CVE-2010-2665

CVE-2010-2665 is an XSS vulnerability in Opera tracked across multiple sources. Affected software includes Opera before 10.54 on Windows and macOS, and before 10.11 on UNIX. The vulnerability allows remote attackers to inject arbitrary web script or HTML via a data: URI, related to incorrect dete...

CVE-2010-4049

Opera before 10.63 is vulnerable to a denial-of-service via a Flash movie with a transparent Window Mode (wmode) property not handled correctly when navigating away from the containing HTML document. Affected products are Opera on Mac, Linux, and Windows; root cause is improper handling of Flash ...

CVE-2010-4583

CVE-2010-4583 affects Opera prior to 11.00. When Opera Turbo is enabled, the browser may fail to display a page’s security indicator, enabling spoofing of trusted content via a crafted site. This vulnerability is addressed by upgrading Opera to a newer version (e.g., Opera 12.00.1467 or later as ...

CVE-2011-0450

Opera before 11.01 on Windows is affected by CVE-2011-0450 due to the downloads manager failing to correctly determine the pathname of the filesystem-viewing application. This can allow a user-assisted remote attacker to execute arbitrary code via a crafted web site that hosts an executable file....

CVE-2011-0682

CVE-2011-0682 is an Opera vulnerability caused by an integer truncation in opera.dll that can be triggered by an HTML form with a select element containing a large number of children. The issue could allow remote arbitrary code execution or memory corruption. Opera 11.01 addresses this vulnerabil...

CVE-2011-2631

The CVE-2011-2631 entry concerns Opera's CSS column-count handling in Opera prior to 11.11, which can cause a denial of service (infinite repaint loop leading to an app hang) when processing a crafted page. Connected sources confirm Opera as the affected product and indicate the root cause is imp...

CVE-2011-4682

CVE-2011-4682 corresponds to an Opera JavaScript engine issue where the in operator is not correctly implemented, allowing remote attackers to bypass the Same Origin Policy via cross-site variable vectors. The vulnerability affects Opera releases prior to 11.60, with exploitation leading to poten...

CVE-2011-4685

CVE-2011-4685 affects Opera prior to version 11.60. The issue allows remote attackers to cause a denial of service (application crash) via content on a web page (e.g., Forbes demonstrates). Affected software: Opera before 11.60. Root cause details are not elaborated in the provided text beyond th...

CVE-2012-3568

CVE-2012-3568 affects Opera prior to 12.00 Beta, where remote attackers could trigger a denial of service (application crash) by supplying crafted WebGL content (as demonstrated by a codeflow.org WebGL demo). The connected sources (OpenVAS entries and NVD record) corroborate a WebGL-related crash...

CVE-2012-6468

CVE-2012-6468 is described in the initial document as a heap-based buffer overflow in Opera (pre-12.11) that could be triggered by a long HTTP response, allowing remote code execution or memory corruption. Connected openvas entries corroborate multiple Opera vulnerabilities around the same period...

CVE-2008-2714

Summary: CVE-2008-2714 affects Opera before 9.26, where remote attackers could misrepresent web page addresses by using certain characters that cause the address text to be misplaced. Impact (as stated): The issue enables manipulation of how a page address is displayed, potentially enabling phish...

CVE-2008-5680

CVE-2008-5680 corresponds to multiple buffer overflow vulnerabilities in Opera before 9.63. Specifically, insecure handling in (1) text-area processing and (2) long host names in file:// URLs could allow remote code execution. The combined impact is high: a remote attacker could trigger arbitrary...

CVE-2009-4072

Opera 9.x/10.x vulnerable to CVE-2009-4072 (and related CVEs) as part of a set of high‑severity vulnerabilities. Affected product: Opera Web Browser (Windows/Linux). Issue type: Information Disclosure and unspecified vulnerabilities with potential for arbitrary code execution or DoS. Root cause/i...

CVE-2010-2662

CVE-2010-2662: Opera before 10.60 allows remote attackers to bypass the popup blocker using a javascript: URL and a fake click. Affected product is the Opera browser; vulnerability details and CVE references are documented in multiple sources. Mitigation per Gentoo GLSA 201206-03 recommends upgra...

CVE-2011-2617

Technical details for CVE-2011-2617 are not publicly provided in the supplied documents; the materials only reiterate an unspecified denial-of-service vulnerability in Opera before 11.50. Monitor for updates.

CVE-2011-2628

Opera is vulnerable in older releases, specifically before 11.11, due to improper handling of FRAMESET elements which can enable memory corruption leading to remote code execution or denial of service via page unload vectors. Public scans and advisories (GLSA 201206-03, Gentoo/Nessus/OpenVAS entr...

