Filtered by vendor Opera
Subscriptions
Filtered by product Opera Browser
Subscriptions
Total
285 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2010-2662 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 10.60 allows remote attackers to bypass the popup blocker via a javascript: URL and a "fake click." | ||||
CVE-2010-2663 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 10.60 allows remote attackers to cause a denial of service (application hang) via an ended event handler that changes the SRC attribute of an AUDIO element. | ||||
CVE-2011-0681 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
The Cascading Style Sheets (CSS) Extensions for XML implementation in Opera before 11.01 recognizes links to javascript: URLs in the -o-link property, which makes it easier for remote attackers to bypass CSS filtering via a crafted URL. | ||||
CVE-2010-3021 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Unspecified vulnerability in Opera before 10.61 allows remote attackers to cause a denial of service (CPU consumption and application hang) via an animated PNG image. | ||||
CVE-2010-4049 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 10.63 allows remote attackers to cause a denial of service (application crash) via a Flash movie with a transparent Window Mode (aka wmode) property, which is not properly handled during navigation away from the containing HTML document. | ||||
CVE-2010-4050 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 10.63 allows remote attackers to cause a denial of service (memory corruption) by referencing an SVG document in an IMG element. | ||||
CVE-2010-5068 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
The Cascading Style Sheets (CSS) implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264. | ||||
CVE-2010-1310 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents of other pages. | ||||
CVE-2012-1003 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Multiple integer overflows in Opera 11.60 and earlier allow remote attackers to cause a denial of service (application crash) via a large integer argument to the (1) Int32Array, (2) Float32Array, (3) Float64Array, (4) Uint32Array, (5) Int16Array, or (6) ArrayBuffer function. NOTE: the vendor reportedly characterizes this as "a stability issue, not a security issue." | ||||
CVE-2011-0685 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
The Delete Private Data feature in Opera before 11.01 does not properly implement the "Clear all email account passwords" option, which might allow physically proximate attackers to access an e-mail account via an unattended workstation. | ||||
CVE-2011-2619 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a gradient with many stops, related to the implementation of CANVAS elements, SVG, and Cascading Style Sheets (CSS). | ||||
CVE-2011-2618 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via web script that moves a (1) AUDIO element or (2) VIDEO element between windows. | ||||
CVE-2011-2629 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Unspecified vulnerability in Opera before 11.11 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by www.falk.de. | ||||
CVE-2013-1639 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request. | ||||
CVE-2011-2631 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
The Cascading Style Sheets (CSS) implementation in Opera before 11.11 does not properly handle the column-count property, which allows remote attackers to cause a denial of service (infinite repaint loop and application hang) via a web page, as demonstrated by an unspecified Wikipedia page. | ||||
CVE-2011-2616 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (memory consumption) via unknown content on a web page, as demonstrated by test262.ecmascript.org. | ||||
CVE-2011-2639 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera before 11.10 does not properly handle hidden animated GIF images, which allows remote attackers to cause a denial of service (CPU consumption) via an image file that triggers continual repaints. | ||||
CVE-2011-2623 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Unspecified vulnerability in the SVG BiDi implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash or hang) via unknown vectors. | ||||
CVE-2011-2641 | 1 Opera | 1 Opera Browser | 2025-04-11 | N/A |
Opera 11.11 allows remote attackers to cause a denial of service (application crash) by setting the FACE attribute of a FONT element within an IFRAME element after changing the SRC attribute of this IFRAME element to an about:blank value. | ||||
CVE-2010-1349 | 2 Microsoft, Opera | 2 Windows, Opera Browser | 2025-04-11 | N/A |
Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflow. |