Opera
Page 2 of 4 — Opera CVEs from a corpus of 302, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2011-2626 | | 2011-07-01 | Opera before 11.50 allows remote attackers to cause a denial of service (application crash) by using "injected script" to set the SRC attribute of an IFRAME el… | |
CVE-2011-2625 | | 2011-07-01 | Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a SELECT element that contains many OPTION elements. | |
CVE-2011-2624 | | 2011-07-01 | Opera before 11.50 allows user-assisted remote attackers to cause a denial of service (application hang) via a large table, which is not properly handled durin… | |
CVE-2011-2623 | | 2011-07-01 | Unspecified vulnerability in the SVG BiDi implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash or hang)… | |
CVE-2011-2622 | | 2011-07-01 | Unspecified vulnerability in the Web Workers implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via… | |
CVE-2011-2621 | | 2011-07-01 | Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors related to form layout. | |
CVE-2011-2620 | | 2011-07-01 | Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors involving SVG animation. | |
CVE-2011-2619 | | 2011-07-01 | Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a gradient with many stops, related to the implementation of CA… | |
CVE-2011-2618 | | 2011-07-01 | Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via web script that moves a (1) AUDIO element or (2) VIDEO element… | |
CVE-2011-2617 | | 2011-07-01 | Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors related to selecting a tex… | |
CVE-2011-2616 | | 2011-07-01 | Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (memory consumption) via unknown content on a web page, as… | |
CVE-2011-2615 | | 2011-07-01 | Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application hang) via unknown content on a web page, as d… | |
CVE-2011-2614 | | 2011-07-01 | The SVG implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors involving a path on which man… | |
CVE-2011-2613 | | 2011-07-01 | The Array.prototype.join method in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a non-array object that cont… | |
CVE-2011-2612 | | 2011-07-01 | Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as… | |
CVE-2011-2611 | | 2011-07-01 | Unspecified vulnerability in the printing functionality in Opera before 11.50 allows user-assisted remote attackers to cause a denial of service (application c… | |
CVE-2011-2610 | | 2011-07-01 | Unspecified vulnerability in Opera before 11.50 has unknown impact and attack vectors, related to a "moderately severe issue." | |
CVE-2011-2609 | | 2011-07-01 | Opera before 11.50 does not properly restrict data: URIs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafte… | |
CVE-2011-1337 | | 2011-07-01 | Opera before 11.50 allows remote attackers to cause a denial of service (disk consumption) via invalid URLs that trigger creation of error pages. | |
CVE-2011-1824 | | 2011-05-10 | The VEGAOpBitmap::AddLine function in Opera before 10.61 does not properly initialize memory during processing of the SIZE attribute of a SELECT element, which… | |
CVE-2011-0687 | | 2011-01-31 | Opera before 11.01 does not properly implement Wireless Application Protocol (WAP) dropdown lists, which allows user-assisted remote attackers to cause a denia… | |
CVE-2011-0686 | | 2011-01-31 | Unspecified vulnerability in Opera before 11.01 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as… | |
CVE-2011-0685 | | 2011-01-31 | The Delete Private Data feature in Opera before 11.01 does not properly implement the "Clear all email account passwords" option, which might allow physically… | |
CVE-2011-0684 | | 2011-01-31 | Opera before 11.01 does not properly handle redirections and unspecified other HTTP responses, which allows remote web servers to obtain sufficient access to l… | |
CVE-2011-0683 | | 2011-01-31 | Opera before 11.01 does not properly restrict the use of opera: URLs, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted… | |
CVE-2011-0682 | | 2011-01-31 | Integer truncation error in opera.dll in Opera before 11.01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)… | |
CVE-2011-0681 | | 2011-01-31 | The Cascading Style Sheets (CSS) Extensions for XML implementation in Opera before 11.01 recognizes links to javascript: URLs in the -o-link property, which ma… | |
CVE-2011-0450 | | 2011-01-31 | The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname of the filesystem-viewing application, which allows user-assist… | |
CVE-2010-4587 | | 2010-12-22 | Opera before 11.00 on Windows does not properly implement the Insecure Third Party Module warning message, which might make it easier for user-assisted remote… | |
CVE-2010-4586 | | 2010-12-22 | The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, possibly a related is… | |
CVE-2010-4585 | | 2010-12-22 | Unspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote attackers to cause a denial of service (application crash) by tr… | |
CVE-2010-4584 | | 2010-12-22 | Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites, which might make i… | |
CVE-2010-4583 | | 2010-12-22 | Opera before 11.00, when Opera Turbo is enabled, does not display a page's security indication, which makes it easier for remote attackers to spoof trusted con… | |
