282 matches found
CVE-2011-2632
Opera before 11.11 is affected by CVE-2011-2632 due to improper destruction of a Silverlight instance, allowing a remote attacker to crash the application via a crafted web page (e.g., vod.onet.pl). Mitigation in connected documents recommends upgrading to a newer Opera version (Gentoo GLSA 20120...
CVE-2012-6472
CVE-2012-6472 affects Opera on UNIX: Opera before 12.12 uses weak permissions on the profile directory, allowing local users to read sensitive files (cache, password, configuration) and potentially modify configuration to gain privileges. Existence of related entries confirms the issue across mul...
CVE-2014-1870
CVE-2014-1870 affects Opera on Mac OS X prior to version 19. The vulnerability allows a user‑assisted remote attacker to spoof the address bar through drag‑and‑drop related vectors. The public records consistently describe the issue as an address bar spoofing flaw in Opera before 19 on macOS, wit...
CVE-2008-5683
Opera Web Browser Multiple Vulnerabilities (Dec 2008) include CVE-2008-5683, described as an unspecified vulnerability that could reveal random data. Affected product: Opera browser. Impact cited in the Gentoo GLSA/opens vulnerability records; browser upgrade to Opera 9.64 or later is advised as ...
CVE-2009-4071
CVE-2009-4071 affects the Opera web browser (notably Opera on Linux/Unix paths in the connected records) where, when exception stacktraces are enabled, scripting error messages from a site can be read by a different site, enabling information disclosure and cross-site scripting via unspecified ve...
CVE-2010-4580
Opera before 11.00 is affected by a vulnerability where WAP/WML form fields are not cleared when navigating to a new site, allowing a remote attacker to obtain sensitive information from an input field that shares a name with a previously visited site. The issue is confirmed in CVE-2010-4580 and ...
CVE-2011-0687
Opera before 11.01 is vulnerable to a denial-of-service via crafted WAP documents that abuse WAP dropdown lists, caused by input validation issues (CWE-20). The issue can crash the application, with CVSS v2 base score 4.3 (Medium). Affected product/version: Opera up to 11.01 (as described in mult...
CVE-2011-2625
CVE-2011-2625 affects the Opera browser prior to 11.50. The issue is a denial-of-service crash triggered by a SELECT element containing many OPTION elements, as described in the initial entry. Connected advisories confirm that Opera 11.50 addresses multiple vulnerabilities and provides the fix fo...
CVE-2011-2630
CVE-2011-2630 concerns Opera browser (pre-12.x) where a user-assisted remote page can crash the app during a reload after opening the Easy Sticky Note extension popup. Affected product/version: Opera before 11.11 (as per the CVE description). The issue is a denial of service due to improper handl...
CVE-2011-2635
The CVE-2011-2635 entry concerns Opera’s CSS engine: Opera before 11.10 is vulnerable to a denial-of-service (application crash) caused by using the :hover pseudo-class with transforms on floated elements. This is documented consistently across multiple vendors/advisories (e.g., Red Hat, SUSE, Ge...
CVE-2011-2636
Summary: CVE-2011-2636 affects the Opera browser prior to 11.10 and could cause a denial of service (application crash) when processing unknown content on a web page, as illustrated by a Tomato Firmware page. The OpenVAS/Gentoo/SUSE/Red Hat entries corroborate multiple vendors’ advisories for Ope...
CVE-2012-1251
CVE-2012-1251 affects Opera before 9.63 and stems from improper verification of X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via crafted certificates. The vulnerability is documented across multiple sources (NVD entry referencing O...
CVE-2012-1931
Opera before 11.62 on UNIX is vulnerable to a local symlink attack during printing, allowing local users to overwrite arbitrary files via a temporary file. Affected condition involves usage with an unspecified printing application. The vulnerability could enable manipulation of files with the pri...
CVE-2012-4144
Opera is vulnerable to cross-site scripting due to improper escaping in DOM elements. The affected versions are Opera on Windows/UNIX older than 12.01 and on Mac OS X older than 11.66, with 12.x prior to 12.01 also affected. Root cause: failure to escape characters in DOM elements within crafted ...
CVE-2012-6464
Opera is affected by CVE-2012-6464 (XSS) as documented in multiple sources. The Gentoo GLSA 201406-14 and related OpenVAS entries reference Opera vulnerabilities and explicitly recommend upgrading to the latest Opera package, for Gentoo: >=www-client/opera-12.13_p1734, as the remediation. The ...
