Opera Software - vulnerabilities (CVEs)
15 CVEs in 2 products, 0 in the last 30 days, newest from 2005-02-08.
Products
- Opera Web Browser - 13 CVEs
- Opera - 2 CVEs
Newest CVEs of Opera Software
- CVE-2005-0233 - CVSS 7.5 (high), 2005-02-08: The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode…
- CVE-2002-2414 - CVSS 4.3 (medium), 2002-12-31: Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site…
- CVE-2002-2358 - CVSS 4.3 (medium), 2002-12-31: Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or…
- CVE-2002-2312 - CVSS 5.8 (medium), 2002-12-31: Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1) event.ctrlKey or (2)…
- CVE-2002-2332 - CVSS 5 (medium), 2002-12-31: Buffer overflow in Opera 6.01 allows remote attackers to cause a denial of service (crash) via an IMG tag with large width and height attributes.
- CVE-2002-2311 - CVSS 6.4 (medium), 2002-12-31: Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the…
- CVE-2002-1091 - CVSS 7.5 (high), 2002-10-04: Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width.
- CVE-2002-0898 - CVSS 5 (medium), 2002-10-04: Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the client, via an input type=file tag…
- CVE-2002-0783 - CVSS 7.5 (high), 2002-08-12: Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or…
- CVE-2002-0270 - CVSS 4.3 (medium), 2002-05-29: Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML document even when its MIME Content-Type is…
- CVE-2002-0243 - CVSS 7.5 (high), 2002-05-29: Cross-site scripting vulnerability in Opera 6.0 and earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, whose output from…
- CVE-2001-1491 - CVSS 5 (medium), 2001-12-31: Opera 5.11 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images.
- CVE-2001-0898 - CVSS 5 (medium), 2001-11-15: Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout…
- CVE-2001-1245 - CVSS 5 (medium), 2001-07-09: Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of service, possibly with a header whose…
- CVE-1999-1283 - CVSS 5 (medium), 1998-08-14: Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra / in the http:// tag.
