CVE-2004-2083

Summary: Opera Web Browser 7.0–7.23 is affected by a file-download extension spoofing flaw. When a malicious site provides a downloadable file, the filename may embed a CLSID that makes the file appear as a trusted type, tricking users into executing it. This can lead to arbitrary code execution ...

CVE-2007-5476

Technical details about CVE-2007-5476 are not publicly available in the provided documents. No concrete product/version/impact/exploit information is present. Monitor for updates from authoritative sources to obtain specifics.

CVE-2010-0653

Opera before 10.10 allowed cross-origin loading of CSS stylesheets even when MIME type was incorrect and the stylesheet document malformed, enabling remote attackers to obtain sensitive information via a crafted document. The issue is confirmed across multiple sources: SUSE Gentoo GLSA references...

CVE-2004-1491

CVE-2004-1491 affects Opera 7.54 and earlier. The vulnerability arises because Opera uses kfmclient exec to handle unknown MIME types, allowing a remote attacker to execute arbitrary code via a shortcut or launcher containing an Exec entry. Public documents confirm this as a real issue across mul...

CVE-2005-3059

CVE-2005-3059 affects Opera 8.50 on Linux and Windows. The vulnerabilities are described as multiple unspecified issues tied to (1) handling of the must-revalidate cache directive for HTTPS pages and (2) a cookie comment encoding display issue. The connected documents do not provide concrete expl...

CVE-2009-1599

Summary: CVE-2009-1599 concerns a PDF-related JavaScript security bypass in Opera. The vulnerability arises when a javascript: URI is executed from the target attribute of a submit button inside a form contained in an inline PDF, potentially bypassing Adobe Acrobat JavaScript restrictions on acce...

CVE-2009-3831

CVE-2009-3831 affects Opera browser prior to 10.01. The flaw allows remote attackers to cause memory corruption and possible arbitrary code execution or a denial of service by supplying a crafted domain name. Multiple vendor advisories/OSS notes indicate the fix is to upgrade to Opera 10.1 or new...

CVE-2010-2658

Opera is affected by multiple vulnerabilities described in CVE-2010-2658. In Opera before 10.60, there is insufficient restriction of interactions between plug-ins, file inputs, and the clipboard, enabling a user-assisted remote attacker to trigger uploading of arbitrary files via a crafted web s...

CVE-2006-3199

The entries describe a vulnerability in Opera 9 where remote attackers can cause a denial of service (crash) by crafting an A tag href containing a URL with a long hostname, triggering an out-of-bounds operation. Affected software: Opera 9 (web rendering/input handling related to HTML anchor href...

CVE-2009-2067

The CVE-2009-2067 issue affects Opera browser. The vulnerability arises when an https page loads an http iframe referencing http content, allowing a MITM to inject arbitrary script within an https site context. This is tied to the HTTP-Intended-but-HTTPS-Loadable (HPIHSL) scenario and could enabl...

CVE-2009-3047

Opera before 10.00 is affected by a URL-spoofing vulnerability where a collapsed address bar fails to update the domain from the previous site to the current one, enabling a remote attacker to spoof URLs. The issue is documented across multiple sources (SUSE, Gentoo GLSA 201206-03, OpenVAS, and r...

CVE-2010-4587

Opera before 11.00 on Windows is vulnerable to CVE-2010-4587 due to improper handling of the Insecure Third Party Module warning message, which could allow a user-assisted remote attack via a crafted module. The available connected documents confirm the affected product/version and the general im...

CVE-2011-2611

CVE-2011-2611 affects Opera browser prior to 11.50, with an unspecified vulnerability in the printing functionality that could be triggered by a crafted web page to cause application crash (DoS). Multiple vendor advisories confirm the issue and note that Opera 11.50 fixes address it. Remediation ...

CVE-2011-2616

Summary (CVE-2011-2616) : An unspecified vulnerability in Opera prior to 11.50 could be exploited remotely to cause a denial of service via memory consumption on a web page (demonstrated by test262.ecmascript.org). The connected documents consistently identify Opera as the affected product and de...

CVE-2012-6461

Opera: CVE-2012-6461 concerns the X.509 certificate-validation in Opera’s HTTPS implementation. Affected: Opera before 12.10. Description: remote attackers could cause a false indication of revocation-status success by triggering a failure of a single checking service. Mitigation: upgrade to a ne...

CVE-2013-3210

Opera before 12.15 is vulnerable due to improper blocking of top‑level domains in Set‑Cookie headers, enabling a remote attacker to access sensitive information by controlling a different site in the same TLD. This is documented across multiple feeds (NVD and Red Hat/SUSE/OpenVAS entries referenc...

CVE-2003-0593

CVE-2003-0593 describes a vulnerability in Opera where remote attackers can bypass cookie access restrictions by using encoded directory traversal sequences (%2e%2e) in a URL. This leads Opera to send cookies outside the intended URL subset to a potentially co-located application on the same serv...

CVE-2007-6522

Opera prior to version 9.25 contains CVE-2007-6522 where rich text editing via designMode can be abused to perform cross-domain scripting. The vulnerability’s impact is described as enabling cross-site scripting by modifying contents in pages on other domains, with associated risk of information ...

CVE-2009-3044

Opera before 10.00 is affected by CVE-2009-3044 due to improper handling of a null character or invalid wildcard in the domain name in the X.509 certificate CN, enabling man‑in‑the‑middle spoofing of SSL servers via a certificate issued by a legitimate CA. The issue affects Opera’s certificate pa...

CVE-2009-3832

Opera for Windows prior to 10.01 is affected by CVE-2009-3832 due to the browser rendering UI using web fonts, allowing a crafted site to spoof the address bar. Root cause: Web fonts used in the UI are not prevented in rendering. Impact is spoofing the address field; exploitation status is not do...

CVE-2010-1993

Opera 9.52 is affected by CVE-2010-1993 due to improper handling of an IFRAME element with a mailto: URL in the SRC attribute, enabling denial of service via a page with many IFRAMEs. Public advisories (SUSE openSUSE GLSA 201206-03 and related Nessus plugins) describe upgrades to Opera 10.60 as t...

CVE-2010-2421

Opera web browser vulnerable to multiple issues tracked under CVE-2010-2421. OpenVAS/Gentoo GLSA entries confirm affected platform Opera and reference CVE-2010-2421 among many; remediation advised is upgrading to Opera 12.00.1467 or newer. The exact root cause/impact details are not fully enumera...

CVE-2010-4048

Opera before 10.63 is affected. The issue allows a user-assisted remote web server to cause a denial of service (application crash) by sending a redirect during the saving of a file. The CVE is listed in OpenVAS SUSE/OpenVAS entries for Mac, Linux, and Windows. The documents do not provide specif...

CVE-2010-4584

Opera CVE-2010-4584 describes a vulnerability in Opera prior to version 11.00 where, when Opera Turbo is enabled, the browser does not properly present information about problematic X.509 certificates on HTTPS sites, potentially enabling remote attackers to spoof trusted content via a crafted sit...

CVE-2011-0450

Opera before 11.01 on Windows is affected by CVE-2011-0450 due to the downloads manager failing to correctly determine the pathname of the filesystem-viewing application. This can allow a user-assisted remote attacker to execute arbitrary code via a crafted web site that hosts an executable file....

CVE-2012-6471

Opera before 12.12 has a vulnerability (CVE-2012-6471) where an attacker can spoof the address field by sending a high rate of HTTP requests. Evidence across Red Hat and Gentoo advisories confirms the issue and recommends upgrading Opera to a newer version (e.g., 12.13_p1734 or later). The OpenVA...

CVE-2003-1420

CVE-2003-1420 is a documented XSS vulnerability in Opera versions 6.0 through 7.0, where remote attackers could inject arbitrary script or HTML by abusing the HTTP Location header when automatic redirection is disabled. The vulnerability arises from how Opera handles redirects, enabling arbitrary...

CVE-2006-3198

CVE-2006-3198 affects Opera 8.54 and earlier. An integer overflow in JPEG handling may cause memory under-allocation, leading to a buffer overflow and possible arbitrary code execution. Public docs indicate upgrading to Opera 9.0 or newer as the remediation.

CVE-2008-4698

CVE-2008-4698 affects Opera before 9.61, where the browser does not properly block scripts during preview of a news feed, enabling a remote attacker to create arbitrary new feed subscriptions and read contents of feeds. Public sources in the connected docs describe Opera as vulnerable to inline s...

CVE-2010-3020

Opera before 10.61 contains a vulnerability in the news-feed preview where scripts are not properly removed, allowing an attacker to force subscriptions to arbitrary feeds via crafted content. Affected software: Opera browser (pre-10.61). Root cause: improper sanitization/removal of scripts in th...

CVE-2011-0681

CVE-2011-0681 affects Opera before 11.01. The CSS Extensions for XML implementation recognizes javascript: URLs in the -o-link property, enabling bypass of CSS filtering. Opera 11.01 fixes this by upgrading. The connected documents confirm the specific mechanism and the fixed version; exploitatio...

CVE-2011-2610

CVE-2011-2610 is an Opera browser vulnerability affecting versions before 11.50, described as an unspecified issue with unknown impact and attack vectors. The CVSS metrics in the initial record indicate a high-risk, network-exploitable flaw (AV:N/AC:L/Au:N/C:C/I:C/A:C; base score 10.0). Public ma...

CVE-2012-4145

Opera CVE-2012-4145 concerns multiple vulnerabilities in Opera prior to 12.01 on Windows and UNIX, and prior to 11.66 and 12.x prior to 12.01 on macOS. Public records from OpenVAS, Red Hat SCM, Gentoo GLSA, and Gentoo Nessus entries describe the issue as high-severity with CVSS base score 10.0 (A...

