CVE-2010-2665

CVE-2010-2665 is an XSS vulnerability in Opera tracked across multiple sources. Affected software includes Opera before 10.54 on Windows and macOS, and before 10.11 on UNIX. The vulnerability allows remote attackers to inject arbitrary web script or HTML via a data: URI, related to incorrect dete...

CVE-2011-2617

Technical details for CVE-2011-2617 are not publicly provided in the supplied documents; the materials only reiterate an unspecified denial-of-service vulnerability in Opera before 11.50. Monitor for updates.

CVE-2011-2624

Opera before 11.50 is affected by a denial-of-service vulnerability caused by improper handling of a large table in print preview. The issue affects the print preview rendering path and can cause the application to hang. Publicly referenced advisories confirm this CVE-2011-2624 issue and indicate...

CVE-2011-4685

CVE-2011-4685 affects Opera prior to version 11.60. The issue allows remote attackers to cause a denial of service (application crash) via content on a web page (e.g., Forbes demonstrates). Affected software: Opera before 11.60. Root cause details are not elaborated in the provided text beyond th...

CVE-2012-3568

CVE-2012-3568 affects Opera prior to 12.00 Beta, where remote attackers could trigger a denial of service (application crash) by supplying crafted WebGL content (as demonstrated by a codeflow.org WebGL demo). The connected sources (OpenVAS entries and NVD record) corroborate a WebGL-related crash...

CVE-2012-4010

The CVE-2012-4010 entry concerns Opera prior to 11.60, enabling address bar spoofing via unspecified homograph characters (distinct from CVE-2010-2660). Public sources in the provided documents confirm this vulnerability affects the Opera browser and describe the impact as spoofing the address ba...

CVE-2013-3210

Opera before 12.15 is vulnerable due to improper blocking of top‑level domains in Set‑Cookie headers, enabling a remote attacker to access sensitive information by controlling a different site in the same TLD. This is documented across multiple feeds (NVD and Red Hat/SUSE/OpenVAS entries referenc...

CVE-2006-6955

Opera before 10.53 on Windows and Mac OS X is vulnerable to DoS (application crash) through a page containing a large number of nested tags, due to improper handling of asynchronous document modifications. This vulnerability is related to CVE-2006-2723. The available connected sources indicate t...

CVE-2007-3819

Opera 9.21 is affected by CVE-2007-3819: a vulnerability that lets remote attackers spoof the data: URI scheme in the address bar by providing a long URI with trailing whitespace, which prevents the initial part of the URI from being displayed. This can enable spoofing of the targeted site in the...

CVE-2009-2063

Opera vulnerable to SSL-tampering via a 3xx HTTP CONNECT response processed before the SSL handshake (CVE-2009-2063). An attacker could MITM an HTTPS site by injecting a 302 redirect to another HTTPS page, enabling arbitrary script execution in the context of the target site. Affected: Opera vers...

CVE-2009-4072

Opera 9.x/10.x vulnerable to CVE-2009-4072 (and related CVEs) as part of a set of high‑severity vulnerabilities. Affected product: Opera Web Browser (Windows/Linux). Issue type: Information Disclosure and unspecified vulnerabilities with potential for arbitrary code execution or DoS. Root cause/i...

CVE-2011-0682

CVE-2011-0682 is an Opera vulnerability caused by an integer truncation in opera.dll that can be triggered by an HTML form with a select element containing a large number of children. The issue could allow remote arbitrary code execution or memory corruption. Opera 11.01 addresses this vulnerabil...

CVE-2011-2634

CVE-2011-2634 affects Opera prior to 11.10, enabling remote attackers to hijack (1) searches and (2) customizations via unspecified third‑party applications. The linked open vulnerability entries corroborate Opera browser vulnerabilities in 2011, with multiple advisories referencing Opera 11.x. R...

CVE-2011-4683

Opera before 11.60 is affected by multiple vulnerabilities (described in GLSA-201206-03). A remote attacker could entice a user to open a crafted page, potentially allowing execution of arbitrary code or other impacts; local attackers could abuse symlink attacks; there are broader DoS/spoofing im...

CVE-2011-4690

CVE-2011-4690 affects Opera 11.60 and earlier. The vulnerability arises because Opera does not prevent capturing timing data related to Same Origin Policy violations during IFRAME loading, enabling remote attackers to determine whether a document exists in the browser cache via crafted JavaScript...

CVE-2012-3558

Opera before 11.65 is affected by CVE-2012-3558. The vulnerability arises because the address bar may not correspond to the displayed page during unusually timed changes, enabling user-assisted spoofing via navigation, reloads, and redirects. Connected sources corroborate multiple vulnerabilities...

