Vulnerabilities (CVE)

Filtered by vendor Opera Subscribe
Total 311 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-2609 1 Opera 1 Opera Browser 2023-12-10 4.3 MEDIUM N/A
Opera before 11.50 does not properly restrict data: URIs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.
CVE-2011-2628 1 Opera 1 Opera Browser 2023-12-10 10.0 HIGH N/A
Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to page unload.
CVE-2011-4682 1 Opera 1 Opera Browser 2023-12-10 6.4 MEDIUM N/A
The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Origin Policy via vectors related to variables on different web sites.
CVE-2011-2631 1 Opera 1 Opera Browser 2023-12-10 5.0 MEDIUM N/A
The Cascading Style Sheets (CSS) implementation in Opera before 11.11 does not properly handle the column-count property, which allows remote attackers to cause a denial of service (infinite repaint loop and application hang) via a web page, as demonstrated by an unspecified Wikipedia page.
CVE-2011-4685 1 Opera 1 Opera Browser 2023-12-10 5.0 MEDIUM N/A
Dragonfly in Opera before 11.60 allows remote attackers to cause a denial of service (application crash) via unspecified content on a web page, as demonstrated by forbes.com.
CVE-2011-2617 1 Opera 1 Opera Browser 2023-12-10 5.0 MEDIUM N/A
Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors related to selecting a text node, and closed pop-up windows, removed pop-up windows, and IFRAME elements.
CVE-2010-5068 1 Opera 1 Opera Browser 2023-12-10 4.3 MEDIUM N/A
The Cascading Style Sheets (CSS) implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264.
CVE-2011-2626 1 Opera 1 Opera Browser 2023-12-10 5.0 MEDIUM N/A
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) by using "injected script" to set the SRC attribute of an IFRAME element.
CVE-2010-2663 1 Opera 1 Opera Browser 2023-12-10 4.3 MEDIUM N/A
Opera before 10.60 allows remote attackers to cause a denial of service (application hang) via an ended event handler that changes the SRC attribute of an AUDIO element.
CVE-2010-2121 1 Opera 1 Opera Browser 2023-12-10 4.3 MEDIUM N/A
Opera 9.52 allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs.
CVE-2011-2624 1 Opera 1 Opera Browser 2023-12-10 4.3 MEDIUM N/A
Opera before 11.50 allows user-assisted remote attackers to cause a denial of service (application hang) via a large table, which is not properly handled during a print preview.
CVE-2012-1003 1 Opera 1 Opera Browser 2023-12-10 5.0 MEDIUM N/A
Multiple integer overflows in Opera 11.60 and earlier allow remote attackers to cause a denial of service (application crash) via a large integer argument to the (1) Int32Array, (2) Float32Array, (3) Float64Array, (4) Uint32Array, (5) Int16Array, or (6) ArrayBuffer function. NOTE: the vendor reportedly characterizes this as "a stability issue, not a security issue."
CVE-2010-4585 1 Opera 1 Opera Browser 2023-12-10 5.0 MEDIUM N/A
Unspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote attackers to cause a denial of service (application crash) by triggering an Opera Unite update.
CVE-2011-2638 1 Opera 1 Opera Browser 2023-12-10 5.0 MEDIUM N/A
Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by games on zylom.com.
CVE-2011-2629 1 Opera 1 Opera Browser 2023-12-10 5.0 MEDIUM N/A
Unspecified vulnerability in Opera before 11.11 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by www.falk.de.
CVE-2010-4046 1 Opera 1 Opera Browser 2023-12-10 4.3 MEDIUM N/A
Opera before 10.63 does not properly verify the origin of video content, which allows remote attackers to obtain sensitive information by using a video stream as HTML5 canvas content.
CVE-2010-2576 1 Opera 1 Opera Browser 2023-12-10 6.8 MEDIUM N/A
Opera before 10.61 does not properly suppress clicks on download dialogs that became visible after a recent tab change, which allows remote attackers to conduct clickjacking attacks, and consequently execute arbitrary code, via vectors involving (1) closing a tab or (2) hiding a tab, a related issue to CVE-2005-2407.
CVE-2011-2619 1 Opera 1 Opera Browser 2023-12-10 5.0 MEDIUM N/A
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a gradient with many stops, related to the implementation of CANVAS elements, SVG, and Cascading Style Sheets (CSS).
CVE-2011-2618 1 Opera 1 Opera Browser 2023-12-10 5.0 MEDIUM N/A
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via web script that moves a (1) AUDIO element or (2) VIDEO element between windows.
CVE-2010-1310 1 Opera 1 Opera Browser 2023-12-10 5.0 MEDIUM N/A
Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents of other pages.