CVE-2010-4582 | | 2010-12-22 | Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote attackers to bypass intended access restri… | |
CVE-2010-4581 | | 2010-12-22 | Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue." | |
CVE-2010-4580 | | 2010-12-22 | Opera before 11.00 does not clear WAP WML form fields after manual navigation to a new web site, which allows remote attackers to obtain sensitive information… | |
CVE-2010-4579 | | 2010-12-22 | Opera before 11.00 does not properly constrain dialogs to appear on top of rendered documents, which makes it easier for remote attackers to trick users into i… | |
CVE-2010-4050 | | 2010-10-21 | Opera before 10.63 allows remote attackers to cause a denial of service (memory corruption) by referencing an SVG document in an IMG element. | |
CVE-2010-4049 | | 2010-10-21 | Opera before 10.63 allows remote attackers to cause a denial of service (application crash) via a Flash movie with a transparent Window Mode (aka wmode) proper… | |
CVE-2010-4048 | | 2010-10-21 | Opera before 10.63 allows user-assisted remote web servers to cause a denial of service (application crash) by sending a redirect during the saving of a file. | |
CVE-2010-4047 | | 2010-10-21 | Opera before 10.63 does not properly select the security context of JavaScript code associated with an error page, which allows user-assisted remote attackers… | |
CVE-2010-4046 | | 2010-10-21 | Opera before 10.63 does not properly verify the origin of video content, which allows remote attackers to obtain sensitive information by using a video stream… | |
CVE-2010-4045 | | 2010-10-21 | Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote attackers to spoof t… | |
CVE-2010-4044 | | 2010-10-21 | Opera before 10.63 does not ensure that the portion of a URL shown in the Address Bar contains the beginning of the URL, which allows remote attackers to spoof… | |
CVE-2010-4043 | | 2010-10-21 | Opera before 10.63 does not prevent interpretation of a cross-origin document as a CSS stylesheet when the document lacks a CSS token sequence, which allows re… | |
CVE-2010-3021 | | 2010-08-16 | Unspecified vulnerability in Opera before 10.61 allows remote attackers to cause a denial of service (CPU consumption and application hang) via an animated PNG… | |
CVE-2010-3020 | | 2010-08-16 | The news-feed preview feature in Opera before 10.61 does not properly remove scripts, which allows remote attackers to force subscriptions to arbitrary feeds v… | |
CVE-2010-3019 | | 2010-08-16 | Heap-based buffer overflow in Opera before 10.61 allows remote attackers to execute arbitrary code or cause a denial of service (application crash or hang) via… | |
CVE-2010-2576 | | 2010-08-16 | Opera before 10.61 does not properly suppress clicks on download dialogs that became visible after a recent tab change, which allows remote attackers to conduc… | |
CVE-2010-2666 | | 2010-07-08 | Opera before 10.54 on Windows and Mac OS X does not properly enforce permission requirements for widget filesystem access and directory selection, which allows… | |
CVE-2010-2665 | | 2010-07-08 | Cross-site scripting (XSS) vulnerability in Opera before 10.54 on Windows and Mac OS X, and before 10.11 on UNIX platforms, allows remote attackers to inject a… | |
CVE-2010-2664 | | 2010-07-08 | Opera before 10.60 allows remote attackers to cause a denial of service (application hang) via certain HTML content that has an unclosed SPAN element with abso… | |
CVE-2010-2663 | | 2010-07-08 | Opera before 10.60 allows remote attackers to cause a denial of service (application hang) via an ended event handler that changes the SRC attribute of an AUDI… | |
CVE-2010-2662 | | 2010-07-08 | Opera before 10.60 allows remote attackers to bypass the popup blocker via a javascript: URL and a "fake click." | |
CVE-2010-2661 | | 2010-07-08 | Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict access to the full pathname of a file selected for u… | |
CVE-2010-2660 | | 2010-07-08 | Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph characters in domain names… | |
CVE-2010-2659 | | 2010-07-08 | Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms makes widget properties accessible to third-party domains, which al… | |
CVE-2010-2658 | | 2010-07-08 | Opera before 10.60 does not properly restrict certain interaction between plug-ins, file inputs, and the clipboard, which allows user-assisted remote attackers… | |
CVE-2010-2657 | | 2010-07-08 | Opera before 10.60 on Windows and Mac OS X does not properly prevent certain double-click operations from running a program located on a web site, which allows… | |
CVE-2010-2455 | | 2010-06-25 | Opera does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which might allow remote atta… | |
CVE-2010-2421 | | 2010-06-22 | Multiple unspecified vulnerabilities in Opera before 10.54 have unknown impact and attack vectors related to (1) "extremely severe," (2) "highly severe," (3) "… | |
CVE-2010-2121 | | 2010-06-01 | Opera 9.52 allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elem… | |
CVE-2010-1993 | | 2010-05-20 | Opera 9.52 does not properly handle an IFRAME element with a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (reso… | |
