OP
Product
Opera
19
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch
Add Opera to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-6159 | 6.1 | Dec 23 | URLs using “javascript:” have the protocol removed when pasted into the address bar to protect users from cross-site scripting (XSS) attacks, but in certain circumstances this… Affected: before 61.0.3076.56532 |
| CVE-2019-19788 | 5.5 | Dec 18 | Opera for Android before 54.0.2669.49432 is vulnerable to a sandboxed cross-origin iframe bypass attack Affected: before 54.0.2669.49432 |
| CVE-2016-7152 | 5.3 | Sep 6 | The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain… Affected: All versions, or not specified |
| CVE-2019-12278 | 4.3 | Mar 12 | Opera through 53 on Android allows Address Bar Spoofing Affected: 52.1.2517.139570 |
| CVE-2010-5227 | – | Sep 7 | Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as… Affected: through 10.61 |
| CVE-2009-2068 | – | Jun 15 | Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an… Affected: 5..10; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2008-5679 | – | Dec 19 | The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid pointer calculation and heap… Affected: through 9.62; 5..10; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2008-5428 | – | Dec 11 | Opera 9.51 on Windows XP does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type:… Affected: 9.51 |
| CVE-2008-5178 | – | Nov 20 | Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:// URI Affected: 9.62 |
| CVE-2008-4795 | – | Oct 30 | The links panel in Opera before 9.62 processes Javascript within the context of the "outermost page" of a frame, which allows remote attackers to inject arbitrary web script or… Affected: through 9.61; 5..10; 5.0; 5.1; 5.2; 5.3; +34 more |
| CVE-2008-4794 | – | Oct 30 | Opera before 9.62 allows remote attackers to execute arbitrary commands via the History Search results page, a different vulnerability than CVE-2008-4696 Affected: through 9.61; 5..10; 5.0; 5.1; 5.2; 5.3; +34 more |
| CVE-2008-4696 | – | Oct 23 | Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the… Affected: through 9.6; 5..10; 5.0; 5.1; 5.2; 5.3; +34 more |
| CVE-2008-4695 | – | Oct 23 | Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicting the cache pathname of a cached Java applet and then… Affected: through 9.60; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2008-4293 | – | Sep 27 | Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol handler, allows remote attackers to cause a denial of service (crash) and possibly execute… Affected: through 9.51; 5..10; 5.0; 5.1; 5.2; 5.3; +34 more |
| CVE-2008-3172 | – | Jul 14 | Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, which could allow remote attackers to perform a session… Affected: All versions, or not specified |
| CVE-2008-3079 | – | Jul 9 | Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors Affected: through 9.51 |
| CVE-2008-1761 | – | Apr 12 | Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory… Affected: through 9.26; 9.02; 9.10; 9.20; 9.21; 9.22; +3 more |
| CVE-2008-1764 | – | Apr 12 | Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs." Affected: through 9.26; 5..10; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2003-1561 | – | Dec 31 | Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information… Affected: All versions, or not specified |
Showing 19