CVE-2010-1310

CVE-2010-1310 affects Opera 10.50, where crafted XSLT constructs can cause the browser to return cached contents of other pages, enabling information disclosure. Root cause: XSLT processing allows access to cached documents. Impact: remote attackers may obtain sensitive information. Exploitation ...

CVE-2010-4586

The CVE-2010-4586 issue concerns Opera before 11.00, where WebSockets functionality is enabled by default. The description indicates an unspecified impact and remote attack vectors, and notes a possible relation to CVE-2010-4508. Connected sources confirm that Opera 11.00 includes fixes, implying...

CVE-2010-5072

Opera 10.5 JavaScript getComputedStyle implementation is vulnerable to information disclosure. The vulnerability arises because the set of values returned by getComputedStyle is not properly restricted, allowing an attacker to remotely obtain sensitive information about visited web pages. This af...

CVE-2011-0683

Opera before 11.01 did not properly restrict opera: URLs, enabling clickjacking via a crafted site. A remote attacker could lure a user to a malicious page to perform a clickjacking attack. Affected: Opera up to version 11.00; remediation: upgrade to Opera 11.01 or later where the issue is fixed....

CVE-2011-2612

CVE-2011-2612: A denial-of-service vulnerability in Opera browser affecting versions before 11.50, triggered by processing unspecified content on a web page (demonstrated via progorod.ru). Public records (RH/SUSE/Gentoo advisories and OpenVAS notes) corroborate that Opera 11.50 fixed multiple sec...

CVE-2011-2631

The CVE-2011-2631 entry concerns Opera's CSS column-count handling in Opera prior to 11.11, which can cause a denial of service (infinite repaint loop leading to an app hang) when processing a crafted page. Connected sources confirm Opera as the affected product and indicate the root cause is imp...

CVE-2011-4683

Opera before 11.60 is affected by multiple vulnerabilities (described in GLSA-201206-03). A remote attacker could entice a user to open a crafted page, potentially allowing execution of arbitrary code or other impacts; local attackers could abuse symlink attacks; there are broader DoS/spoofing im...

CVE-2012-1003

CVE-2012-1003 affects Opera 11.60 and earlier across multiple platforms (Linux, macOS, Windows). The issue is described as an integer overflow affecting typed arrays and ArrayBuffer-related functions (Int32Array, Float32Array, Float64Array, Uint32Array, Int16Array, ArrayBuffer), allowing a remote...

CVE-2012-3558

Opera before 11.65 is affected by CVE-2012-3558. The vulnerability arises because the address bar may not correspond to the displayed page during unusually timed changes, enabling user-assisted spoofing via navigation, reloads, and redirects. Connected sources corroborate multiple vulnerabilities...

CVE-2012-3566

CVE-2012-3566 : Opera before 12.00 Beta is vulnerable to a denial-of-service via JavaScript that changes a form before submission, enabling a user-assisted remote trigger that can cause the application to hang. The available documents identify the affected product and the root cause (malformed or...

CVE-2005-0235

CVE-2005-0235 concerns the IDN homograph spoofing vulnerability in Opera 7.54, where punycode-encoded domain names are decoded in URLs and SSL certificates in a way that can impersonate domains and enable phishing. The SUSE advisory SUSE-SA-2005:031 notes this issue as part of Opera’s vulnerabili...

CVE-2007-3819

Opera 9.21 is affected by CVE-2007-3819: a vulnerability that lets remote attackers spoof the data: URI scheme in the address bar by providing a long URI with trailing whitespace, which prevents the initial part of the URI from being displayed. This can enable spoofing of the targeted site in the...

CVE-2008-5682

CVE-2008-5682 is an XSS vulnerability in the Opera web browser (affecting versions

CVE-2009-4072

Opera 9.x/10.x vulnerable to CVE-2009-4072 (and related CVEs) as part of a set of high‑severity vulnerabilities. Affected product: Opera Web Browser (Windows/Linux). Issue type: Information Disclosure and unspecified vulnerabilities with potential for arbitrary code execution or DoS. Root cause/i...

CVE-2011-2627

CVE-2011-2627 affects Opera’s DOM implementation prior to version 11.50, enabling a remote attacker to crash the application via unspecified content on a web page (denial of service). The description states an unspecified vulnerability with live.com as a demonstrator, and connected sources corrob...

CVE-2011-4682

CVE-2011-4682 corresponds to an Opera JavaScript engine issue where the in operator is not correctly implemented, allowing remote attackers to bypass the Same Origin Policy via cross-site variable vectors. The vulnerability affects Opera releases prior to 11.60, with exploitation leading to poten...

