GLSA-200407-15 : Opera: Multiple spoofing vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200407-15 Opera: Multiple spoofing vulnerabilities Opera fails to remove illegal characters from an URI of a link and to check that the target frame of a link belongs to the same website as the link. Opera also updates the address...

Opera < 7.54 Download File Type Dialog Spoofing

The version of Opera on the remote host contains a flaw that allows an attacker to determine the existence of files and directories on the remote host. To exploit this flaw, an attacker would need to set up a rogue website and lure a user of the remote host into visiting it with Opera. C Tenable...

Microsoft Internet Explorer 6.0 Firefox 0.80.9.x - JavaScript Denial of Service

Microsoft Internet Explorer 6.0 Firefox 0.80.9.x - JavaScript Denial of Service source: https://www.securityfocus.com/bid/10998/info Web browsers from various vendors are reported prone to a JavaScript denial-of-service vulnerability. The specified JavaScript code will consume 100% of the CPU...

Opera < 7.24 getElementsByTagName JavaScript Method DoS

The version of Opera installed on the remote host is vulnerable to a remote denial of service. An attacker may cause the browser to crash by crafting a rogue HTML page containing a specific JavaScript command. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid14336;...

Opera Web Browser 7.23 - JavaScript Denial of Service

Opera Web Browser 7.23 - JavaScript Denial of Service source: https://www.securityfocus.com/bid/10997/info Opera Web Browser is reported prone to a JavaScript denial-of-service vulnerability. This vulnerability presents itself when Opera attempts to execute a specific JavaScript command. When...

Opera Web Browser 7.23 - JavaScript Denial of Service

source: https://www.securityfocus.com/bid/10997/info Opera Web Browser is reported prone to a JavaScript denial-of-service vulnerability. This vulnerability presents itself when Opera attempts to execute a specific JavaScript command. When executing this command, Opera will reportedly crash. This...

Opera Web Browser < 7.5.4 Multiple Vulnerabilities

Binary data 1243.prm...

Opera < 7.0.3 Multiple Vulnerabilities

Binary data 1764.prm...

Opera < 7.11 Filename Extension Handling Overflow

Binary data 1763.prm...

Opera < 7.54u1 Web Browser Resource Detection Weakness

Binary data 1782.prm...

Opera < 7.54.0 Remote Location Object XSS

Binary data 1774.prm...

Opera Local File/Directory Detection &#40;GM#009-OP&#41;

GreyMagic Security Advisory GM009-OP ===================================== By GreyMagic Software, 17 Aug 2004. Available in HTML format at http://www.greymagic.com/security/advisories/gm009-op/. Topic: Opera Local File/Directory Detection. Discovery date: 04 Aug 2004. Affected applications:...

Opera Web Browser Version Detection

Binary data 8055.prm...

Opera < 9.51 Multiple Vulnerabilities

Binary data 4572.prm...

Opera < 9.50 Multiple Vulnerabilities

Binary data 4541.prm...

Opera getElementsByTagName Javascript Method DoS

Binary data 2130.prm...

Opera < 8.54 signedness StyleSheet Overflow

Binary data 3515.prm...

Opera < 7.54 location Object Crafted URL Arbitrary Local File Access

The version of Opera on the remote host fails to block write access to the 'location' object. This could allow a user to create a specially crafted URL to overwrite methods within the 'location' object that would execute arbitrary code in a user's browser within the trust relationship between the...

Opera < 7.23 File Download Encoded Traversal Arbitrary File Deletion

The version of Opera installed on the remote host contains a file corruption vulnerability. This issue is exposed when a user is presented with a file dialog, which will cause the creation of a temporary file. It is possible to specify a relative path to another file on the system using directory...

Opera < 7.50 File Download Extension Spoofing

The version of Opera installed on the remote host contains a flaw that may allow a malicious user to trick a user into running arbitrary code. The issue is triggered when an malicious website provides a file for download, but crafts the filename in such a way that the file is executed, rather tha...