CVE-2007-5476

Technical details about CVE-2007-5476 are not publicly available in the provided documents. No concrete product/version/impact/exploit information is present. Monitor for updates from authoritative sources to obtain specifics.

CVE-2009-2067

The CVE-2009-2067 issue affects Opera browser. The vulnerability arises when an https page loads an http iframe referencing http content, allowing a MITM to inject arbitrary script within an https site context. This is tied to the HTTP-Intended-but-HTTPS-Loadable (HPIHSL) scenario and could enabl...

CVE-2010-4044

CVE-2010-4044 affects Opera Browser prior to 10.63. The vulnerability allows spoofing the address bar by resizing the window, causing the visible URL to omit the true beginning of the address, which could mislead users about the site they are visiting. The OpenVAS entries label this as multiple v...

CVE-2005-0456

Opera 7.54 and earlier is vulnerable to a data: URI handling issue where base64-encoded binary data is not validated, allowing a malicious site to obscure the URL in the download dialog and potentially lead to arbitrary code execution. Connected advisories (Gentoo GLSA 200502-17, OpenVAS entries)...

CVE-2006-3198

CVE-2006-3198 affects Opera 8.54 and earlier. An integer overflow in JPEG handling may cause memory under-allocation, leading to a buffer overflow and possible arbitrary code execution. Public docs indicate upgrading to Opera 9.0 or newer as the remediation.

CVE-2010-2658

Opera is affected by multiple vulnerabilities described in CVE-2010-2658. In Opera before 10.60, there is insufficient restriction of interactions between plug-ins, file inputs, and the clipboard, enabling a user-assisted remote attacker to trigger uploading of arbitrary files via a crafted web s...

CVE-2011-2611

CVE-2011-2611 affects Opera browser prior to 11.50, with an unspecified vulnerability in the printing functionality that could be triggered by a crafted web page to cause application crash (DoS). Multiple vendor advisories confirm the issue and note that Opera 11.50 fixes address it. Remediation ...

CVE-2005-3946

CVE-2005-3946 affects Opera 8.50, where a Java applet with a large string argument to the removeMember JNI method of the com.opera.JSObject class can cause a denial of service (crash). The available documents identify the vulnerable component and the nature of the impact but do not provide a reme...

CVE-2008-7245

CVE-2008-7245 : The available connected material confirms a denial-of-service in Opera 9.52 and earlier caused by repeatedly invoking the window.print function, leading to an unusable browser. The issue is described as a “printing DoS attack,” and is linked in related entries to CVE-2009-0821 (Fi...

CVE-2009-3831

CVE-2009-3831 affects Opera browser prior to 10.01. The flaw allows remote attackers to cause memory corruption and possible arbitrary code execution or a denial of service by supplying a crafted domain name. Multiple vendor advisories/OSS notes indicate the fix is to upgrade to Opera 10.1 or new...

CVE-2010-4587

Opera before 11.00 on Windows is vulnerable to CVE-2010-4587 due to improper handling of the Insecure Third Party Module warning message, which could allow a user-assisted remote attack via a crafted module. The available connected documents confirm the affected product/version and the general im...

CVE-2012-6461

Opera: CVE-2012-6461 concerns the X.509 certificate-validation in Opera’s HTTPS implementation. Affected: Opera before 12.10. Description: remote attackers could cause a false indication of revocation-status success by triggering a failure of a single checking service. Mitigation: upgrade to a ne...

CVE-2004-0717

CVE-2004-0717 affects Opera 7.51 for Windows and 7.50 for Linux. The vulnerability arises from Opera not properly preventing a frame in one domain from injecting content into a frame in another domain, enabling frame-injection that can facilitate site spoofing and related attacks. The connected d...

CVE-2007-0126

CVE-2007-0126 concerns Opera 9.02 where a heap-based overflow in processing a JPEG Define Huffman Table (DHT) marker can allow remote code execution. Connected advisories alsoreference CVE-2007-0127 related to a typecasting issue in Opera’s SVG handling. Mitigation documented in GLSA 200701-08 an...

CVE-2007-6524

Technical details for CVE-2007-6524 are not provided in the connected documents. The initial description mentions a memory-content leak via BMP in Opera before 9.25, but no concrete affected versions, root cause, impact, or fixes are included here. Monitor for updates.

CVE-2009-3047

Opera before 10.00 is affected by a URL-spoofing vulnerability where a collapsed address bar fails to update the domain from the previous site to the current one, enabling a remote attacker to spoof URLs. The issue is documented across multiple sources (SUSE, Gentoo GLSA 201206-03, OpenVAS, and r...

CVE-2009-3832

Opera for Windows prior to 10.01 is affected by CVE-2009-3832 due to the browser rendering UI using web fonts, allowing a crafted site to spoof the address bar. Root cause: Web fonts used in the UI are not prevented in rendering. Impact is spoofing the address field; exploitation status is not do...