CVE-2010-1989 | | 2010-05-20 | Opera 9.52 executes a mail application in situations where an IMG element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attacker… | |
CVE-2010-1728 | | 2010-05-06 | Opera before 10.53 on Windows and Mac OS X does not properly handle a series of document modifications that occur asynchronously, which allows remote attackers… | |
CVE-2010-1349 | | 2010-04-12 | Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflo… | |
CVE-2010-1310 | | 2010-04-08 | Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents of other pages. | |
CVE-2010-0653 | | 2010-02-18 | Opera before 10.10 permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is… | |
CVE-2009-4072 | | 2009-11-24 | Unspecified vulnerability in Opera before 10.10 has unknown impact and attack vectors, related to a "moderately severe issue." | |
CVE-2009-4071 | | 2009-11-24 | Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web… | |
CVE-2009-3832 | | 2009-10-30 | Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the addre… | |
CVE-2009-3831 | | 2009-10-30 | Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted domai… | |
CVE-2009-3269 | | 2009-09-18 | Opera 9.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a series of automatic submissions of a form containing a KEYG… | |
CVE-2009-3266 | | 2009-09-18 | Opera before 10.01 does not properly restrict HTML in a (1) RSS or (2) Atom feed, which allows remote attackers to conduct cross-site scripting (XSS) attacks… | |
CVE-2009-3265 | | 2009-09-18 | Cross-site scripting (XSS) vulnerability in Opera 9 and 10 allows remote attackers to inject arbitrary web script or HTML via a (1) RSS or (2) Atom feed, relat… | |
CVE-2008-7245 | | 2009-09-18 | Opera 9.52 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing… | |
CVE-2009-3049 | | 2009-09-02 | Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote attackers to spoof… | |
CVE-2009-3048 | | 2009-09-02 | Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE=file" functionality, which allows remote attackers to trick a use… | |
CVE-2009-3047 | | 2009-09-02 | Opera before 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously visited site to the currently visited si… | |
CVE-2009-3046 | High | 7.5 | 2009-09-02 | Opera before 10.00 does not check all intermediate X.509 certificates for revocation, which makes it easier for remote SSL servers to bypass validation of the… |
CVE-2009-3045 | | 2009-09-02 | Opera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL s… | |
CVE-2009-3044 | | 2009-09-02 | Opera before 10.00 does not properly handle a (1) '\0' character or (2) invalid wildcard character in a domain name in the subject's Common Name (CN) field of… | |
CVE-2009-3013 | | 2009-08-31 | Opera 9.52 and earlier, and 10.00 Beta 3 Build 1699, does not properly block data: URIs in Location headers in HTTP responses, which allows remote attackers to… | |
CVE-2009-2577 | | 2009-07-22 | Opera 9.52 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption, and application hang) via a long Unicode string argume… | |
CVE-2009-2540 | | 2009-07-20 | Opera, possibly 9.64 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property o… | |
CVE-2009-2351 | | 2009-07-07 | Opera 9.52 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS… | |
CVE-2009-2070 | | 2009-06-15 | Opera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoo… | |
CVE-2009-2068 | | 2009-06-15 | Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary w… | |
CVE-2009-2067 | | 2009-06-15 | Opera detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web scrip… | |
CVE-2009-2063 | | 2009-06-15 | Opera, possibly before 9.25, processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbit… | |
CVE-2009-2059 | | 2009-06-15 | Opera, possibly before 9.25, uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy se… | |
CVE-2009-1599 | | 2009-05-11 | Opera executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which migh… | |
CVE-2009-1234 | | 2009-04-02 | Opera 9.64 allows remote attackers to cause a denial of service (application crash) via an XML document containing a long series of start-tags with no correspo… | |
CVE-2009-0916 | | 2009-03-16 | Unspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to a "moderately severe issue." | |
CVE-2009-0915 | | 2009-03-16 | Opera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via unspecified vectors related to plug-ins. | |
CVE-2009-0914 | | 2009-03-16 | Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corruption. | |
CVE-2008-5683 | | 2008-12-19 | Unspecified vulnerability in Opera before 9.63 allows remote attackers to "reveal random data" via unknown vectors. | |
CVE-2008-5682 | | 2008-12-19 | Cross-site scripting (XSS) vulnerability in Opera before 9.63 allows remote attackers to inject arbitrary web script or HTML via built-in XSLT templates. | |
CVE-2008-5681 | | 2008-12-19 | Opera before 9.63 does not block unspecified "scripted URLs" during the feed preview, which allows remote attackers to read existing subscriptions and force su… | |
CVE-2008-5680 | | 2008-12-19 | Multiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute arbitrary code via a crafted text area, or allow (2) user-assisted r… |