CVE-2007-4367

The Opera web browser versions prior to 9.23 are vulnerable to an arbitrary code execution flaw in the JavaScript engine . The root cause is a "virtual function call on an invalid pointer" triggered by specially crafted JavaScript. A remote attacker can exploit this to execute code on the victim'...

CVE-2008-5681

Opera before 9.63 is affected by CVE-2008-5681: the feed preview does not block unspecified scripted URLs, allowing a remote attacker to read existing subscriptions and force subscriptions to arbitrary feed URLs. Gentoo GLSA 200903-30/Opera advisories recommend upgrading to Opera 9.64 or later as...

CVE-2009-2059

Opera, possibly before 9.25, is affected by an SSL-tampering vulnerability where the HTTP Host header is used to determine the context of a document in certain 4xx/5xx CONNECT responses from a proxy. This enables a man-in-the-middle to inject arbitrary web script by modifying the CONNECT response...

CVE-2009-3045

Opera before 10.00 trusts root X.509 certificates signed with MD2, enabling MITM with a crafted server certificate and spoofing of SSL servers. Affected component is the browser’s certificate handling; the root cause is acceptance of MD2-signed certificates, which undermines TLS trust. In practic...

CVE-2009-3048

Opera before 10.00 on Linux, Solaris, and FreeBSD is vulnerable due to improper handling of INPUT TYPE=file, enabling a remote attacker to trick a user into uploading an unintended file via a dropped-file vector. The issue is documented in CVE-2009-3048 and is echoed across multiple feeds (NVD en...

CVE-2010-2121

Opera 9.52 is vulnerable to remote denial of service through JavaScript that loops infinitely to create IFRAMEs for invalid news:// or nntp:// URIs. The issue is a resource consumption DoS; no exploit details are provided in the connected materials. No remediation is specified in the supplied doc...

CVE-2010-2455

Technical details for CVE-2010-2455 are not provided in the supplied documents. The connected Nessus/OpenSUSE advisories reference other CVEs (1205-1215, etc.) but do not elaborate on this specific Opera spoofing issue. Monitor for updates.

CVE-2011-1337

CVE-2011-1337 affects Opera before 11.50, where remote attackers could cause a denial of service (disk consumption) by triggering error pages from invalid URLs. Mitigation documented by Gentoo/OpenVAS advisories: upgrade to Opera 12.00.x or later (e.g., >= www-client/opera-12.00.1467). Technic...

CVE-2011-2624

Opera before 11.50 is affected by a denial-of-service vulnerability caused by improper handling of a large table in print preview. The issue affects the print preview rendering path and can cause the application to hang. Publicly referenced advisories confirm this CVE-2011-2624 issue and indicate...

CVE-2012-1924

CVE-2012-1924 affects the Opera browser (older branches) where user-assisted remote attackers could induce download dialog tricks to execute arbitrary files. Public details in connected records confirm affected lines include Opera before 11.62 (Mac) and similar series on Windows/UNIX; OpenSUSE no...

CVE-2012-6470

Opera before 12.12 is vulnerable to a memory allocation issue when processing GIF images, which can allow remote code execution or memory overwrite leading to a denial of service. Affected software: Opera browser (multiple OS variants) prior to version 12.12. Root cause: improper memory allocatio...

CVE-2016-4075

CVE-2016-4075 affects Opera Mini 13 and Opera Stable 36, allowing remote attackers to spoof the displayed URL via a crafted HTML document related to about:blank. Connected sources confirm this address-bar spoofing vulnerability in Opera products and note remote exploitation through specially craf...

CVE-2005-0457

CVE-2005-0457 affects Opera on Gentoo Linux (versions 7.54 and earlier) due to an insecure plugin path that allows local privilege escalation by placing malicious libraries in the PORTAGE_TMPDIR. Connected sources (Gentoo GLSA 200502-17) reiterate this as a vulnerability in Opera’s handling of pl...

CVE-2007-0126

CVE-2007-0126 concerns Opera 9.02 where a heap-based overflow in processing a JPEG Define Huffman Table (DHT) marker can allow remote code execution. Connected advisories alsoreference CVE-2007-0127 related to a typecasting issue in Opera’s SVG handling. Mitigation documented in GLSA 200701-08 an...

CVE-2007-3142

CVE-2007-3142 affects Opera 9.21, where a visual truncation of a long hostname can spoof the address bar and enable phishing (demonstrated via HTTP Basic Authentication). The Gentoo GLSA advisory recommends upgrading to Opera ≥ 9.23 to resolve the issue. No exploit details are provided beyond the...

CVE-2008-2715

Summary: CVE-2008-2715 is an unspecified vulnerability in Opera prior to 9.5 that could allow remote attackers to read cross-domain images via HTML CANVAS elements that use the images as patterns. This vulnerability is reflected in multiple advisories (SUSE/OpenSUSE patches; NVD entry) and is add...