CVE-2012-6468

CVE-2012-6468 is described in the initial document as a heap-based buffer overflow in Opera (pre-12.11) that could be triggered by a long HTTP response, allowing remote code execution or memory corruption. Connected openvas entries corroborate multiple Opera vulnerabilities around the same period...

CVE-2006-3331

Opera before 9.0 contains a vulnerability where the SSL security bar is not reset after a download dialog from an SSL-enabled site, allowing remote attackers to spoof a trusted SSL certificate from an untrusted site and enabling phishing attacks. The available connected documents confirm the affe...

CVE-2007-0802

CVE-2007-0802 affects Mozilla Firefox 2.0.0.1, where remote attackers could bypass phishing protection by appending certain characters to the domain name (e.g., ‘.’ or ‘/’), which are not caught by the Phishing List blacklist. The initial description and connected sources consistently describe th...

CVE-2008-2714

Summary: CVE-2008-2714 affects Opera before 9.26, where remote attackers could misrepresent web page addresses by using certain characters that cause the address text to be misplaced. Impact (as stated): The issue enables manipulation of how a page address is displayed, potentially enabling phish...

CVE-2008-4198

CVE-2008-4198 affects Opera before 9.52. When an HTTP page that loads an HTTPS page in a frame is rendered, Opera shows a padlock security indicator and a dialog for a secure connection, which could mislead users into unsafe actions on the HTTP page. Connected advisories confirm this as a frame/s...

CVE-2011-2617

Technical details for CVE-2011-2617 are not publicly provided in the supplied documents; the materials only reiterate an unspecified denial-of-service vulnerability in Opera before 11.50. Monitor for updates.

CVE-2011-2628

Opera is vulnerable in older releases, specifically before 11.11, due to improper handling of FRAMESET elements which can enable memory corruption leading to remote code execution or denial of service via page unload vectors. Public scans and advisories (GLSA 201206-03, Gentoo/Nessus/OpenVAS entr...

CVE-2011-2639

Opera before version 11.10 is affected by a vulnerability where hidden animated GIF images trigger continual repaints, leading to CPU consumption and denial of service. The issue is documented across multiple sources (Red Hat security advisory and Gentoo GLSA 201206-03). Remediation in the public...

CVE-2011-4681

Opera before 11.60 is affected by a vulnerability where the browser does not properly account for the number of dot characters in domain names within the same top-level domain, allowing a remote attacker to bypass the Same Origin Policy by accessing a differently named domain in the same TLD (e.g...

CVE-2011-4686

Opera CVE-2011-4686 describes an unspecified vulnerability in the Web Workers implementation that could cause an application crash (DoS) in Opera before version 11.60. The connected security records corroborate this as a vulnerability affecting Opera and note a fixed release (11.60) accompanying ...

CVE-2012-4010

The CVE-2012-4010 entry concerns Opera prior to 11.60, enabling address bar spoofing via unspecified homograph characters (distinct from CVE-2010-2660). Public sources in the provided documents confirm this vulnerability affects the Opera browser and describe the impact as spoofing the address ba...

CVE-2012-6462

CVE-2012-6462 refers to Opera before 12.10, where improper CORS handling allows remote attackers to bypass page-content restrictions with a crafted request. The impact is a partial confidentiality concern; no exploitation details are provided in the sources. Remediation guidance from Gentoo GLSA ...

CVE-2004-0872

CVE-2004-0872 affects Opera and describes a cookie handling flaw where cookies sent over an insecure channel (HTTP) can also be presented on a secure channel (HTTPS/SSL) within the same domain. This enables potential cookie leakage and unauthorized session usage (Cross Security Boundary Cookie In...

CVE-2007-2809

CVE-2007-2809 refers to a buffer overflow in Opera’s transfer manager for Windows prior to version 9.21. An attacker could trigger arbitrary code execution by supplying a crafted torrent file, with exploitation described as user-assisted and requiring the user to interact with the torrent entry (...

CVE-2008-2716

CVE-2008-2716 affects Opera before 9.5, where an unspecified vulnerability could allow remote attackers to spoof contents of trusted frames on the same parent page by modifying the location, enabling phishing. Public references indicate this CVE was addressed in Opera 9.50 via security updates (e...

CVE-2009-3049

Opera before 10.00 has an IDN in the address bar display bug that can enable URL spoofing and phishing via Unicode/Punycode handling. The connected advisories/documentation confirm multiple CVEs (including CVE-2009-3049) tied to IDN spoofing vulnerabilities. Practical impact: remote attackers cou...

CVE-2010-2662

CVE-2010-2662: Opera before 10.60 allows remote attackers to bypass the popup blocker using a javascript: URL and a fake click. Affected product is the Opera browser; vulnerability details and CVE references are documented in multiple sources. Mitigation per Gentoo GLSA 201206-03 recommends upgra...

CVE-2010-2664

CVE-2010-2664 affects Opera before 10.60. The flaw allows a remote attacker to cause a denial of service (application hang) through crafted HTML containing an unclosed SPAN with absolute positioning. Root cause: malformed HTML in content processed by the browser. Impact per sources: remote DoS; n...

CVE-2010-4043

Technical details (affected product/version/root cause/impact) for CVE-2010-4043 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2010-4046

CVE-2010-4046 affects Opera browsers prior to 10.63. The vulnerability stems from Opera’s insufficient verification of video content origins, enabling a remote attacker to cause a video stream to be used as HTML5 canvas content and potentially reveal sensitive information. The issue is documented...

CVE-2010-4049

Opera before 10.63 is vulnerable to a denial-of-service via a Flash movie with a transparent Window Mode (wmode) property not handled correctly when navigating away from the containing HTML document. Affected products are Opera on Mac, Linux, and Windows; root cause is improper handling of Flash ...

CVE-2011-2622

CVE-2011-2622 affects the Opera web browser (pre-11.50) where a vulnerability in the Web Workers implementation can cause a denial of service (application crash) from remote attackers. The vectors are described as unknown in the primary description, with no explicit exploit details provided. Conn...

CVE-2011-2623

Opera before 11.50 contains an unspecified vulnerability in the SVG BiDi implementation that could be exploited remotely to cause a denial of service (application crash or hang) via unknown vectors. Affected product: Opera browser. Root cause details are not provided beyond the SVG BiDi issue. Mi...

CVE-2011-2629

Opera prior to 11.11 contains an unspecified vulnerability that can cause a denial of service (application crash) by processing certain web page content. This CVE is referenced in Red Hat and SUSE advisories and appears in OpenVAS/GLSA coverage as part of multiple Opera vulnerabilities. Remediati...

CVE-2011-2638

CVE-2011-2638 affects Opera browser prior to 11.10. The vulnerability allows remote attackers to trigger an application crash (DoS) via unspecified content on a web page (e.g., games on zylom.com). Public references in Red Hat, SUSE, Gentoo GLSA, and OpenVAS entries confirm the same description. ...

CVE-2012-3568

CVE-2012-3568 affects Opera prior to 12.00 Beta, where remote attackers could trigger a denial of service (application crash) by supplying crafted WebGL content (as demonstrated by a codeflow.org WebGL demo). The connected sources (OpenVAS entries and NVD record) corroborate a WebGL-related crash...

CVE-2012-6469

CVE-2012-6469 affects the Opera browser. The primary detail in the Initial Document states Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors in an error page. The connected OpenVAS entries list CVE-2012-6469 as part of a set of Opera vulner...

CVE-2013-1639

Opera before 12.13 fails to send CORS preflight requests in all required cases, allowing a remote attacker to bypass CSRF protection via a crafted site that triggers a CORS request. The connected Gentoo/OpenVAS entries corroborate Opera as the affected product and advise upgrading to Opera 12.13_...

CVE-2004-1810

The CVE-2004-1810 entry maps to a vulnerability in the Opera browser’s JavaScript engine (reported for Opera 7.x). The issue arises when handling very large JavaScript Array objects, where creating an Array with an extremely large size value and writing into it can crash the browser. OpenVAS and ...

CVE-2008-4195

Opera before 9.52 is vulnerable to a framing-related flaw where a framed page can cause another frame to display an arbitrary address, enabling remote attackers to manipulate the UI such as the address bar. The issue is CVE-2008-4195. A Gentoo GLSA advisory (GLSA-200811-01) and SUSE/GNU/NVD entri...

CVE-2010-4047

Opera before 10.63 is affected by a vulnerability where the security context of JavaScript on the error page is not correctly enforced, enabling user‑assisted remote XSS via a crafted site. Affected component: Opera browser (pre-10.63). Underlying cause: improper security context handling for err...

CVE-2011-4690

CVE-2011-4690 affects Opera 11.60 and earlier. The vulnerability arises because Opera does not prevent capturing timing data related to Same Origin Policy violations during IFRAME loading, enabling remote attackers to determine whether a document exists in the browser cache via crafted JavaScript...

CVE-2012-1927

CVE-2012-1927 affects the Opera browser prior to 11.62. The issue lets remote attackers spoof the address bar by triggering a dialog window from a different domain, potentially misleading users. Exploitation details beyond the public description are not provided in the connected documents. Accord...

CVE-2012-3563

CVE-2012-3563 affects Opera browsers prior to 12.00 Beta. According to the sources, processing of a web page with invalid character encodings can cause the application to crash, constituting a remote denial of service. The CVSS v2 base score is 5.0 (Medium) with network access, low attack complex...