CVE-2005-0235

CVE-2005-0235 concerns the IDN homograph spoofing vulnerability in Opera 7.54, where punycode-encoded domain names are decoded in URLs and SSL certificates in a way that can impersonate domains and enable phishing. The SUSE advisory SUSE-SA-2005:031 notes this issue as part of Opera’s vulnerabili...

CVE-2005-2405

Opera 8.01 is affected when Arial Unicode MS (ARIALUNI.TTF) is installed: extended ASCII in the file-download dialog can be spoofed, potentially leading users to execute arbitrary code. The issue is documented in CVE-2005-2405; OpenVAS notes vulnerability in Opera

CVE-2005-2406

CVE-2005-2406 affects Opera 8.01. The vulnerability allows remote attackers to perform cross-site scripting (XSS) or alter which files are uploaded by tricking a user into dragging an image that is a "javascript:" URI. Root cause is input handling during file drag that leads to script execution. ...

CVE-2005-4718

CVE-2005-4718 affects Opera 8.02 and earlier. The issue allows remote denial of service (client crash) via two vectors: (1) a crafted HTML file containing a content: url(0); style attribute, a bodyA tag, a long string, and a long attribute on a u tag (oper a.html demonstrated); and (2) a BGSOUND ...

CVE-2010-2659

The CVE-2010-2659 entry relates to Opera browsers where widget properties become accessible to third-party domains. Affected versions are Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms. The underlying impact is that remote attackers could obtain potent...

CVE-2010-4043

Technical details (affected product/version/root cause/impact) for CVE-2010-4043 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2010-4047

Opera before 10.63 is affected by a vulnerability where the security context of JavaScript on the error page is not correctly enforced, enabling user‑assisted remote XSS via a crafted site. Affected component: Opera browser (pre-10.63). Underlying cause: improper security context handling for err...

CVE-2010-4049

Opera before 10.63 is vulnerable to a denial-of-service via a Flash movie with a transparent Window Mode (wmode) property not handled correctly when navigating away from the containing HTML document. Affected products are Opera on Mac, Linux, and Windows; root cause is improper handling of Flash ...

CVE-2010-4585

CVE-2010-4585 affects Opera prior to 11.00, via the auto-update functionality (Opera Unite update). The vulnerability allows a remote attacker to cause an application crash/Denial of Service. Public references indicate Opera 11.00 release fixes this and related issues; no exploit details are prov...

CVE-2011-2622

CVE-2011-2622 affects the Opera web browser (pre-11.50) where a vulnerability in the Web Workers implementation can cause a denial of service (application crash) from remote attackers. The vectors are described as unknown in the primary description, with no explicit exploit details provided. Conn...

CVE-2011-4686

Opera CVE-2011-4686 describes an unspecified vulnerability in the Web Workers implementation that could cause an application crash (DoS) in Opera before version 11.60. The connected security records corroborate this as a vulnerability affecting Opera and note a fixed release (11.60) accompanying ...

CVE-2012-1003

CVE-2012-1003 affects Opera 11.60 and earlier across multiple platforms (Linux, macOS, Windows). The issue is described as an integer overflow affecting typed arrays and ArrayBuffer-related functions (Int32Array, Float32Array, Float64Array, Uint32Array, Int16Array, ArrayBuffer), allowing a remote...

CVE-2004-1810

The CVE-2004-1810 entry maps to a vulnerability in the Opera browser’s JavaScript engine (reported for Opera 7.x). The issue arises when handling very large JavaScript Array objects, where creating an Array with an extremely large size value and writing into it can crash the browser. OpenVAS and ...

CVE-2007-1115

CVE-2007-1115 affects Opera 9 before 9.20. The vulnerability arises when a page with no explicit charset in Content-Type or META tag causes child frames to inherit the parent’s default charset, enabling cross-site scripting (XSS). Demonstrations used UTF-7 to show exploitation. Some related advis...

CVE-2008-2714

Summary: CVE-2008-2714 affects Opera before 9.26, where remote attackers could misrepresent web page addresses by using certain characters that cause the address text to be misplaced. Impact (as stated): The issue enables manipulation of how a page address is displayed, potentially enabling phish...

CVE-2008-2716

CVE-2008-2716 affects Opera before 9.5, where an unspecified vulnerability could allow remote attackers to spoof contents of trusted frames on the same parent page by modifying the location, enabling phishing. Public references indicate this CVE was addressed in Opera 9.50 via security updates (e...

CVE-2008-4198

CVE-2008-4198 affects Opera before 9.52. When an HTTP page that loads an HTTPS page in a frame is rendered, Opera shows a padlock security indicator and a dialog for a secure connection, which could mislead users into unsafe actions on the HTTP page. Connected advisories confirm this as a frame/s...

