CveMateVulnerability intelligence

Opera vulnerabilities, page 4

303 vulnerabilities

Known vulnerabilities in Opera products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 7 products.

CVE-2005-0233mozillacamino+521y ago07-02-2005 05:00

The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.CVE-2005-0457operaopera_browser21y ago17-02-2005 05:00

Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious libraries into the PORTAGE_TMPDIR (portage) temporary directory.CVE-2005-0238debianepiphany-browser+421y ago07-02-2005 05:00

The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.CVE-2005-0456operaopera_browser21y ago17-02-2005 05:00

Opera 7.54 and earlier does not properly validate base64 encoded binary data in a data: (RFC 2397) URL, which causes the URL to be obscured in a download dialog, which may allow remote attackers to trick users into executing arbitrary code.CVE-2005-0235operaopera_browser21y ago07-02-2005 05:00

The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.CVE-2005-4210operaopera_browser20y ago13-12-2005 11:00

Opera before 8.51, when running on Windows with Input Method Editor (IME) installed, allows remote attackers to cause a denial of service (persistent application crash) by bookmarking a site with a long title.CVE-2005-4718operaopera_browser20y ago15-02-2006 11:00

Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a "content: url(0);" style attribute, a "bodyA" tag, a long string, and a "u" tag with a long attribute, as demonstrated by opera.html; and (2) a BGSOUND element with a "margin:-99;" STYLE attribute.CVE-2005-3946operaopera_browser20y ago01-12-2005 11:00

Opera 8.50 allows remote attackers to cause a denial of service (crash) via a Java applet with a large string argument to the removeMember JNI method for the com.opera.JSObject class.CVE-2005-3699operaopera_browser20y ago21-11-2005 11:00

Opera Web Browser 8.50 and 8.0 through 8.0.2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site.CVE-2005-3006operaopera_browser21y ago21-09-2005 04:00

The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote attackers to inject arbitrary web script and spoof attachment filenames.CVE-2005-3041operaopera_browser21y ago22-09-2005 04:00

Unspecified "drag-and-drop vulnerability" in Opera Web Browser before 8.50 on Windows allows "unintentional file uploads."CVE-2005-3750operaopera_browser20y ago22-11-2005 19:00

Opera before 8.51 on Linux and Unix systems allows remote attackers to execute arbitrary code via shell metacharacters (backticks) in a URL that another product provides in a command line argument when launching Opera.CVE-2005-3007operaopera_browser21y ago21-09-2005 04:00

Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), which might allow remote attackers to trick users into processing dangerous content.CVE-2005-3059operaopera_browser21y ago26-09-2005 04:00

Multiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and attack vectors, related to (1) " handling of must-revalidate cache directive for HTTPS pages" or (2) a "display issue with cookie comment encoding."CVE-2008-2715operaopera_browser18y ago16-06-2008 22:00

Unspecified vulnerability in Opera before 9.5 allows remote attackers to read cross-domain images via HTML CANVAS elements that use the images as patterns.CVE-2008-2714operaopera_browser18y ago16-06-2008 22:00

Opera before 9.26 allows remote attackers to misrepresent web page addresses using "certain characters" that "cause the page address text to be misplaced."CVE-2008-2716operaopera_browser18y ago16-06-2008 22:00

Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks.CVE-2008-1081operaopera_browser18y ago29-02-2008 02:00

Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comments, which are treated as script when the user displays the image properties.CVE-2008-1764operaopera18y ago12-04-2008 20:00

Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs."CVE-2008-1082operaopera_browser18y ago29-02-2008 02:00

Opera before 9.26 allows remote attackers to "bypass sanitization filters" and conduct cross-site scripting (XSS) attacks via crafted attribute values in an XML document, which are not properly handled during DOM presentation.