Filtered by vendor Opera
Subscriptions
Filtered by product Opera Browser
Subscriptions
Total
285 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2010-4045 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote attackers to spoof the Address Bar, conduct cross-site scripting (XSS) attacks, and possibly execute arbitrary code by leveraging the ability of a script to interact with a web page from (1) a different domain or (2) a different security context. | ||||
CVE-2010-4046 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 10.63 does not properly verify the origin of video content, which allows remote attackers to obtain sensitive information by using a video stream as HTML5 canvas content. | ||||
CVE-2010-4049 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 10.63 allows remote attackers to cause a denial of service (application crash) via a Flash movie with a transparent Window Mode (aka wmode) property, which is not properly handled during navigation away from the containing HTML document. | ||||
CVE-2010-4050 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 10.63 allows remote attackers to cause a denial of service (memory corruption) by referencing an SVG document in an IMG element. | ||||
CVE-2010-4580 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 11.00 does not clear WAP WML form fields after manual navigation to a new web site, which allows remote attackers to obtain sensitive information via an input field that has the same name as an input field on a previously visited web site. | ||||
CVE-2010-4581 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue." | ||||
CVE-2011-0683 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 11.01 does not properly restrict the use of opera: URLs, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site. | ||||
CVE-2011-0685 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
The Delete Private Data feature in Opera before 11.01 does not properly implement the "Clear all email account passwords" option, which might allow physically proximate attackers to access an e-mail account via an unattended workstation. | ||||
CVE-2011-1824 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
The VEGAOpBitmap::AddLine function in Opera before 10.61 does not properly initialize memory during processing of the SIZE attribute of a SELECT element, which allows remote attackers to trigger an invalid memory write operation, and consequently cause a denial of service (application crash) or possibly execute arbitrary code, via a large integer attribute value. | ||||
CVE-2011-2619 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a gradient with many stops, related to the implementation of CANVAS elements, SVG, and Cascading Style Sheets (CSS). | ||||
CVE-2011-2611 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Unspecified vulnerability in the printing functionality in Opera before 11.50 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web page. | ||||
CVE-2011-2612 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by progorod.ru. | ||||
CVE-2013-1639 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request. | ||||
CVE-2011-2615 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application hang) via unknown content on a web page, as demonstrated by domiteca.com. | ||||
CVE-2011-2622 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Unspecified vulnerability in the Web Workers implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown vectors. | ||||
CVE-2011-2623 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Unspecified vulnerability in the SVG BiDi implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash or hang) via unknown vectors. | ||||
CVE-2011-2625 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a SELECT element that contains many OPTION elements. | ||||
CVE-2011-2627 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Unspecified vulnerability in the DOM implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by live.com. | ||||
CVE-2011-2634 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 11.10 allows remote attackers to hijack (1) searches and (2) customizations via unspecified third party applications. | ||||
CVE-2010-1310 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents of other pages. |