OB
Product
Opera Browser
282
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 4Low 1
Watch
Add Opera Browser to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-1762 | – | Apr 12 | Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element,… Affected: through 9.26; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2008-1081 | – | Feb 29 | Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comments, which are treated as script when the user displays the… Affected: through 9.25; 1.00; 2.00; 2.10; 2.10; 2.10; +34 more |
| CVE-2008-1082 | – | Feb 29 | Opera before 9.26 allows remote attackers to "bypass sanitization filters" and conduct cross-site scripting (XSS) attacks via crafted attribute values in an XML document, which… Affected: through 9.25; 1.00; 2.00; 2.10; 2.10; 2.10; +34 more |
| CVE-2008-1080 | – | Feb 29 | Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename into a file input Affected: through 9.25; 1.00; 2.00; 2.10; 2.10; 2.10; +34 more |
| CVE-2007-6521 | – | Dec 24 | Unspecified vulnerability in Opera before 9.25 allows remote attackers to execute arbitrary code via crafted TLS certificates Affected: through 9.24; 1.00; 2.00; 2.10; 2.10; 2.10; +34 more |
| CVE-2007-6524 | – | Dec 24 | Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap (BMP) file, as demonstrated using a CANVAS element and JavaScript in… Affected: through 9.24; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2007-6523 | – | Dec 24 | Algorithmic complexity vulnerability in Opera 9.50 beta and 9.x before 9.25 allows remote attackers to cause a denial of service (CPU consumption) via a crafted bitmap (BMP) file… Affected: 9.0; 9.0; 9.0; 9.01; 9.02; 9.10; +8 more |
| CVE-2007-6522 | – | Dec 24 | The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other… Affected: through 9.24; 1.00; 2.00; 2.10; 2.10; 2.10; +34 more |
| CVE-2007-6520 | – | Dec 24 | Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins Affected: through 9.24; 1.00; 2.00; 2.10; 2.10; 2.10; +34 more |
| CVE-2007-5476 | – | Oct 18 | Unspecified vulnerability in Adobe Flash Player 9.0.47.0 and earlier, when running on Opera before 9.24 on Mac OS X, has unknown "Highly Severe" impact and unknown attack vectors Affected: through 9.23; 1.00; 2.00; 2.10; 2.10; 2.10; +34 more |
| CVE-2007-5541 | – | Oct 18 | Unspecified vulnerability in Opera before 9.24, when using an "external" newsgroup or e-mail client, allows remote attackers to execute arbitrary commands via unknown vectors Affected: through 9.23; 1.00; 2.00; 2.10; 2.10; 2.10; +34 more |
| CVE-2007-5540 | – | Oct 18 | Unspecified vulnerability in Opera before 9.24 allows remote attackers to overwrite functions on pages from other domains and bypass the same-origin policy via unknown vectors Affected: through 9.23; 1.00; 2.00; 2.10; 2.10; 2.10; +34 more |
| CVE-2007-5276 | – | Oct 8 | Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port… Affected: 9.0 |
| CVE-2007-4944 | – | Sep 18 | The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process a new pattern, which allows remote… Affected: 9.0; 9.0; 9.0; 9.01; 9.02; 9.10; +4 more |
| CVE-2007-4367 | – | Aug 15 | Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer." Affected: before 9.23 |
| CVE-2007-3929 | – | Jul 21 | Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file,… Affected: before 9.22 |
| CVE-2007-3819 | – | Jul 17 | Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being… Affected: 9.21 |
| CVE-2007-3142 | – | Jun 11 | Visual truncation vulnerability in Opera 9.21 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after… Affected: 9.21 |
| CVE-2007-2809 | – | May 22 | Buffer overflow in the transfer manager in Opera before 9.21 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted torrent file Affected: before 9.21 |
| CVE-2007-2274 | – | Apr 25 | The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU consumption and application crash) via a malformed torrent file Affected: 9.2 |
| CVE-2007-2022 | – | Apr 13 | Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information (browser keystrokes),… Affected: 5.0; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2007-1737 | – | Mar 28 | Opera 9.10 does not check URLs embedded in (1) object or (2) iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection Affected: 9.10 |
| CVE-2007-1563 | – | Mar 21 | The FTP protocol implementation in Opera 9.10 allows remote attackers to allows remote servers to force the client to connect to other servers, perform a proxied port scan, or… Affected: 9.10 |
| CVE-2007-1377 | – | Mar 10 | AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption)… Affected: 9.2 |
| CVE-2007-1115 | – | Feb 26 | The child frames in Opera 9 before 9.20 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag, which allows… Affected: 9.0; 9.0; 9.0; 9.01; 9.02; 9.10; +3 more |