CVE-2008-1762
Opera before 9.27 contains a memory corruption vulnerability (CVE-2008-1762) triggered by a crafted scaled image pattern in an HTML CANVAS element, allowing remote attackers to cause a crash and potentially execute arbitrary code. Affected: Opera web browser; root cause: memory corruption during ...
CVE-2008-4196
CVE-2008-4196 concerns Opera before 9.52, with a cross-site scripting vulnerability that allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Public advisories confirm this XSS issue as part of a set of Opera vulnerabilities reported in 2008. The connected documents...
CVE-2008-4200
The provided connected documentation confirms CVE-2008-4200 affects Opera prior to 9.52, where the address field of a news feed may not reflect the feed’s actual URL. This can allow a remote attacker to set the field to display the URL of a page containing script controlled by the attacker, enabl...
CVE-2011-0686
CVE-2011-0686 concerns Opera before 11.01, where remote attackers could trigger a denial of service (application crash) by serving crafted content on a web page (as demonstrated by vkontakte.ru). The issue affects Opera's handling of web-page content and results in an availability impact (crash) ...
CVE-2012-1930
Opera for UNIX precedes version 11.62 and stores temporary print files with world-readable permissions, enabling a local user to read sensitive information. Affected: Opera on UNIX; Root cause: insecure permissions on temporary print files. Impact: information disclosure at local level. Remediati...
CVE-2005-4210
Opera before 8.51 on Windows with an installed Input Method Editor (IME) is vulnerable. Bookmarking a site with a long title may trigger a denial of service via persistent application crash. This vulnerability is documented across multiple sources (NVD/NVD mirror entries, JVNDB entry, CVE listing...
CVE-2012-6460
CVE-2012-6460 affects Opera browser versions before 11.67 and 12.x before 12.02, where a crafted web site can truncate a dialog and potentially trigger downloading and execution of arbitrary programs. Connected sources confirm this is a browser-level vulnerability with remote code execution impli...
CVE-2018-6608
The CVE-2018-6608 entry concerns Opera’s WebRTC component, specifically version 51.0.2830.55. The vulnerability allows disclosure of a private client IP address in a STUN request after visiting a site attempting to enumerate complete client information (e.g., ip.voidsec.com). Technical details ac...
CVE-2005-2309
CVE-2005-2309 affects Opera 8.01: a crafted JPEG image can cause a denial-of-service (CPU consumption). Demonstrated with random.jpg. Documents confirm Opera as affected and the DoS impact; no additional details on root cause or patch are provided in the supplied sources.
CVE-2008-1081
Opera prior to 9.26 is affected by CVE-2008-1081, where image comments can be treated as scripts when viewing image properties, enabling a user‑assisted remote attacker to execute arbitrary script. The vulnerability arises from images containing custom comments that are executed as script in the ...
CVE-2012-3559
CVE-2012-3559 concerns Opera on macOS before version 12.00 with an unspecified vulnerability that has unknown impact and attack vectors. The connected records consistently describe it as an "unspecified vulnerability" with a “moderate severity issue” and do not provide concrete exploit details, a...
CVE-2008-4199
Opera before 9.52 is vulnerable: it does not prevent using links from web pages to feed local-disk source files, enabling an attacker to determine the validity of local filenames via JavaScript-event detection and manipulation. Affected product/version: Opera up to 9.51.x (pre-9.52). Root cause: ...
CVE-2007-5541
Affected software: Opera before 9.24. Vulnerabilities (CVE-2007-5541 and CVE-2007-5540): CVE-2007-5541: Unspecified vulnerability when using an external newsgroup or e-mail client; remote attackers could execute arbitrary commands via unknown vectors. This requires an external e-mail/newsgroup cl...
CVE-2011-2619
CVE-2011-2619 affects Opera browser prior to 11.50. The vulnerability arises from the handling of gradients with many stops in CANVAS elements, SVG, and CSS, enabling a remote attacker to crash the application (denial of service). Several connected advisories corroborate the same description, ind...
CVE-2007-1563
CVE-2007-1563 affects Opera (notably Opera 9.10) where the FTP PASV response can be manipulated to force the client to connect to arbitrary servers, enabling proxied port scans and potential exposure of sensitive information. The primary affected component is Opera’s FTP protocol implementation, ...
CVE-2008-4292
Opera before 9.52 is affected by CVE-2008-4292 due to not checking the CRL override when encountering a certificate that lacks a CRL. The NVD notes the impact is unknown. Gentoo GLSA 200811-01/Security Advisory includes this CVE among multiple Opera vulnerabilities and recommends upgrading to Ope...