Vulnerabilities (CVE)

Filtered by vendor Opera Subscribe
Filtered by product Opera Browser
Total 285 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-3557 1 Opera 1 Opera Browser 2025-04-11 5.0 MEDIUM N/A
Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive information via a crafted web site.
CVE-2013-1489 5 Google, Microsoft, Mozilla and 2 more 6 Chrome, Internet Explorer, Firefox and 3 more 2025-04-11 10.0 HIGH N/A
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka "Issue 53" and the "Java Security Slider" vulnerability.
CVE-2010-4045 1 Opera 1 Opera Browser 2025-04-11 9.3 HIGH N/A
Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote attackers to spoof the Address Bar, conduct cross-site scripting (XSS) attacks, and possibly execute arbitrary code by leveraging the ability of a script to interact with a web page from (1) a different domain or (2) a different security context.
CVE-2012-6460 1 Opera 1 Opera Browser 2025-04-11 5.0 MEDIUM N/A
Opera before 11.67 and 12.x before 12.02 allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execution of arbitrary programs, via a crafted web site.
CVE-2011-1337 1 Opera 1 Opera Browser 2025-04-11 4.3 MEDIUM N/A
Opera before 11.50 allows remote attackers to cause a denial of service (disk consumption) via invalid URLs that trigger creation of error pages.
CVE-2010-4050 1 Opera 1 Opera Browser 2025-04-11 4.3 MEDIUM N/A
Opera before 10.63 allows remote attackers to cause a denial of service (memory corruption) by referencing an SVG document in an IMG element.
CVE-2010-2666 3 Apple, Microsoft, Opera 3 Mac Os X, Windows, Opera Browser 2025-04-11 9.3 HIGH N/A
Opera before 10.54 on Windows and Mac OS X does not properly enforce permission requirements for widget filesystem access and directory selection, which allows user-assisted remote attackers to create or modify arbitrary files, and consequently execute arbitrary code, via widget File I/O operations.
CVE-2013-3210 1 Opera 1 Opera Browser 2025-04-11 5.0 MEDIUM N/A
Opera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows remote attackers to obtain sensitive information by leveraging control of a different web site in the same top-level domain.
CVE-2012-1926 1 Opera 1 Opera Browser 2025-04-11 5.0 MEDIUM N/A
Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information.
CVE-2013-3211 1 Opera 1 Opera Browser 2025-04-11 10.0 HIGH N/A
Unspecified vulnerability in Opera before 12.15 has unknown impact and attack vectors, related to a "moderately severe issue."
CVE-2012-1924 1 Opera 1 Opera Browser 2025-04-11 6.8 MEDIUM N/A
Opera before 11.62 allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog.
CVE-2010-2421 1 Opera 1 Opera Browser 2025-04-11 10.0 HIGH N/A
Multiple unspecified vulnerabilities in Opera before 10.54 have unknown impact and attack vectors related to (1) "extremely severe," (2) "highly severe," (3) "moderately severe," and (4) "less severe" issues.
CVE-2011-4687 1 Opera 1 Opera Browser 2025-04-11 5.0 MEDIUM N/A
Opera before 11.60 allows remote attackers to cause a denial of service (CPU and memory consumption) via unspecified content on a web page, as demonstrated by a page under the cisco.com home page.
CVE-2010-4048 1 Opera 1 Opera Browser 2025-04-11 4.3 MEDIUM N/A
Opera before 10.63 allows user-assisted remote web servers to cause a denial of service (application crash) by sending a redirect during the saving of a file.
CVE-2011-0685 1 Opera 1 Opera Browser 2025-04-11 2.1 LOW N/A
The Delete Private Data feature in Opera before 11.01 does not properly implement the "Clear all email account passwords" option, which might allow physically proximate attackers to access an e-mail account via an unattended workstation.
CVE-2010-4047 1 Opera 1 Opera Browser 2025-04-11 4.3 MEDIUM N/A
Opera before 10.63 does not properly select the security context of JavaScript code associated with an error page, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.
CVE-2011-0450 2 Microsoft, Opera 2 Windows, Opera Browser 2025-04-11 7.6 HIGH N/A
The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname of the filesystem-viewing application, which allows user-assisted remote attackers to execute arbitrary code via a crafted web site that hosts an executable file.
CVE-2011-2631 1 Opera 1 Opera Browser 2025-04-11 5.0 MEDIUM N/A
The Cascading Style Sheets (CSS) implementation in Opera before 11.11 does not properly handle the column-count property, which allows remote attackers to cause a denial of service (infinite repaint loop and application hang) via a web page, as demonstrated by an unspecified Wikipedia page.
CVE-2014-0815 2 Google, Opera 2 Android, Opera Browser 2025-04-11 4.3 MEDIUM N/A
The intent: URL implementation in Opera before 18 on Android allows attackers to read local files by leveraging an interaction error, as demonstrated by reading stored cookies.
CVE-2012-6467 1 Opera 1 Opera Browser 2025-04-11 4.3 MEDIUM N/A
Opera before 12.10 follows Internet shortcuts that are referenced by a (1) IMG element or (2) other inline element, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site, as exploited in the wild in November 2012.