| CVE-2006-6970 | – | Feb 7 | Opera 9.10 Final allows remote attackers to bypass the Fraud Protection mechanism by adding certain characters to the end of a domain name, as demonstrated by the "." and "/"… Affected: 9.10 |
| CVE-2007-0802 | – | Feb 7 | Mozilla Firefox 2.0.0.1 allows remote attackers to bypass the Phishing Protection mechanism by adding certain characters to the end of the domain name, as demonstrated by the "."… Affected: 9.10 |
| CVE-2006-6955 | – | Jan 29 | Opera allows remote attackers to cause a denial of service (application crash) via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723 Affected: 5.0; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2007-0127 | – | Jan 9 | The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatrix request, which allows remote attackers to execute… Affected: through 9.02; 1.00; 2.00; 2.10; 2.10; 2.10; +34 more |
| CVE-2007-0126 | – | Jan 9 | Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT)… Affected: 9.02 |
| CVE-2006-4819 | – | Oct 17 | Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag (long link address) Affected: 9.0; 9.01 |
| CVE-2006-3945 | – | Jul 31 | The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the background property of a DHTML element to a long… Affected: 9.0 |
| CVE-2006-3353 | – | Jul 6 | Opera 9 allows remote attackers to cause a denial of service (crash) via a crafted web page that triggers an out-of-bounds memory access, related to an iframe and JavaScript that… Affected: before 9.01 |
| CVE-2006-3331 | – | Jun 30 | Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an SSL-enabled website, which allows remote attackers to spoof a trusted SSL… Affected: before 9.0 |
| CVE-2006-3199 | – | Jun 23 | Opera 9 allows remote attackers to cause a denial of service (crash) via an A tag with an href attribute with a URL containing a long hostname, which triggers an out-of-bounds… Affected: 9.0 |
| CVE-2006-3198 | – | Jun 23 | Integer overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via a JPEG image with large height and width values, which causes less memory to be… Affected: through 8.5.4 |
| CVE-2006-1834 | – | Apr 19 | Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check Affected: through 8.53; 1.00; 2.00; 2.10; 2.10; 2.10; +34 more |
| CVE-2005-4718 | – | Dec 31 | Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a "content: url(0);" style attribute, a "bodyA" tag, a… Affected: through 8.02 |
| CVE-2005-4210 | – | Dec 13 | Opera before 8.51, when running on Windows with Input Method Editor (IME) installed, allows remote attackers to cause a denial of service (persistent application crash) by… Affected: before 8.51 |
| CVE-2005-3946 | – | Dec 1 | Opera 8.50 allows remote attackers to cause a denial of service (crash) via a Java applet with a large string argument to the removeMember JNI method for the com.opera.JSObject… Affected: 8.50 |
| CVE-2005-3750 | – | Nov 22 | Opera before 8.51 on Linux and Unix systems allows remote attackers to execute arbitrary code via shell metacharacters (backticks) in a URL that another product provides in a… Affected: before 8.51 |
| CVE-2005-3699 | – | Nov 21 | Opera Web Browser 8.50 and 8.0 through 8.0.2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the… Affected: 8.0; 8.01; 8.02; 8.50 |
| CVE-2005-3059 | – | Sep 26 | Multiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and attack vectors, related to (1) " handling of must-revalidate cache directive for… Affected: 8.50 |
| CVE-2005-3041 | – | Sep 22 | Unspecified "drag-and-drop vulnerability" in Opera Web Browser before 8.50 on Windows allows "unintentional file uploads." Affected: before 8.50 |
| CVE-2005-3007 | – | Sep 21 | Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), which might allow remote attackers to trick users into… Affected: before 8.50 |
| CVE-2005-3006 | – | Sep 21 | The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote attackers to inject arbitrary web… Affected: through 8.02; 1.00; 2.00; 2.10; 2.10; 2.10; +34 more |
| CVE-2005-2407 | – | Aug 1 | A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malicious new window above a file download dialog box, then… Affected: through 8.01 |
| CVE-2005-2406 | – | Aug 1 | Opera 8.01 allows remote attackers to conduct cross-site scripting (XSS) attacks or modify which files are uploaded by tricking a user into dragging an image that is a… Affected: 8.01 |
| CVE-2005-2405 | – | Aug 1 | Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote… Affected: 8.01 |
| CVE-2005-2309 | – | Jul 19 | Opera 8.01 allows remote attackers to cause a denial of service (CPU consumption) via a crafted JPEG image, as demonstrated using random.jpg Affected: 8.01 |