CVE-2010-2421

Opera web browser vulnerable to multiple issues tracked under CVE-2010-2421. OpenVAS/Gentoo GLSA entries confirm affected platform Opera and reference CVE-2010-2421 among many; remediation advised is upgrading to Opera 12.00.1467 or newer. The exact root cause/impact details are not fully enumera...

CVE-2010-4048

Opera before 10.63 is affected. The issue allows a user-assisted remote web server to cause a denial of service (application crash) by sending a redirect during the saving of a file. The CVE is listed in OpenVAS SUSE/OpenVAS entries for Mac, Linux, and Windows. The documents do not provide specif...

CVE-2010-4584

Opera CVE-2010-4584 describes a vulnerability in Opera prior to version 11.00 where, when Opera Turbo is enabled, the browser does not properly present information about problematic X.509 certificates on HTTPS sites, potentially enabling remote attackers to spoof trusted content via a crafted sit...

CVE-2011-1337

CVE-2011-1337 affects Opera before 11.50, where remote attackers could cause a denial of service (disk consumption) by triggering error pages from invalid URLs. Mitigation documented by Gentoo/OpenVAS advisories: upgrade to Opera 12.00.x or later (e.g., >= www-client/opera-12.00.1467). Technic...

CVE-2011-4684

Opera before 11.60 does not properly handle certificate revocation, per CVE-2011-4684. Connected sources confirm affected product: Opera browser; root cause: improper certificate revocation handling; impact is described as unspecified in the initial entry. Remediation evident in the connected doc...

CVE-2012-3556

CVE-2012-3556 affects Opera before 11.65. A UI handling flaw allows opening a pop-up in response to the first click of a double-click action, enabling user-assisted remote XSS or arbitrary code execution via a crafted website. Affected: Opera desktop builds prior to 11.65 (per Red Hat advisory). ...

CVE-2012-4145

Opera CVE-2012-4145 concerns multiple vulnerabilities in Opera prior to 12.01 on Windows and UNIX, and prior to 11.66 and 12.x prior to 12.01 on macOS. Public records from OpenVAS, Red Hat SCM, Gentoo GLSA, and Gentoo Nessus entries describe the issue as high-severity with CVSS base score 10.0 (A...

CVE-2003-1420

CVE-2003-1420 is a documented XSS vulnerability in Opera versions 6.0 through 7.0, where remote attackers could inject arbitrary script or HTML by abusing the HTTP Location header when automatic redirection is disabled. The vulnerability arises from how Opera handles redirects, enabling arbitrary...

CVE-2004-2260

Opera Browser 7.23 and other versions before 7.50 are affected by an address-bar spoofing weakness. The root cause is a JavaScript-based onUnload/unOnload handling during page redirects, which can cause the address bar to display a spoofed domain and mislead users. This vulnerability could enable...

CVE-2008-4698

CVE-2008-4698 affects Opera before 9.61, where the browser does not properly block scripts during preview of a news feed, enabling a remote attacker to create arbitrary new feed subscriptions and read contents of feeds. Public sources in the connected docs describe Opera as vulnerable to inline s...

CVE-2010-1993

Opera 9.52 is affected by CVE-2010-1993 due to improper handling of an IFRAME element with a mailto: URL in the SRC attribute, enabling denial of service via a page with many IFRAMEs. Public advisories (SUSE openSUSE GLSA 201206-03 and related Nessus plugins) describe upgrades to Opera 10.60 as t...

CVE-2010-3020

Opera before 10.61 contains a vulnerability in the news-feed preview where scripts are not properly removed, allowing an attacker to force subscriptions to arbitrary feeds via crafted content. Affected software: Opera browser (pre-10.61). Root cause: improper sanitization/removal of scripts in th...

CVE-2010-4050

CVE-2010-4050 affects Opera before 10.63, with memory corruption leading to a denial of service when an SVG document is referenced in an IMG element. The affected software is the Opera browser (across Windows, Linux, macOS as cited in connected OpenVAS entries). Root cause: handling of SVG in IMG...

CVE-2010-4579

Opera before 11.00 is affected by CVE-2010-4579 where dialogs (security information and download prompts) are not properly constrained to stay on top of rendered content, enabling a remote attacker to spoof dialogs and lure users to interact with crafted pages. The issue is documented across mult...

CVE-2011-2616

Summary (CVE-2011-2616) : An unspecified vulnerability in Opera prior to 11.50 could be exploited remotely to cause a denial of service via memory consumption on a web page (demonstrated by test262.ecmascript.org). The connected documents consistently identify Opera as the affected product and de...

CVE-2012-1924

CVE-2012-1924 affects the Opera browser (older branches) where user-assisted remote attackers could induce download dialog tricks to execute arbitrary files. Public details in connected records confirm affected lines include Opera before 11.62 (Mac) and similar series on Windows/UNIX; OpenSUSE no...

CVE-2012-6465

Opera before 12.10 is vulnerable to remote code execution or application crash via a malformed SVG image (CVE-2012-6465). The CVE is referenced in multiple sources (Red Hat security advisory, GLSA 201406-14, OpenVAS entries) that describe the vulnerability as part of a set of Opera issues with hi...

