CveMateVulnerability intelligence

Opera Browser vulnerabilities, page 4

279 vulnerabilities

Known vulnerabilities in Opera Browser, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2005-4718operaopera_browser20y ago15-02-2006 11:00

Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a "content: url(0);" style attribute, a "bodyA" tag, a long string, and a "u" tag with a long attribute, as demonstrated by opera.html; and (2) a BGSOUND element with a "margin:-99;" STYLE attribute.CVE-2005-3946operaopera_browser20y ago01-12-2005 11:00

Opera 8.50 allows remote attackers to cause a denial of service (crash) via a Java applet with a large string argument to the removeMember JNI method for the com.opera.JSObject class.CVE-2005-3699operaopera_browser20y ago21-11-2005 11:00

Opera Web Browser 8.50 and 8.0 through 8.0.2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site.CVE-2005-3006operaopera_browser21y ago21-09-2005 04:00

The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote attackers to inject arbitrary web script and spoof attachment filenames.CVE-2005-3041operaopera_browser21y ago22-09-2005 04:00

Unspecified "drag-and-drop vulnerability" in Opera Web Browser before 8.50 on Windows allows "unintentional file uploads."CVE-2005-3750operaopera_browser20y ago22-11-2005 19:00

Opera before 8.51 on Linux and Unix systems allows remote attackers to execute arbitrary code via shell metacharacters (backticks) in a URL that another product provides in a command line argument when launching Opera.CVE-2005-3007operaopera_browser21y ago21-09-2005 04:00

Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), which might allow remote attackers to trick users into processing dangerous content.CVE-2005-3059operaopera_browser21y ago26-09-2005 04:00

Multiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and attack vectors, related to (1) " handling of must-revalidate cache directive for HTTPS pages" or (2) a "display issue with cookie comment encoding."CVE-2008-2715operaopera_browser18y ago16-06-2008 22:00

Unspecified vulnerability in Opera before 9.5 allows remote attackers to read cross-domain images via HTML CANVAS elements that use the images as patterns.CVE-2008-2714operaopera_browser18y ago16-06-2008 22:00

Opera before 9.26 allows remote attackers to misrepresent web page addresses using "certain characters" that "cause the page address text to be misplaced."CVE-2008-2716operaopera_browser18y ago16-06-2008 22:00

Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks.CVE-2008-1081operaopera_browser18y ago29-02-2008 02:00

Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comments, which are treated as script when the user displays the image properties.CVE-2008-1082operaopera_browser18y ago29-02-2008 02:00

Opera before 9.26 allows remote attackers to "bypass sanitization filters" and conduct cross-site scripting (XSS) attacks via crafted attribute values in an XML document, which are not properly handled during DOM presentation.CVE-2008-1762operaopera_browser18y ago12-04-2008 20:00

Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption.CVE-2008-1080operaopera_browser18y ago29-02-2008 02:00

Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename into a file input.CVE-2008-4199operaopera_browser18y ago27-09-2008 00:00

Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."CVE-2008-4292operaopera_browser18y ago27-09-2008 00:00

Opera before 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown impact and attack vectors. NOTE: it is not clear whether this is a vulnerability, but the vendor included it in a security section of the advisory.CVE-2008-4196operaopera_browser18y ago27-09-2008 00:00

Cross-site scripting (XSS) vulnerability in Opera before 9.52 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2008-4694operaopera_browser18y ago23-10-2008 21:00

Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a redirect that specifies a crafted URL.CVE-2008-4200operaopera_browser18y ago27-09-2008 00:00

Opera before 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote attackers to change this field to display the URL of a page containing web script controlled by the attacker.