CVE-2004-0537

Opera 7.50 and earlier is vulnerable to address bar spoofing via the favicon feature. The weakness allows remote web pages to provide a favicon that is wider than expected, enabling spoofing of the apparent domain and facilitating phishing using a wide icon and added spaces. Concrete details acro...

CVE-2004-0717

CVE-2004-0717 affects Opera 7.51 for Windows and 7.50 for Linux. The vulnerability arises from Opera not properly preventing a frame in one domain from injecting content into a frame in another domain, enabling frame-injection that can facilitate site spoofing and related attacks. The connected d...

CVE-2004-2260

Opera Browser 7.23 and other versions before 7.50 are affected by an address-bar spoofing weakness. The root cause is a JavaScript-based onUnload/unOnload handling during page redirects, which can cause the address bar to display a spoofed domain and mislead users. This vulnerability could enable...

CVE-2004-2659

Technical details for CVE-2004-2659 are not publicly provided in the connected documents. The available description notes a user-assisted race condition in Opera's Open dialog, but no confirmed affected versions, fixes, or exploitation vectors are present. Monitor for updates.

CVE-2005-1139

Opera 8 Beta 3 could display the Organizational information of SSL certificates using first-generation vetted certs, enabling spoofing and phishing attacks. The issue is addressed in Opera’s 8.0 update per SUSE-SA:2005:031 advisory; remediation is to upgrade to Opera 8.0+ (or later) where this is...

CVE-2005-2273

Vulnerability summary: Opera 7.x and 8 before 8.01 contain a dialog origin spoofing issue where a Javascript dialog box is not clearly associated with the generating page, allowing remote attackers to spoof a dialog from a trusted site and facilitate phishing. Notes: The connected documents descr...

CVE-2005-3946

CVE-2005-3946 affects Opera 8.50, where a Java applet with a large string argument to the removeMember JNI method of the com.opera.JSObject class can cause a denial of service (crash). The available documents identify the vulnerable component and the nature of the impact but do not provide a reme...

CVE-2010-2663

CVE-2010-2663 affects the Opera web browser prior to 10.60. An ended event handler that changes the SRC attribute of an AUDIO element can trigger a denial of service (application hang). The OpenVAS/Gentoo entries corroborate Opera-focused vulnerabilities with this vector and point to upgrading to...

CVE-2010-4050

CVE-2010-4050 affects Opera before 10.63, with memory corruption leading to a denial of service when an SVG document is referenced in an IMG element. The affected software is the Opera browser (across Windows, Linux, macOS as cited in connected OpenVAS entries). Root cause: handling of SVG in IMG...

CVE-2011-0684

The connected sources confirm CVE-2011-0684 affects Opera prior to 11.01, where improper handling of redirections and certain HTTP responses could allow a remote server to access local files and exfiltrate their contents via local resources. The issue is tied to input validation in redirection ha...

CVE-2011-2621

Opera before 11.50 is vulnerable to a remote denial of service (crash) through form-layout related vectors. The vulnerability is described across multiple connected sources as an unspecified issue allowing remote exploitation, with remediation involving upgrading to Opera 11.50 or newer (as noted...

CVE-2012-3562

CVE-2012-3562 affects Opera before 12.00 Beta. The vulnerability arises from improper handling of a crafted web page during a reload, enabling a user‑assisted remote attacker to cause an application crash (DoS). The NVD description confirms the attacker requires user action and the impact is deni...

CVE-2012-6465

Opera before 12.10 is vulnerable to remote code execution or application crash via a malformed SVG image (CVE-2012-6465). The CVE is referenced in multiple sources (Red Hat security advisory, GLSA 201406-14, OpenVAS entries) that describe the vulnerability as part of a set of Opera issues with hi...

CVE-2013-4705

Consolidated details for CVE-2013-4705 show an XSS vulnerability in Opera before version 15.00, exploitable via improper handling of UTF-8 encoding. Affected software: Opera browser (pre-15.00). Root cause (as stated): cross-site scripting due to UTF-8 encoding/validation issues. Impact is descri...

CVE-2014-0815

The CVE-2014-0815 issue concerns Opera for Android versions before 18, where the browser’s URL/intent-scheme handling contains an interaction error that can disclose local data such as stored cookies. The affected component is Opera’s URL implementation, and exploitation would involve processing ...

CVE-2004-1490

CVE-2004-1490 affects Opera 7.54 and earlier. The issue: remote attackers can spoof file types shown in the download dialog by manipulating the Content-Disposition or Content-Type headers using dots and non-breaking spaces (ASCII 160). Impact described in sources includes confusion or verificatio...

CVE-2005-0456

Opera 7.54 and earlier is vulnerable to a data: URI handling issue where base64-encoded binary data is not validated, allowing a malicious site to obscure the URL in the download dialog and potentially lead to arbitrary code execution. Connected advisories (Gentoo GLSA 200502-17, OpenVAS entries)...