CVE-2012-6470

Opera before 12.12 is vulnerable to a memory allocation issue when processing GIF images, which can allow remote code execution or memory overwrite leading to a denial of service. Affected software: Opera browser (multiple OS variants) prior to version 12.12. Root cause: improper memory allocatio...

CVE-2012-6471

Opera before 12.12 has a vulnerability (CVE-2012-6471) where an attacker can spoof the address field by sending a high rate of HTTP requests. Evidence across Red Hat and Gentoo advisories confirms the issue and recommends upgrading Opera to a newer version (e.g., 12.13_p1734 or later). The OpenVA...

CVE-2004-0872

CVE-2004-0872 affects Opera and describes a cookie handling flaw where cookies sent over an insecure channel (HTTP) can also be presented on a secure channel (HTTPS/SSL) within the same domain. This enables potential cookie leakage and unauthorized session usage (Cross Security Boundary Cookie In...

CVE-2005-0457

CVE-2005-0457 affects Opera on Gentoo Linux (versions 7.54 and earlier) due to an insecure plugin path that allows local privilege escalation by placing malicious libraries in the PORTAGE_TMPDIR. Connected sources (Gentoo GLSA 200502-17) reiterate this as a vulnerability in Opera’s handling of pl...

CVE-2008-4725

CVE-2008-4725 describes a Cross-site scripting (XSS) vulnerability in Opera 9.52 related to History Search where query-string data is not properly escaped before storage in md.dat. The issue allows remote attackers to inject scripts via History Search results. Connected sources confirm Opera 9.52...

CVE-2009-3044

Opera before 10.00 is affected by CVE-2009-3044 due to improper handling of a null character or invalid wildcard in the domain name in the X.509 certificate CN, enabling man‑in‑the‑middle spoofing of SSL servers via a certificate issued by a legitimate CA. The issue affects Opera’s certificate pa...

CVE-2010-1310

CVE-2010-1310 affects Opera 10.50, where crafted XSLT constructs can cause the browser to return cached contents of other pages, enabling information disclosure. Root cause: XSLT processing allows access to cached documents. Impact: remote attackers may obtain sensitive information. Exploitation ...

CVE-2010-2663

CVE-2010-2663 affects the Opera web browser prior to 10.60. An ended event handler that changes the SRC attribute of an AUDIO element can trigger a denial of service (application hang). The OpenVAS/Gentoo entries corroborate Opera-focused vulnerabilities with this vector and point to upgrading to...

CVE-2010-3019

CVE-2010-3019 refers to a heap-based buffer overflow in Opera prior to 10.61. The overflow occurs in HTML5 canvas painting during application of transformations, allowing a remote attacker to execute arbitrary code or cause a denial of service (application crash/hang). Multiple connected advisori...

CVE-2011-2610

CVE-2011-2610 is an Opera browser vulnerability affecting versions before 11.50, described as an unspecified issue with unknown impact and attack vectors. The CVSS metrics in the initial record indicate a high-risk, network-exploitable flaw (AV:N/AC:L/Au:N/C:C/I:C/A:C; base score 10.0). Public ma...

CVE-2011-2621

Opera before 11.50 is vulnerable to a remote denial of service (crash) through form-layout related vectors. The vulnerability is described across multiple connected sources as an unspecified issue allowing remote exploitation, with remediation involving upgrading to Opera 11.50 or newer (as noted...

CVE-2012-4142

Opera’s CVE-2012-4142 affects multiple platforms: Windows/UNIX builds before 12.01 and Mac OS X builds before 11.66 (and before 12.01 for 12.x lines). The flaw arises from Opera’s HTML parsing, which ignores some characters under unspecified circumstances, enabling remote XSS via crafted document...

CVE-2016-4075

CVE-2016-4075 affects Opera Mini 13 and Opera Stable 36, allowing remote attackers to spoof the displayed URL via a crafted HTML document related to about:blank. Connected sources confirm this address-bar spoofing vulnerability in Opera products and note remote exploitation through specially craf...

CVE-2004-2659

Technical details for CVE-2004-2659 are not publicly provided in the connected documents. The available description notes a user-assisted race condition in Opera's Open dialog, but no confirmed affected versions, fixes, or exploitation vectors are present. Monitor for updates.

CVE-2007-4367

CVE-2007-4367 affects Opera prior to 9.23 due to a flaw in the JavaScript engine that can trigger a “virtual function call on an invalid pointer.” This allows remote arbitrary code execution. Documents reference Opera updates/patches (Opera 9.23+), e.g., SUSE/Gentoo advisories and OpenVAS/Nessus ...

CVE-2007-6522

Opera prior to version 9.25 contains CVE-2007-6522 where rich text editing via designMode can be abused to perform cross-domain scripting. The vulnerability’s impact is described as enabling cross-site scripting by modifying contents in pages on other domains, with associated risk of information ...