OB
Product
Opera Browser
282
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 4Low 1
Watch
Add Opera Browser to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-1251 | – | Jun 4 | Opera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a… Affected: through 9.62; 1.00; 2.00; 2.10; 2.10; 2.10; +34 more |
| CVE-2012-1931 | – | Mar 28 | Opera before 11.62 on UNIX, when used in conjunction with an unspecified printing application, allows local users to overwrite arbitrary files via a symlink attack on a temporary… Affected: through 11.61; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2012-1930 | – | Mar 28 | Opera before 11.62 on UNIX uses world-readable permissions for temporary files during printing, which allows local users to obtain sensitive information by reading these files Affected: through 11.61; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2012-1929 | – | Mar 28 | Opera before 11.62 on Mac OS X allows remote attackers to spoof the address field and security dialogs via crafted styling that causes page content to be displayed outside of the… Affected: through 11.61; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2012-1928 | – | Mar 28 | Opera before 11.62 allows remote attackers to spoof the address field by triggering a page reload followed by a redirect to a different domain Affected: through 11.61; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2012-1927 | – | Mar 28 | Opera before 11.62 allows remote attackers to spoof the address field by triggering the launch of a dialog window associated with a different domain Affected: through 11.61; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2012-1926 | – | Mar 28 | Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction with cross-domain… Affected: through 11.61; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2012-1925 | – | Mar 28 | Opera before 11.62 does not ensure that a dialog window is placed on top of content windows, which makes it easier for user-assisted remote attackers to trick users into… Affected: through 11.61; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2012-1924 | – | Mar 28 | Opera before 11.62 allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog Affected: through 11.61; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2012-1003 | – | Feb 7 | Multiple integer overflows in Opera 11.60 and earlier allow remote attackers to cause a denial of service (application crash) via a large integer argument to the (1) Int32Array,… Affected: through 11.60; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-4690 | – | Dec 7 | Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote… Affected: through 11.60 |
| CVE-2011-4687 | – | Dec 7 | Opera before 11.60 allows remote attackers to cause a denial of service (CPU and memory consumption) via unspecified content on a web page, as demonstrated by a page under the… Affected: through 11.60; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-4686 | – | Dec 7 | Unspecified vulnerability in the Web Workers implementation in Opera before 11.60 allows remote attackers to cause a denial of service (application crash) via unknown vectors Affected: through 11.60; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-4685 | – | Dec 7 | Dragonfly in Opera before 11.60 allows remote attackers to cause a denial of service (application crash) via unspecified content on a web page, as demonstrated by forbes.com Affected: through 11.60; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-4684 | – | Dec 7 | Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corner cases." Affected: through 11.60; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-4683 | – | Dec 7 | Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe issue." Affected: through 11.60; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-4682 | – | Dec 7 | The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Origin Policy via vectors related to… Affected: through 11.60; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-4681 | – | Dec 7 | Opera before 11.60 does not properly consider the number of Affected: through 11.60; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2010-5072 | – | Dec 7 | The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote… Affected: 10.50 |
| CVE-2010-5068 | – | Dec 7 | The Cascading Style Sheets (CSS) implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information… Affected: 10.50 |
| CVE-2011-3388 | – | Sep 6 | Opera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted via unspecified actions related to Extended Validation and loading content from… Affected: through 11.50; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-3389 | – | Sep 6 | The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data… Affected: All versions, or not specified |
| CVE-2008-7297 | – | Aug 9 | Opera cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a… Affected: All versions, or not specified |
| CVE-2011-2641 | – | Jul 1 | Opera 11.11 allows remote attackers to cause a denial of service (application crash) by setting the FACE attribute of a FONT element within an IFRAME element after changing the… Affected: 11.11 |
| CVE-2011-2640 | – | Jul 1 | Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via an HTML document that has an empty parameter value for an embedded Java applet Affected: through 11.10; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2639 | – | Jul 1 | Opera before 11.10 does not properly handle hidden animated GIF images, which allows remote attackers to cause a denial of service (CPU consumption) via an image file that… Affected: through 11.10; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2638 | – | Jul 1 | Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by… Affected: through 11.10; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2637 | – | Jul 1 | Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by… Affected: through 11.10; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2636 | – | Jul 1 | Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by a… Affected: through 11.10; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2635 | – | Jul 1 | The Cascading Style Sheets (CSS) implementation in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via vectors involving use of the… Affected: through 11.10; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2634 | – | Jul 1 | Opera before 11.10 allows remote attackers to hijack (1) searches and (2) customizations via unspecified third party applications Affected: through 11.10; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2633 | – | Jul 1 | Unspecified vulnerability in Opera before 11.11 allows remote attackers to cause a denial of service (application crash) via vectors involving a Certificate Revocation List (CRL)… Affected: through 11.10; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2632 | – | Jul 1 | Opera before 11.11 does not properly handle destruction of a Silverlight instance, which allows remote attackers to cause a denial of service (application crash) via a web page,… Affected: through 11.10; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2631 | – | Jul 1 | The Cascading Style Sheets (CSS) implementation in Opera before 11.11 does not properly handle the column-count property, which allows remote attackers to cause a denial of… Affected: through 11.10; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2630 | – | Jul 1 | Opera before 11.11 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web page that is not properly handled during a reload… Affected: through 11.10; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2629 | – | Jul 1 | Unspecified vulnerability in Opera before 11.11 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by… Affected: through 11.10; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2628 | – | Jul 1 | Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Affected: through 11.10; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2627 | – | Jul 1 | Unspecified vulnerability in the DOM implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown content on a web… Affected: through 11.50; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2626 | – | Jul 1 | Opera before 11.50 allows remote attackers to cause a denial of service (application crash) by using "injected script" to set the SRC attribute of an IFRAME element Affected: through 11.50; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2625 | – | Jul 1 | Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a SELECT element that contains many OPTION elements Affected: through 11.50; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2624 | – | Jul 1 | Opera before 11.50 allows user-assisted remote attackers to cause a denial of service (application hang) via a large table, which is not properly handled during a print preview Affected: through 11.50; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2623 | – | Jul 1 | Unspecified vulnerability in the SVG BiDi implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash or hang) via unknown vectors Affected: through 11.50; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2622 | – | Jul 1 | Unspecified vulnerability in the Web Workers implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown vectors Affected: through 11.50; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2621 | – | Jul 1 | Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors related to form layout Affected: through 11.50; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2620 | – | Jul 1 | Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors involving SVG animation Affected: through 11.50; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2619 | – | Jul 1 | Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a gradient with many stops, related to the implementation of CANVAS elements, SVG,… Affected: through 11.50; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2618 | – | Jul 1 | Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via web script that moves a (1) AUDIO element or (2) VIDEO element between windows Affected: through 11.50; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2617 | – | Jul 1 | Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors related to selecting a text node, and closed… Affected: through 11.50; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2616 | – | Jul 1 | Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (memory consumption) via unknown content on a web page, as demonstrated by… Affected: through 11.50; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2011-2615 | – | Jul 1 | Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application hang) via unknown content on a web page, as demonstrated by… Affected: through 11.50; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |