282 matches found
CVE-2007-5540
The provided documents confirm CVE-2007-5540 affects Opera (pre-9.24) and enables bypassing the same-origin policy when displaying frames from different sites. The root cause is described as an unspecified flaw in how Opera handles cross-domain frames, allowing remote attackers to overwrite funct...
CVE-2008-4697
CVE-2008-4697 affects Opera before 9.61 where the Fast Forward feature executes a javascript: URL in the context of the outermost frame, enabling remote XSS. Affected product: Opera browser; vulnerable component/behavior: framed page handling in Fast Forward. Impact per sources includes cross-sit...
CVE-2010-2659
The CVE-2010-2659 entry relates to Opera browsers where widget properties become accessible to third-party domains. Affected versions are Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms. The underlying impact is that remote attackers could obtain potent...
CVE-2010-2661
Opera before 10.54 (Windows/Mac) and before 10.60 (Unix) does not properly restrict access to the full pathname of a file selected for upload, potentially exposing sensitive information via DOM manipulations. Affected components/versions include the described Opera releases; CVE-2010-2661 is the ...
CVE-2011-0687
Opera before 11.01 is vulnerable to a denial-of-service via crafted WAP documents that abuse WAP dropdown lists, caused by input validation issues (CWE-20). The issue can crash the application, with CVSS v2 base score 4.3 (Medium). Affected product/version: Opera up to 11.01 (as described in mult...
CVE-2011-2613
CVE-2011-2613 affects Opera browsers prior to 11.50. The vulnerability arises in the Array.prototype.join implementation when called on a non-array object that contains initial holes, enabling a remote attacker to cause an application crash (DoS). The issue is documented across multiple vendors/a...
CVE-2011-2630
CVE-2011-2630 concerns Opera browser (pre-12.x) where a user-assisted remote page can crash the app during a reload after opening the Easy Sticky Note extension popup. Affected product/version: Opera before 11.11 (as per the CVE description). The issue is a denial of service due to improper handl...
CVE-2011-2640
CVE-2011-2640 affects Opera before 11.10. An HTML document with an empty parameter value for an embedded Java applet could cause the browser to crash (remote denial of service). Remediation: upgrade to Opera 11.10 or newer as indicated by the referenced advisories.
CVE-2012-3564
CVE-2012-3564 describes a denial-of-service condition in Opera prior to 12.00 Beta caused by a crafted absolutely positioned wrap=off TEXTAREA element placed next to an overflow: auto block. The vulnerability affects the rendering/input handling of a TEXTAREA and can cause the application to hang...
CVE-2012-6464
Opera is affected by CVE-2012-6464 (XSS) as documented in multiple sources. The Gentoo GLSA 201406-14 and related OpenVAS entries reference Opera vulnerabilities and explicitly recommend upgrading to the latest Opera package, for Gentoo: >=www-client/opera-12.13_p1734, as the remediation. The ...
CVE-2008-1082
Opera before 9.26 is affected by CVE-2008-1082 due to a flaw in handling DOM attribute values of imported XML documents, which allows bypassing sanitization filters and enables cross-site scripting (XSS). This configures a remote attacker to exploit crafted attribute values in an XML document dur...
CVE-2008-4200
The provided connected documentation confirms CVE-2008-4200 affects Opera prior to 9.52, where the address field of a news feed may not reflect the feed’s actual URL. This can allow a remote attacker to set the field to display the URL of a page containing script controlled by the attacker, enabl...
CVE-2010-4581
Opera before 11.00 is listed with an unspecified vulnerability (CVE-2010-4581) among multiple high‑severity issues. Connected advisories (SUSE/Gentoo GLSA 201206-03 and related Nessus plugins) indicate the risk includes remote code execution/DoS and other impacts; remediation guidance consistentl...
CVE-2011-0686
CVE-2011-0686 concerns Opera before 11.01, where remote attackers could trigger a denial of service (application crash) by serving crafted content on a web page (as demonstrated by vkontakte.ru). The issue affects Opera's handling of web-page content and results in an availability impact (crash) ...
CVE-2012-1930
Opera for UNIX precedes version 11.62 and stores temporary print files with world-readable permissions, enabling a local user to read sensitive information. Affected: Opera on UNIX; Root cause: insecure permissions on temporary print files. Impact: information disclosure at local level. Remediati...