CVE-2011-4681

Opera before 11.60 is affected by a vulnerability where the browser does not properly account for the number of dot characters in domain names within the same top-level domain, allowing a remote attacker to bypass the Same Origin Policy by accessing a differently named domain in the same TLD (e.g...

CVE-2011-4690

CVE-2011-4690 affects Opera 11.60 and earlier. The vulnerability arises because Opera does not prevent capturing timing data related to Same Origin Policy violations during IFRAME loading, enabling remote attackers to determine whether a document exists in the browser cache via crafted JavaScript...

CVE-2012-6467

CVE-2012-6467 is confirmed to affect Opera (pre-12.10) via how it follows Internet shortcuts referenced by an IMG or inline element, enabling phishing-style attacks on crafted pages (described as exploited in the wild in 2012). OpenVAS entries map this family of vulnerabilities to a high base sco...

CVE-2005-4718

CVE-2005-4718 affects Opera 8.02 and earlier. The issue allows remote denial of service (client crash) via two vectors: (1) a crafted HTML file containing a content: url(0); style attribute, a bodyA tag, a long string, and a long attribute on a u tag (oper a.html demonstrated); and (2) a BGSOUND ...

CVE-2007-0802

CVE-2007-0802 affects Mozilla Firefox 2.0.0.1, where remote attackers could bypass phishing protection by appending certain characters to the domain name (e.g., ‘.’ or ‘/’), which are not caught by the Phishing List blacklist. The initial description and connected sources consistently describe th...

CVE-2007-1115

CVE-2007-1115 affects Opera 9 before 9.20. The vulnerability arises when a page with no explicit charset in Content-Type or META tag causes child frames to inherit the parent’s default charset, enabling cross-site scripting (XSS). Demonstrations used UTF-7 to show exploitation. Some related advis...

CVE-2008-4198

CVE-2008-4198 affects Opera before 9.52. When an HTTP page that loads an HTTPS page in a frame is rendered, Opera shows a padlock security indicator and a dialog for a secure connection, which could mislead users into unsafe actions on the HTTP page. Connected advisories confirm this as a frame/s...

CVE-2010-4047

Opera before 10.63 is affected by a vulnerability where the security context of JavaScript on the error page is not correctly enforced, enabling user‑assisted remote XSS via a crafted site. Affected component: Opera browser (pre-10.63). Underlying cause: improper security context handling for err...

CVE-2011-2622

CVE-2011-2622 affects the Opera web browser (pre-11.50) where a vulnerability in the Web Workers implementation can cause a denial of service (application crash) from remote attackers. The vectors are described as unknown in the primary description, with no explicit exploit details provided. Conn...

CVE-2011-2623

Opera before 11.50 contains an unspecified vulnerability in the SVG BiDi implementation that could be exploited remotely to cause a denial of service (application crash or hang) via unknown vectors. Affected product: Opera browser. Root cause details are not provided beyond the SVG BiDi issue. Mi...

CVE-2011-2627

CVE-2011-2627 affects Opera’s DOM implementation prior to version 11.50, enabling a remote attacker to crash the application via unspecified content on a web page (denial of service). The description states an unspecified vulnerability with live.com as a demonstrator, and connected sources corrob...

CVE-2011-2629

Opera prior to 11.11 contains an unspecified vulnerability that can cause a denial of service (application crash) by processing certain web page content. This CVE is referenced in Red Hat and SUSE advisories and appears in OpenVAS/GLSA coverage as part of multiple Opera vulnerabilities. Remediati...

CVE-2012-3558

Opera before 11.65 is affected by CVE-2012-3558. The vulnerability arises because the address bar may not correspond to the displayed page during unusually timed changes, enabling user-assisted spoofing via navigation, reloads, and redirects. Connected sources corroborate multiple vulnerabilities...

CVE-2012-4146

Opera is affected by CVE-2012-4146 (and related 2012-41xx CVEs) on multiple platforms. The issue allows a remote attacker to cause an application crash (DoS) by visiting a crafted web page, as demonstrated by the Lenovo “Shop now” page. The vulnerability affects Opera before 12.01, with the Mac O...

CVE-2003-1397

The CVE-2003-1397 entry affects Opera 6.05 and Opera 7.0. A crafted HTTP request containing a long string is passed to the ShowDocument method via the PluginContext object, causing a denial of service (crash). The provided documents state this as the vulnerability without detailing exploitable st...

CVE-2004-1810

The CVE-2004-1810 entry maps to a vulnerability in the Opera browser’s JavaScript engine (reported for Opera 7.x). The issue arises when handling very large JavaScript Array objects, where creating an Array with an extremely large size value and writing into it can crash the browser. OpenVAS and ...

