OW
Product
Opera Web Browser
13
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Opera Web Browser to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2005-0233 | – | Feb 8 | The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names… Affected: 7.54 |
| CVE-2002-2358 | – | Dec 31 | Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title… Affected: 6.0; 6.0; 6.0.1; 6.0.1; 6.0.1; 6.0.2; +2 more |
| CVE-2002-2332 | – | Dec 31 | Buffer overflow in Opera 6.01 allows remote attackers to cause a denial of service (crash) via an IMG tag with large width and height attributes Affected: 6.0.1 |
| CVE-2002-2311 | – | Dec 31 | Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1)… Affected: 6.0.1; 6.0.1; 6.0.1 |
| CVE-2002-0898 | – | Oct 4 | Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the client, via an input type=file tag whose value contains a… Affected: 6.0.1; 6.0.2 |
| CVE-2002-1091 | – | Oct 4 | Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width Affected: 5.12; 6.0; 6.0.1 |
| CVE-2002-0783 | – | Aug 12 | Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or iframe to a… Affected: 5.12; 5.12; 6.0; 6.0; 6.0.1; 6.0.1 |
| CVE-2002-0270 | – | May 29 | Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML document even when its MIME Content-Type is text/plain, which… Affected: 9.10 |
| CVE-2002-0243 | – | May 29 | Cross-site scripting vulnerability in Opera 6.0 and earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, whose output from the remote server is… Affected: through 6.0 |
| CVE-2001-1491 | – | Dec 31 | Opera 5.11 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images Affected: 5.1.1 |
| CVE-2001-0898 | – | Nov 15 | Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to (1) access data… Affected: through 6.0 |
| CVE-2001-1245 | – | Jul 9 | Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of service, possibly with a header whose value is the same as… Affected: 5.0 |
| CVE-1999-1283 | – | Aug 14 | Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra / in the http:// tag Affected: 3.2.1 |
Showing 13