Vulnerabilities (CVE)

Filtered by vendor Opera Subscribe
Filtered by product Opera Browser
Total 285 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-2641 1 Opera 1 Opera Browser 2024-02-28 5.0 MEDIUM N/A
Opera 11.11 allows remote attackers to cause a denial of service (application crash) by setting the FACE attribute of a FONT element within an IFRAME element after changing the SRC attribute of this IFRAME element to an about:blank value.
CVE-2010-4050 1 Opera 1 Opera Browser 2024-02-28 4.3 MEDIUM N/A
Opera before 10.63 allows remote attackers to cause a denial of service (memory corruption) by referencing an SVG document in an IMG element.
CVE-2010-3019 1 Opera 1 Opera Browser 2024-02-28 9.3 HIGH N/A
Heap-based buffer overflow in Opera before 10.61 allows remote attackers to execute arbitrary code or cause a denial of service (application crash or hang) via vectors related to HTML5 canvas painting operations that occur during the application of transformations.
CVE-2011-2623 1 Opera 1 Opera Browser 2024-02-28 5.0 MEDIUM N/A
Unspecified vulnerability in the SVG BiDi implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash or hang) via unknown vectors.
CVE-2011-2619 1 Opera 1 Opera Browser 2024-02-28 5.0 MEDIUM N/A
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a gradient with many stops, related to the implementation of CANVAS elements, SVG, and Cascading Style Sheets (CSS).
CVE-2010-2660 4 Apple, Microsoft, Opera and 1 more 4 Mac Os X, Windows, Opera Browser and 1 more 2024-02-28 4.3 MEDIUM N/A
Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph characters in domain names, which makes it easier for remote attackers to spoof IDN domains via unspecified choices of characters.
CVE-2011-4690 1 Opera 1 Opera Browser 2024-02-28 5.0 MEDIUM N/A
Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code.
CVE-2011-0681 1 Opera 1 Opera Browser 2024-02-28 4.3 MEDIUM N/A
The Cascading Style Sheets (CSS) Extensions for XML implementation in Opera before 11.01 recognizes links to javascript: URLs in the -o-link property, which makes it easier for remote attackers to bypass CSS filtering via a crafted URL.
CVE-2011-4686 1 Opera 1 Opera Browser 2024-02-28 5.0 MEDIUM N/A
Unspecified vulnerability in the Web Workers implementation in Opera before 11.60 allows remote attackers to cause a denial of service (application crash) via unknown vectors.
CVE-2011-2620 1 Opera 1 Opera Browser 2024-02-28 5.0 MEDIUM N/A
Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors involving SVG animation.
CVE-2011-0686 1 Opera 1 Opera Browser 2024-02-28 5.0 MEDIUM N/A
Unspecified vulnerability in Opera before 11.01 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by vkontakte.ru.
CVE-2011-4684 1 Opera 1 Opera Browser 2024-02-28 10.0 HIGH N/A
Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corner cases."
CVE-2010-2663 1 Opera 1 Opera Browser 2024-02-28 4.3 MEDIUM N/A
Opera before 10.60 allows remote attackers to cause a denial of service (application hang) via an ended event handler that changes the SRC attribute of an AUDIO element.
CVE-2011-2612 1 Opera 1 Opera Browser 2024-02-28 5.0 MEDIUM N/A
Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by progorod.ru.
CVE-2010-2662 1 Opera 1 Opera Browser 2024-02-28 4.3 MEDIUM N/A
Opera before 10.60 allows remote attackers to bypass the popup blocker via a javascript: URL and a "fake click."
CVE-2011-2618 1 Opera 1 Opera Browser 2024-02-28 5.0 MEDIUM N/A
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via web script that moves a (1) AUDIO element or (2) VIDEO element between windows.
CVE-2011-2624 1 Opera 1 Opera Browser 2024-02-28 4.3 MEDIUM N/A
Opera before 11.50 allows user-assisted remote attackers to cause a denial of service (application hang) via a large table, which is not properly handled during a print preview.
CVE-2010-4586 1 Opera 1 Opera Browser 2024-02-28 10.0 HIGH N/A
The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, possibly a related issue to CVE-2010-4508.
CVE-2011-2633 1 Opera 1 Opera Browser 2024-02-28 5.0 MEDIUM N/A
Unspecified vulnerability in Opera before 11.11 allows remote attackers to cause a denial of service (application crash) via vectors involving a Certificate Revocation List (CRL) file, as demonstrated by the multicert-ca-02.crl file.
CVE-2011-2626 1 Opera 1 Opera Browser 2024-02-28 5.0 MEDIUM N/A
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) by using "injected script" to set the SRC attribute of an IFRAME element.