CVE-2005-0235

CVE-2005-0235 concerns the IDN homograph spoofing vulnerability in Opera 7.54, where punycode-encoded domain names are decoded in URLs and SSL certificates in a way that can impersonate domains and enable phishing. The SUSE advisory SUSE-SA-2005:031 notes this issue as part of Opera’s vulnerabili...

CVE-2005-2406

CVE-2005-2406 affects Opera 8.01. The vulnerability allows remote attackers to perform cross-site scripting (XSS) or alter which files are uploaded by tricking a user into dragging an image that is a "javascript:" URI. Root cause is input handling during file drag that leads to script execution. ...

CVE-2007-1737

Opera 9.10 is affected: URLs embedded in object or iframe HTML tags are not checked against the phishing site blacklist, allowing bypass of phishing protection. Root cause is the failure to validate these embedded URLs. Impact is bypass of anti-phishing checks; explicit exploit details or in-the-...

CVE-2007-3819

Opera 9.21 is affected by CVE-2007-3819: a vulnerability that lets remote attackers spoof the data: URI scheme in the address bar by providing a long URI with trailing whitespace, which prevents the initial part of the URI from being displayed. This can enable spoofing of the targeted site in the...

CVE-2008-2716

CVE-2008-2716 affects Opera before 9.5, where an unspecified vulnerability could allow remote attackers to spoof contents of trusted frames on the same parent page by modifying the location, enabling phishing. Public references indicate this CVE was addressed in Opera 9.50 via security updates (e...

CVE-2008-5682

CVE-2008-5682 is an XSS vulnerability in the Opera web browser (affecting versions

CVE-2010-2659

The CVE-2010-2659 entry relates to Opera browsers where widget properties become accessible to third-party domains. Affected versions are Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms. The underlying impact is that remote attackers could obtain potent...

CVE-2010-2664

CVE-2010-2664 affects Opera before 10.60. The flaw allows a remote attacker to cause a denial of service (application hang) through crafted HTML containing an unclosed SPAN with absolute positioning. Root cause: malformed HTML in content processed by the browser. Impact per sources: remote DoS; n...

CVE-2010-4043

Technical details (affected product/version/root cause/impact) for CVE-2010-4043 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2010-4585

CVE-2010-4585 affects Opera prior to 11.00, via the auto-update functionality (Opera Unite update). The vulnerability allows a remote attacker to cause an application crash/Denial of Service. Public references indicate Opera 11.00 release fixes this and related issues; no exploit details are prov...

CVE-2011-0683

Opera before 11.01 did not properly restrict opera: URLs, enabling clickjacking via a crafted site. A remote attacker could lure a user to a malicious page to perform a clickjacking attack. Affected: Opera up to version 11.00; remediation: upgrade to Opera 11.01 or later where the issue is fixed....

CVE-2011-2609

CVE-2011-2609 affects Opera before 11.50, where data: URIs were not properly restricted, enabling remote XSS via crafted websites. This is confirmed across multiple advisories (SUSE, Gentoo GLSAs, OpenVAS plugins) citing Opera’s data: URI handling as the root cause. Impact is cross-site scripting...

CVE-2011-2615

CVE-2011-2615 affects the Opera browser prior to 11.50, where an unspecified content-based issue could cause a remote denial of service (application hang) as demonstrated by domiteca.com. The connected sources corroborate that Opera 11.50 and later versions address multiple vulnerabilities, imply...

CVE-2011-2620

CVE-2011-2620 concerns Opera before version 11.50, where an unspecified vulnerability in SVG animation could be exploited by remote attackers to cause the application to crash (DoS). The connected documents consistently describe Opera’s SVG animation vectors as the weakness, with multiple entries...

CVE-2011-4686

Opera CVE-2011-4686 describes an unspecified vulnerability in the Web Workers implementation that could cause an application crash (DoS) in Opera before version 11.60. The connected security records corroborate this as a vulnerability affecting Opera and note a fixed release (11.60) accompanying ...

CVE-2012-1003

CVE-2012-1003 affects Opera 11.60 and earlier across multiple platforms (Linux, macOS, Windows). The issue is described as an integer overflow affecting typed arrays and ArrayBuffer-related functions (Int32Array, Float32Array, Float64Array, Uint32Array, Int16Array, ArrayBuffer), allowing a remote...

CVE-2012-3566

CVE-2012-3566 : Opera before 12.00 Beta is vulnerable to a denial-of-service via JavaScript that changes a form before submission, enabling a user-assisted remote trigger that can cause the application to hang. The available documents identify the affected product and the root cause (malformed or...

CVE-2012-6469

CVE-2012-6469 affects the Opera browser. The primary detail in the Initial Document states Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors in an error page. The connected OpenVAS entries list CVE-2012-6469 as part of a set of Opera vulner...