CVE-2004-2491
CVE-2004-2491 describes a race condition in Opera 7.53 Build 3850 that causes the address bar to be filled before the page is loaded, enabling remote attackers to spoof the URL via window.open and location.replace and potentially facilitate phishing. Affected product: Opera Web Browser 7.53 Build...
CVE-2008-4196
CVE-2008-4196 concerns Opera before 9.52, with a cross-site scripting vulnerability that allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Public advisories confirm this XSS issue as part of a set of Opera vulnerabilities reported in 2008. The connected documents...
CVE-2009-4071
CVE-2009-4071 affects the Opera web browser (notably Opera on Linux/Unix paths in the connected records) where, when exception stacktraces are enabled, scripting error messages from a site can be read by a different site, enabling information disclosure and cross-site scripting via unspecified ve...
CVE-2010-4580
Opera before 11.00 is affected by a vulnerability where WAP/WML form fields are not cleared when navigating to a new site, allowing a remote attacker to obtain sensitive information from an input field that shares a name with a previously visited site. The issue is confirmed in CVE-2010-4580 and ...
CVE-2012-1931
Opera before 11.62 on UNIX is vulnerable to a local symlink attack during printing, allowing local users to overwrite arbitrary files via a temporary file. Affected condition involves usage with an unspecified printing application. The vulnerability could enable manipulation of files with the pri...
CVE-2012-6460
CVE-2012-6460 affects Opera browser versions before 11.67 and 12.x before 12.02, where a crafted web site can truncate a dialog and potentially trigger downloading and execution of arbitrary programs. Connected sources confirm this is a browser-level vulnerability with remote code execution impli...
CVE-2007-5541
Affected software: Opera before 9.24. Vulnerabilities (CVE-2007-5541 and CVE-2007-5540): CVE-2007-5541: Unspecified vulnerability when using an external newsgroup or e-mail client; remote attackers could execute arbitrary commands via unknown vectors. This requires an external e-mail/newsgroup cl...
CVE-2005-4210
Opera before 8.51 on Windows with an installed Input Method Editor (IME) is vulnerable. Bookmarking a site with a long title may trigger a denial of service via persistent application crash. This vulnerability is documented across multiple sources (NVD/NVD mirror entries, JVNDB entry, CVE listing...
CVE-2008-1081
Opera prior to 9.26 is affected by CVE-2008-1081, where image comments can be treated as scripts when viewing image properties, enabling a user‑assisted remote attacker to execute arbitrary script. The vulnerability arises from images containing custom comments that are executed as script in the ...
CVE-2018-6608
The CVE-2018-6608 entry concerns Opera’s WebRTC component, specifically version 51.0.2830.55. The vulnerability allows disclosure of a private client IP address in a STUN request after visiting a site attempting to enumerate complete client information (e.g., ip.voidsec.com). Technical details ac...
CVE-2008-4199
Opera before 9.52 is vulnerable: it does not prevent using links from web pages to feed local-disk source files, enabling an attacker to determine the validity of local filenames via JavaScript-event detection and manipulation. Affected product/version: Opera up to 9.51.x (pre-9.52). Root cause: ...
CVE-2005-2309
CVE-2005-2309 affects Opera 8.01: a crafted JPEG image can cause a denial-of-service (CPU consumption). Demonstrated with random.jpg. Documents confirm Opera as affected and the DoS impact; no additional details on root cause or patch are provided in the supplied sources.
CVE-2011-2619
CVE-2011-2619 affects Opera browser prior to 11.50. The vulnerability arises from the handling of gradients with many stops in CANVAS elements, SVG, and CSS, enabling a remote attacker to crash the application (denial of service). Several connected advisories corroborate the same description, ind...
CVE-2012-3559
CVE-2012-3559 concerns Opera on macOS before version 12.00 with an unspecified vulnerability that has unknown impact and attack vectors. The connected records consistently describe it as an "unspecified vulnerability" with a “moderate severity issue” and do not provide concrete exploit details, a...
CVE-2008-4292
Opera before 9.52 is affected by CVE-2008-4292 due to not checking the CRL override when encountering a certificate that lacks a CRL. The NVD notes the impact is unknown. Gentoo GLSA 200811-01/Security Advisory includes this CVE among multiple Opera vulnerabilities and recommends upgrading to Ope...
CVE-2007-1563
CVE-2007-1563 affects Opera (notably Opera 9.10) where the FTP PASV response can be manipulated to force the client to connect to arbitrary servers, enabling proxied port scans and potential exposure of sensitive information. The primary affected component is Opera’s FTP protocol implementation, ...