...
CVE-2010-4583
Opera before 11.00, when Opera Turbo is enabled, does not display a page's security indication, which makes it easier for remote attackers to spoof trusted content via a crafted web site...
CVE-2010-4581
Opera before 11.00 is listed with an unspecified vulnerability (CVE-2010-4581) among multiple high‑severity issues. Connected advisories (SUSE/Gentoo GLSA 201206-03 and related Nessus plugins) indicate the risk includes remote code execution/DoS and other impacts; remediation guidance consistentl...
CVE-2010-4581
Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."...
CVE-2010-4580
Opera before 11.00 does not clear WAP WML form fields after manual navigation to a new web site, which allows remote attackers to obtain sensitive information via an input field that has the same name as an input field on a previously visited web site...
CVE-2010-4580
Opera before 11.00 is affected by a vulnerability where WAP/WML form fields are not cleared when navigating to a new site, allowing a remote attacker to obtain sensitive information from an input field that shares a name with a previously visited site. The issue is confirmed in CVE-2010-4580 and ...
CVE-2010-4579
Opera before 11.00 is affected by CVE-2010-4579 where dialogs (security information and download prompts) are not properly constrained to stay on top of rendered content, enabling a remote attacker to spoof dialogs and lure users to interact with crafted pages. The issue is documented across mult...
CVE-2010-4585
Unspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote attackers to cause a denial of service application crash by triggering an Opera Unite update...
CVE-2010-4584
Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites, which might make it easier for remote attackers to spoof trusted content via a crafted web site...
CVE-2010-4582
CVE-2010-4582 affects Opera browser. The flaw arises when updating extensions, where security policies are not properly enforced, potentially letting a remote attacker bypass intended access restrictions via unspecified vectors. Public advisories (SUSE/Gentoo GLSA 201206-03) describe this as part...
CVE-2010-4587
Opera before 11.00 on Windows is vulnerable to CVE-2010-4587 due to improper handling of the Insecure Third Party Module warning message, which could allow a user-assisted remote attack via a crafted module. The available connected documents confirm the affected product/version and the general im...
CVE-2010-4585
CVE-2010-4585 affects Opera prior to 11.00, via the auto-update functionality (Opera Unite update). The vulnerability allows a remote attacker to cause an application crash/Denial of Service. Public references indicate Opera 11.00 release fixes this and related issues; no exploit details are prov...
CVE-2010-4579
Opera before 11.00 does not properly constrain dialogs to appear on top of rendered documents, which makes it easier for remote attackers to trick users into interacting with a crafted web site that spoofs the 1 security information dialog or 2 download dialog...
CVE-2010-4587
Opera before 11.00 on Windows does not properly implement the Insecure Third Party Module warning message, which might make it easier for user-assisted remote attackers to have an unspecified impact via a crafted module...
CVE-2010-4586
The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, possibly a related issue to CVE-2010-4508...
CVE-2010-4584
Opera CVE-2010-4584 describes a vulnerability in Opera prior to version 11.00 where, when Opera Turbo is enabled, the browser does not properly present information about problematic X.509 certificates on HTTPS sites, potentially enabling remote attackers to spoof trusted content via a crafted sit...
CVE-2010-4583
CVE-2010-4583 affects Opera prior to 11.00. When Opera Turbo is enabled, the browser may fail to display a page’s security indicator, enabling spoofing of trusted content via a crafted site. This vulnerability is addressed by upgrading Opera to a newer version (e.g., Opera 12.00.1467 or later as ...
CVE-2010-4586
The CVE-2010-4586 issue concerns Opera before 11.00, where WebSockets functionality is enabled by default. The description indicates an unspecified impact and remote attack vectors, and notes a possible relation to CVE-2010-4508. Connected sources confirm that Opera 11.00 includes fixes, implying...