CVE-2008-4725

CVE-2008-4725 describes a Cross-site scripting (XSS) vulnerability in Opera 9.52 related to History Search where query-string data is not properly escaped before storage in md.dat. The issue allows remote attackers to inject scripts via History Search results. Connected sources confirm Opera 9.52...

CVE-2009-3265

Opera 9.x/10.x is affected by CVE-2009-3265, a Cross-site scripting (XSS) flaw where rendering of RSS/Atom feeds as scripted content enables injection of arbitrary script/HTML. The underlying issue is the handling of application/rss+xml as scripted content. The vendor reportedly viewed this as a ...

CVE-2010-2666

CVE-2010-2666 affects Opera Browser

CVE-2010-3019

CVE-2010-3019 refers to a heap-based buffer overflow in Opera prior to 10.61. The overflow occurs in HTML5 canvas painting during application of transformations, allowing a remote attacker to execute arbitrary code or cause a denial of service (application crash/hang). Multiple connected advisori...

CVE-2010-4579

Opera before 11.00 is affected by CVE-2010-4579 where dialogs (security information and download prompts) are not properly constrained to stay on top of rendered content, enabling a remote attacker to spoof dialogs and lure users to interact with crafted pages. The issue is documented across mult...

CVE-2010-5068

Opera 10.5 is reported to mishandle the :visited CSS pseudo-class, enabling potential information disclosure of visited pages. The CVE-2010-5068 entry documents this issue with MEDIUM severity (CVSS v2 base score 4.3). OpenVAS/OpenVAS-derived entries also reference multiple information-disclosure...

CVE-2011-1824

CVE-2011-1824 affects Opera versions older than 10.61. The vulnerability arises in VEGAOpBitmap::AddLine when processing a SELECT element’s SIZE attribute, causing an uninitialized memory write that can crash the application or potentially allow arbitrary code execution. Exploitation involves lar...

CVE-2012-4142

Opera’s CVE-2012-4142 affects multiple platforms: Windows/UNIX builds before 12.01 and Mac OS X builds before 11.66 (and before 12.01 for 12.x lines). The flaw arises from Opera’s HTML parsing, which ignores some characters under unspecified circumstances, enabling remote XSS via crafted document...

CVE-2009-2063

Opera vulnerable to SSL-tampering via a 3xx HTTP CONNECT response processed before the SSL handshake (CVE-2009-2063). An attacker could MITM an HTTPS site by injecting a 302 redirect to another HTTPS page, enabling arbitrary script execution in the context of the target site. Affected: Opera vers...

CVE-2010-1728

Opera before 10.53 on Windows and Mac OS X is affected by an uninitialized memory access vulnerability triggered by asynchronous document modifications initiated by JavaScript writing sequences in an infinite loop. This can allow remote code execution or cause a crash. The issue is addressed in ...

CVE-2010-2665

CVE-2010-2665 is an XSS vulnerability in Opera tracked across multiple sources. Affected software includes Opera before 10.54 on Windows and macOS, and before 10.11 on UNIX. The vulnerability allows remote attackers to inject arbitrary web script or HTML via a data: URI, related to incorrect dete...

CVE-2011-0682

CVE-2011-0682 is an Opera vulnerability caused by an integer truncation in opera.dll that can be triggered by an HTML form with a select element containing a large number of children. The issue could allow remote arbitrary code execution or memory corruption. Opera 11.01 addresses this vulnerabil...

CVE-2011-2614

CVE-2011-2614 affects the SVG rendering in Opera prior to 11.50. The vulnerability allows a remote attacker to cause an application crash (DoS) by crafting a path with many drawn characters. Exploitation details are not provided in the sources; no in‑the‑wild exploit information is included. Reme...

CVE-2011-2634

CVE-2011-2634 affects Opera prior to 11.10, enabling remote attackers to hijack (1) searches and (2) customizations via unspecified third‑party applications. The linked open vulnerability entries corroborate Opera browser vulnerabilities in 2011, with multiple advisories referencing Opera 11.x. R...

CVE-2011-4685

CVE-2011-4685 affects Opera prior to version 11.60. The issue allows remote attackers to cause a denial of service (application crash) via content on a web page (e.g., Forbes demonstrates). Affected software: Opera before 11.60. Root cause details are not elaborated in the provided text beyond th...

CVE-2005-2405

Opera 8.01 is affected when Arial Unicode MS (ARIALUNI.TTF) is installed: extended ASCII in the file-download dialog can be spoofed, potentially leading users to execute arbitrary code. The issue is documented in CVE-2005-2405; OpenVAS notes vulnerability in Opera

CVE-2006-6955

Opera before 10.53 on Windows and Mac OS X is vulnerable to DoS (application crash) through a page containing a large number of nested tags, due to improper handling of asynchronous document modifications. This vulnerability is related to CVE-2006-2723. The available connected sources indicate t...

CVE-2007-0127

CVE-2007-0127 affects Opera before 9.10, where the Javascript SVG support fails to validate object types in a createSVGTransformFromMatrix request. This can allow remote attackers to execute arbitrary code via JavaScript that uses an invalid object, causing a controlled pointer to be referenced d...

