Opera
by Opera
CVEs (291)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2007-5541 | 0.00 | — | 0.05 | Oct 18, 2007 | Unspecified vulnerability in Opera before 9.24, when using an "external" newsgroup or e-mail client, allows remote attackers to execute arbitrary commands via unknown vectors. | |||
| CVE-2007-5276 | 0.00 | — | 0.01 | Oct 8, 2007 | Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80. | |||
| CVE-2007-4944 | 0.00 | — | 0.02 | Sep 18, 2007 | The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process a new pattern, which allows remote attackers to obtain sensitive information (memory contents) via JavaScript. | |||
| CVE-2007-3819 | 0.00 | — | 0.02 | Jul 17, 2007 | Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed. | |||
| CVE-2007-3142 | 0.00 | — | 0.01 | Jun 11, 2007 | Visual truncation vulnerability in Opera 9.21 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after 34 characters, as demonstrated by a phishing attack using HTTP Basic Authentication. | |||
| CVE-2007-1737 | 0.00 | — | 0.01 | Mar 28, 2007 | Opera 9.10 does not check URLs embedded in (1) object or (2) iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection. | |||
| CVE-2007-1115 | 0.00 | — | 0.02 | Feb 26, 2007 | The child frames in Opera 9 before 9.20 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7… | |||
| CVE-2006-6970 | 0.00 | — | 0.01 | Feb 7, 2007 | Opera 9.10 Final allows remote attackers to bypass the Fraud Protection mechanism by adding certain characters to the end of a domain name, as demonstrated by the "." and "/" characters, which is not caught by the blacklist filter. | |||
| CVE-2006-6955 | 0.00 | — | 0.02 | Jan 29, 2007 | Opera allows remote attackers to cause a denial of service (application crash) via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723. | |||
| CVE-2007-0127 | 0.00 | — | 0.05 | Jan 9, 2007 | The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatrix request, which allows remote attackers to execute arbitrary code via JavaScript code that uses an invalid object in this request that causes a controlled… | |||
| CVE-2006-4819 | 0.00 | — | 0.05 | Oct 17, 2006 | Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag (long link address). | |||
| CVE-2006-3945 | 0.00 | — | 0.03 | Jul 31, 2006 | The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the background property of a DHTML element to a long http or https URL, which triggers memory corruption. | |||
| CVE-2006-3331 | 0.00 | — | 0.04 | Jun 30, 2006 | Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an SSL-enabled website, which allows remote attackers to spoof a trusted SSL certificate from an untrusted website and facilitates phishing attacks. | |||
| CVE-2006-3198 | 0.00 | — | 0.06 | Jun 23, 2006 | Integer overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via a JPEG image with large height and width values, which causes less memory to be allocated than intended. | |||
| CVE-2005-4210 | 0.00 | — | 0.03 | Dec 13, 2005 | Opera before 8.51, when running on Windows with Input Method Editor (IME) installed, allows remote attackers to cause a denial of service (persistent application crash) by bookmarking a site with a long title. | |||
| CVE-2005-3946 | 0.00 | — | 0.03 | Dec 1, 2005 | Opera 8.50 allows remote attackers to cause a denial of service (crash) via a Java applet with a large string argument to the removeMember JNI method for the com.opera.JSObject class. | |||
| CVE-2005-3059 | 0.00 | — | 0.02 | Sep 26, 2005 | Multiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and attack vectors, related to (1) " handling of must-revalidate cache directive for HTTPS pages" or (2) a "display issue with cookie comment encoding." | |||
| CVE-2005-3041 | 0.00 | — | 0.02 | Sep 22, 2005 | Unspecified "drag-and-drop vulnerability" in Opera Web Browser before 8.50 on Windows allows "unintentional file uploads." | |||
| CVE-2005-3007 | 0.00 | — | 0.03 | Sep 21, 2005 | Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), which might allow remote attackers to trick users into processing dangerous content. | |||
| CVE-2005-3006 | 0.00 | — | 0.02 | Sep 21, 2005 | The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote attackers to inject arbitrary web script and spoof attachment filenames. |
- CVE-2007-5541Oct 18, 2007risk 0.00cvss —epss 0.05
Unspecified vulnerability in Opera before 9.24, when using an "external" newsgroup or e-mail client, allows remote attackers to execute arbitrary commands via unknown vectors.