CVE-2008-5682

CVE-2008-5682 is an XSS vulnerability in the Opera web browser (affecting versions

CVE-2010-2664

CVE-2010-2664 affects Opera before 10.60. The flaw allows a remote attacker to cause a denial of service (application hang) through crafted HTML containing an unclosed SPAN with absolute positioning. Root cause: malformed HTML in content processed by the browser. Impact per sources: remote DoS; n...

CVE-2011-0683

Opera before 11.01 did not properly restrict opera: URLs, enabling clickjacking via a crafted site. A remote attacker could lure a user to a malicious page to perform a clickjacking attack. Affected: Opera up to version 11.00; remediation: upgrade to Opera 11.01 or later where the issue is fixed....

CVE-2011-2609

CVE-2011-2609 affects Opera before 11.50, where data: URIs were not properly restricted, enabling remote XSS via crafted websites. This is confirmed across multiple advisories (SUSE, Gentoo GLSAs, OpenVAS plugins) citing Opera’s data: URI handling as the root cause. Impact is cross-site scripting...

CVE-2011-2615

CVE-2011-2615 affects the Opera browser prior to 11.50, where an unspecified content-based issue could cause a remote denial of service (application hang) as demonstrated by domiteca.com. The connected sources corroborate that Opera 11.50 and later versions address multiple vulnerabilities, imply...

CVE-2011-2620

CVE-2011-2620 concerns Opera before version 11.50, where an unspecified vulnerability in SVG animation could be exploited by remote attackers to cause the application to crash (DoS). The connected documents consistently describe Opera’s SVG animation vectors as the weakness, with multiple entries...

CVE-2011-2623

Opera before 11.50 contains an unspecified vulnerability in the SVG BiDi implementation that could be exploited remotely to cause a denial of service (application crash or hang) via unknown vectors. Affected product: Opera browser. Root cause details are not provided beyond the SVG BiDi issue. Mi...

CVE-2011-2627

CVE-2011-2627 affects Opera’s DOM implementation prior to version 11.50, enabling a remote attacker to crash the application via unspecified content on a web page (denial of service). The description states an unspecified vulnerability with live.com as a demonstrator, and connected sources corrob...

CVE-2011-2628

Opera is vulnerable in older releases, specifically before 11.11, due to improper handling of FRAMESET elements which can enable memory corruption leading to remote code execution or denial of service via page unload vectors. Public scans and advisories (GLSA 201206-03, Gentoo/Nessus/OpenVAS entr...

CVE-2011-2629

Opera prior to 11.11 contains an unspecified vulnerability that can cause a denial of service (application crash) by processing certain web page content. This CVE is referenced in Red Hat and SUSE advisories and appears in OpenVAS/GLSA coverage as part of multiple Opera vulnerabilities. Remediati...

CVE-2011-4681

Opera before 11.60 is affected by a vulnerability where the browser does not properly account for the number of dot characters in domain names within the same top-level domain, allowing a remote attacker to bypass the Same Origin Policy by accessing a differently named domain in the same TLD (e.g...

CVE-2012-3566

CVE-2012-3566 : Opera before 12.00 Beta is vulnerable to a denial-of-service via JavaScript that changes a form before submission, enabling a user-assisted remote trigger that can cause the application to hang. The available documents identify the affected product and the root cause (malformed or...

CVE-2012-6467

CVE-2012-6467 is confirmed to affect Opera (pre-12.10) via how it follows Internet shortcuts referenced by an IMG or inline element, enabling phishing-style attacks on crafted pages (described as exploited in the wild in 2012). OpenVAS entries map this family of vulnerabilities to a high base sco...

CVE-2012-6469

CVE-2012-6469 affects the Opera browser. The primary detail in the Initial Document states Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors in an error page. The connected OpenVAS entries list CVE-2012-6469 as part of a set of Opera vulner...

CVE-2003-1397

The CVE-2003-1397 entry affects Opera 6.05 and Opera 7.0. A crafted HTTP request containing a long string is passed to the ShowDocument method via the PluginContext object, causing a denial of service (crash). The provided documents state this as the vulnerability without detailing exploitable st...

CVE-2004-1201

CVE-2004-1201 affects Opera 7.54 and describes a denial-of-service condition caused by a memory-exhaustion scenario triggered by JavaScript that repeatedly creates nested arrays and sorts them. The issue leads to an application crash. This summary reflects information from the NVD/NVD-family reco...

CVE-2004-1615

Opera permits remote attackers to trigger a denial of service by crafting a web page or HTML email containing a TBODY tag with a large COL SPAN value, leading to an invalid memory reference and application crash. The provided documents identify the affected software as Opera and the impact as par...