CVE-2008-5680

CVE-2008-5680 corresponds to multiple buffer overflow vulnerabilities in Opera before 9.63. Specifically, insecure handling in (1) text-area processing and (2) long host names in file:// URLs could allow remote code execution. The combined impact is high: a remote attacker could trigger arbitrary...

CVE-2011-2637

Opera browser, prior to version 11.10, contains an unspecified vulnerability that can trigger a remote denial-of-service via crafted web content. This CVE (CVE-2011-2637) is referenced across multiple advisories (e.g., Red Hat, SUSE, Gentoo GLSA-201206-03) and OpenVAS plugins. The publicly stated...

CVE-2011-3388

The CVE-2011-3388 issue affects Opera before 11.51, where Extended Validation/trusted sources handling could cause the address bar and page information dialog to display security info from a trusted site for an insecure site, potentially misleading users. This is an information-disclosure/trust-d...

CVE-2012-1925

CVE-2012-1925 affects Opera before 11.62. The dialog window stacking order could fail to stay on top of content windows, enabling a user‑assisted remote attacker to trick users into downloading and executing arbitrary files via a download dialog that is placed under other windows. Affected produc...

CVE-2012-4146

Opera is affected by CVE-2012-4146 (and related 2012-41xx CVEs) on multiple platforms. The issue allows a remote attacker to cause an application crash (DoS) by visiting a crafted web page, as demonstrated by the Lenovo “Shop now” page. The vulnerability affects Opera before 12.01, with the Mac O...

CVE-2012-6467

CVE-2012-6467 is confirmed to affect Opera (pre-12.10) via how it follows Internet shortcuts referenced by an IMG or inline element, enabling phishing-style attacks on crafted pages (described as exploited in the wild in 2012). OpenVAS entries map this family of vulnerabilities to a high base sco...

CVE-2013-1637

Opera pre-12.13 is vulnerable to remote code execution via DOM event vectors (CVE-2013-1637). Connected sources (SUSE GLSA 201406-14 and OpenVAS entries) confirm affected package: Opera with vulnerabilities described as multiple DOM-event related flaws enabling arbitrary code execution. The OpenV...

CVE-2003-1387

CVE-2003-1387 : A buffer overflow in Opera 6.05 and 6.06 (and possibly other versions) can be triggered by a URL containing a long username, allowing a remote attacker to potentially execute arbitrary code. The connected NVD entry confirms the vulnerability details but does not specify a patch ve...

CVE-2005-1475

The CVE-2005-1475 issue affects Opera 8.0 Final Build 1095 where the XMLHttpRequest object could bypass same-origin restrictions due to insufficient validation of server-side redirects, allowing a remote attacker to access resources on other domains and perform actions with the user’s privileges....

CVE-2007-2274

CVE-2007-2274 describes a DoS in Opera’s BitTorrent implementation (Opera 9.2) triggered by a malformed torrent file, with original disclosures mentioning a memory leak but uncertainty remains. Connected sources also reference related Opera issues: CVE-2007-2809 describes a buffer overflow in Ope...

CVE-2007-3929

CVE-2007-3929 describes a use-after-free vulnerability in the BitTorrent support of Opera prior to 9.22. A crafted BitTorrent header can leave a dangling pointer to an invalid object, potentially enabling user-assisted remote code execution. Connected advisories indicate multiple vulnerabilities ...

CVE-2008-4694

CVE-2008-4694 affects Opera prior to 9.60. The vulnerability arises from a crafted redirect URL that can cause the browser to crash (DoS) or allow remote code execution. Public sources in the connected docs corroborate that Opera 9.60 and earlier are impacted and note additional related issues (C...

CVE-2009-2577

CVE-2009-2577 is an Opera Unicode String Denial of Service vulnerability affecting Opera 9.52 and earlier. The issue allows a remote attacker to trigger a Denial of Service by supplying a long Unicode string argument to the write method, leading to CPU/memory consumption and an application hang. ...

CVE-2009-3013

The CVE-2009-3013 issue affects Opera 9.52 and earlier, and Opera 10.00 Beta 3 Build 1699, where data: URIs in HTTP Location headers were not properly blocked, enabling cross-site scripting (XSS) via two vectors: (1) a Location header containing JavaScript sequences in a data:text/html URI, and (...

CVE-2010-4583

CVE-2010-4583 affects Opera prior to 11.00. When Opera Turbo is enabled, the browser may fail to display a page’s security indicator, enabling spoofing of trusted content via a crafted site. This vulnerability is addressed by upgrading Opera to a newer version (e.g., Opera 12.00.1467 or later as ...

CVE-2010-4586

The CVE-2010-4586 issue concerns Opera before 11.00, where WebSockets functionality is enabled by default. The description indicates an unspecified impact and remote attack vectors, and notes a possible relation to CVE-2010-4508. Connected sources confirm that Opera 11.00 includes fixes, implying...