- CVE-2007-5276Oct 8, 2007risk 0.00cvss —epss 0.01
Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80.
- CVE-2007-4944Sep 18, 2007risk 0.00cvss —epss 0.02
The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process a new pattern, which allows remote attackers to obtain sensitive information (memory contents) via JavaScript.
- CVE-2007-3819Jul 17, 2007risk 0.00cvss —epss 0.02
Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.
- CVE-2007-3142Jun 11, 2007risk 0.00cvss —epss 0.01
Visual truncation vulnerability in Opera 9.21 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after 34 characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
- CVE-2007-1737Mar 28, 2007risk 0.00cvss —epss 0.01
Opera 9.10 does not check URLs embedded in (1) object or (2) iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection.
- CVE-2007-1115Feb 26, 2007risk 0.00cvss —epss 0.02
The child frames in Opera 9 before 9.20 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7…
- CVE-2006-6970Feb 7, 2007risk 0.00cvss —epss 0.01
Opera 9.10 Final allows remote attackers to bypass the Fraud Protection mechanism by adding certain characters to the end of a domain name, as demonstrated by the "." and "/" characters, which is not caught by the blacklist filter.
- CVE-2006-6955Jan 29, 2007risk 0.00cvss —epss 0.02
Opera allows remote attackers to cause a denial of service (application crash) via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723.
- CVE-2007-0127Jan 9, 2007risk 0.00cvss —epss 0.05
The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatrix request, which allows remote attackers to execute arbitrary code via JavaScript code that uses an invalid object in this request that causes a controlled…
- CVE-2006-4819Oct 17, 2006risk 0.00cvss —epss 0.05
Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag (long link address).
- CVE-2006-3945Jul 31, 2006risk 0.00cvss —epss 0.03
The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the background property of a DHTML element to a long http or https URL, which triggers memory corruption.
- CVE-2006-3331Jun 30, 2006risk 0.00cvss —epss 0.04
Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an SSL-enabled website, which allows remote attackers to spoof a trusted SSL certificate from an untrusted website and facilitates phishing attacks.
- CVE-2006-3198Jun 23, 2006risk 0.00cvss —epss 0.06
Integer overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via a JPEG image with large height and width values, which causes less memory to be allocated than intended.
- CVE-2005-4210Dec 13, 2005risk 0.00cvss —epss 0.03
Opera before 8.51, when running on Windows with Input Method Editor (IME) installed, allows remote attackers to cause a denial of service (persistent application crash) by bookmarking a site with a long title.
- CVE-2005-3946Dec 1, 2005risk 0.00cvss —epss 0.03
Opera 8.50 allows remote attackers to cause a denial of service (crash) via a Java applet with a large string argument to the removeMember JNI method for the com.opera.JSObject class.
- CVE-2005-3059Sep 26, 2005risk 0.00cvss —epss 0.02
Multiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and attack vectors, related to (1) " handling of must-revalidate cache directive for HTTPS pages" or (2) a "display issue with cookie comment encoding."
- CVE-2005-3041Sep 22, 2005risk 0.00cvss —epss 0.02
Unspecified "drag-and-drop vulnerability" in Opera Web Browser before 8.50 on Windows allows "unintentional file uploads."
- CVE-2005-3007Sep 21, 2005risk 0.00cvss —epss 0.03
Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), which might allow remote attackers to trick users into processing dangerous content.
- CVE-2005-3006Sep 21, 2005risk 0.00cvss —epss 0.02
The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote attackers to inject arbitrary web script and spoof attachment filenames.
Page 13 of 15