Opera
by Opera
CVEs (289)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2008-4196 | 0.00 | — | 0.02 | Sep 27, 2008 | Cross-site scripting (XSS) vulnerability in Opera before 9.52 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | |||
| CVE-2008-4195 | 0.00 | — | 0.02 | Sep 27, 2008 | Opera before 9.52 does not properly restrict the ability of a framed web page to change the address associated with a different frame, which allows remote attackers to trigger the display of an arbitrary address in a frame via unspecified use of web script. | |||
| CVE-2008-3172 | 0.00 | — | 0.01 | Jul 14, 2008 | Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking." | |||
| CVE-2008-3078 | 0.00 | — | 0.03 | Jul 9, 2008 | Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote attackers to read uninitialized memory contents by using JavaScript to read a canvas image. | |||
| CVE-2008-3079 | 0.00 | — | 0.03 | Jul 9, 2008 | Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors. | |||
| CVE-2008-2716 | 0.00 | — | 0.03 | Jun 16, 2008 | Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks. | |||
| CVE-2008-2714 | 0.00 | — | 0.02 | Jun 16, 2008 | Opera before 9.26 allows remote attackers to misrepresent web page addresses using "certain characters" that "cause the page address text to be misplaced." | |||
| CVE-2008-2715 | 0.00 | — | 0.02 | Jun 16, 2008 | Unspecified vulnerability in Opera before 9.5 allows remote attackers to read cross-domain images via HTML CANVAS elements that use the images as patterns. | |||
| CVE-2008-1764 | 0.00 | — | 0.02 | Apr 12, 2008 | Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs." | |||
| CVE-2008-1082 | 0.00 | — | 0.02 | Feb 29, 2008 | Opera before 9.26 allows remote attackers to "bypass sanitization filters" and conduct cross-site scripting (XSS) attacks via crafted attribute values in an XML document, which are not properly handled during DOM presentation. | |||
| CVE-2008-1081 | 0.00 | — | 0.03 | Feb 29, 2008 | Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comments, which are treated as script when the user displays the image properties. | |||
| CVE-2008-1080 | 0.00 | — | 0.02 | Feb 29, 2008 | Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename into a file input. | |||
| CVE-2007-6523 | 0.00 | — | 0.02 | Dec 24, 2007 | Algorithmic complexity vulnerability in Opera 9.50 beta and 9.x before 9.25 allows remote attackers to cause a denial of service (CPU consumption) via a crafted bitmap (BMP) file that triggers a large number of calculations and checks. | |||
| CVE-2007-6522 | 0.00 | — | 0.02 | Dec 24, 2007 | The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other domains. | |||
| CVE-2007-6521 | 0.00 | — | 0.05 | Dec 24, 2007 | Unspecified vulnerability in Opera before 9.25 allows remote attackers to execute arbitrary code via crafted TLS certificates. | |||
| CVE-2007-6524 | 0.00 | — | 0.02 | Dec 24, 2007 | Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap (BMP) file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420. | |||
| CVE-2007-6520 | 0.00 | — | 0.02 | Dec 24, 2007 | Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins. | |||
| CVE-2007-5540 | 0.00 | — | 0.03 | Oct 18, 2007 | Unspecified vulnerability in Opera before 9.24 allows remote attackers to overwrite functions on pages from other domains and bypass the same-origin policy via unknown vectors. | |||
| CVE-2007-5541 | 0.00 | — | 0.05 | Oct 18, 2007 | Unspecified vulnerability in Opera before 9.24, when using an "external" newsgroup or e-mail client, allows remote attackers to execute arbitrary commands via unknown vectors. | |||
| CVE-2007-5276 | 0.00 | — | 0.01 | Oct 8, 2007 | Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80. |
- CVE-2008-4196Sep 27, 2008risk 0.00cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in Opera before 9.52 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- CVE-2008-4195Sep 27, 2008risk 0.00cvss —epss 0.02
Opera before 9.52 does not properly restrict the ability of a framed web page to change the address associated with a different frame, which allows remote attackers to trigger the display of an arbitrary address in a frame via unspecified use of web script.
- CVE-2008-3172Jul 14, 2008risk 0.00cvss —epss 0.01
Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking."
- CVE-2008-3078Jul 9, 2008risk 0.00cvss —epss 0.03
Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote attackers to read uninitialized memory contents by using JavaScript to read a canvas image.
- CVE-2008-3079Jul 9, 2008risk 0.00cvss —epss 0.03
Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors.
- CVE-2008-2716Jun 16, 2008risk 0.00cvss —epss 0.03
Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks.
- CVE-2008-2714Jun 16, 2008risk 0.00cvss —epss 0.02
Opera before 9.26 allows remote attackers to misrepresent web page addresses using "certain characters" that "cause the page address text to be misplaced."
- CVE-2008-2715Jun 16, 2008risk 0.00cvss —epss 0.02
Unspecified vulnerability in Opera before 9.5 allows remote attackers to read cross-domain images via HTML CANVAS elements that use the images as patterns.
- CVE-2008-1764Apr 12, 2008risk 0.00cvss —epss 0.02
Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs."
- CVE-2008-1082Feb 29, 2008risk 0.00cvss —epss 0.02
Opera before 9.26 allows remote attackers to "bypass sanitization filters" and conduct cross-site scripting (XSS) attacks via crafted attribute values in an XML document, which are not properly handled during DOM presentation.
- CVE-2008-1081Feb 29, 2008risk 0.00cvss —epss 0.03
Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comments, which are treated as script when the user displays the image properties.
- CVE-2008-1080Feb 29, 2008risk 0.00cvss —epss 0.02
Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename into a file input.
- CVE-2007-6523Dec 24, 2007risk 0.00cvss —epss 0.02
Algorithmic complexity vulnerability in Opera 9.50 beta and 9.x before 9.25 allows remote attackers to cause a denial of service (CPU consumption) via a crafted bitmap (BMP) file that triggers a large number of calculations and checks.
- CVE-2007-6522Dec 24, 2007risk 0.00cvss —epss 0.02
The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other domains.
- CVE-2007-6521Dec 24, 2007risk 0.00cvss —epss 0.05
Unspecified vulnerability in Opera before 9.25 allows remote attackers to execute arbitrary code via crafted TLS certificates.
- CVE-2007-6524Dec 24, 2007risk 0.00cvss —epss 0.02
Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap (BMP) file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420.
- CVE-2007-6520Dec 24, 2007risk 0.00cvss —epss 0.02
Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins.
- CVE-2007-5540Oct 18, 2007risk 0.00cvss —epss 0.03
Unspecified vulnerability in Opera before 9.24 allows remote attackers to overwrite functions on pages from other domains and bypass the same-origin policy via unknown vectors.
- CVE-2007-5541Oct 18, 2007risk 0.00cvss —epss 0.05
Unspecified vulnerability in Opera before 9.24, when using an "external" newsgroup or e-mail client, allows remote attackers to execute arbitrary commands via unknown vectors.
- CVE-2007-5276Oct 8, 2007risk 0.00cvss —epss 0.01
Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80.
Page 12 of 15