Vulnerabilities (CVE)

Filtered by vendor Opera Subscribe
Filtered by product Opera Browser
Total 284 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-4682 1 Opera 1 Opera Browser 2025-04-11 6.4 MEDIUM N/A
The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Origin Policy via vectors related to variables on different web sites.
CVE-2011-0687 1 Opera 1 Opera Browser 2025-04-11 4.3 MEDIUM N/A
Opera before 11.01 does not properly implement Wireless Application Protocol (WAP) dropdown lists, which allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted WAP document.
CVE-2013-1638 1 Opera 1 Opera Browser 2025-04-11 9.3 HIGH N/A
Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document.
CVE-2010-2121 1 Opera 1 Opera Browser 2025-04-11 4.3 MEDIUM N/A
Opera 9.52 allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs.
CVE-2011-2625 1 Opera 1 Opera Browser 2025-04-11 5.0 MEDIUM N/A
Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a SELECT element that contains many OPTION elements.
CVE-2010-2660 4 Apple, Microsoft, Opera and 1 more 4 Mac Os X, Windows, Opera Browser and 1 more 2025-04-11 4.3 MEDIUM N/A
Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph characters in domain names, which makes it easier for remote attackers to spoof IDN domains via unspecified choices of characters.
CVE-2011-2633 1 Opera 1 Opera Browser 2025-04-11 5.0 MEDIUM N/A
Unspecified vulnerability in Opera before 11.11 allows remote attackers to cause a denial of service (application crash) via vectors involving a Certificate Revocation List (CRL) file, as demonstrated by the multicert-ca-02.crl file.
CVE-2011-2613 1 Opera 1 Opera Browser 2025-04-11 5.0 MEDIUM N/A
The Array.prototype.join method in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a non-array object that contains initial holes.
CVE-2011-2616 1 Opera 1 Opera Browser 2025-04-11 5.0 MEDIUM N/A
Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (memory consumption) via unknown content on a web page, as demonstrated by test262.ecmascript.org.
CVE-2011-0685 1 Opera 1 Opera Browser 2025-04-11 2.1 LOW N/A
The Delete Private Data feature in Opera before 11.01 does not properly implement the "Clear all email account passwords" option, which might allow physically proximate attackers to access an e-mail account via an unattended workstation.
CVE-2010-4044 1 Opera 1 Opera Browser 2025-04-11 4.3 MEDIUM N/A
Opera before 10.63 does not ensure that the portion of a URL shown in the Address Bar contains the beginning of the URL, which allows remote attackers to spoof URLs by changing a window's size.
CVE-2011-2622 1 Opera 1 Opera Browser 2025-04-11 5.0 MEDIUM N/A
Unspecified vulnerability in the Web Workers implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown vectors.
CVE-2011-2627 1 Opera 1 Opera Browser 2025-04-11 5.0 MEDIUM N/A
Unspecified vulnerability in the DOM implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by live.com.
CVE-2011-2614 1 Opera 1 Opera Browser 2025-04-11 5.0 MEDIUM N/A
The SVG implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors involving a path on which many characters are drawn.
CVE-2011-0450 2 Microsoft, Opera 2 Windows, Opera Browser 2025-04-11 7.6 HIGH N/A
The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname of the filesystem-viewing application, which allows user-assisted remote attackers to execute arbitrary code via a crafted web site that hosts an executable file.
CVE-2012-1931 2 Opera, Unix 2 Opera Browser, Unix 2025-04-11 4.6 MEDIUM N/A
Opera before 11.62 on UNIX, when used in conjunction with an unspecified printing application, allows local users to overwrite arbitrary files via a symlink attack on a temporary file during printing.
CVE-2010-2658 1 Opera 1 Opera Browser 2025-04-11 4.3 MEDIUM N/A
Opera before 10.60 does not properly restrict certain interaction between plug-ins, file inputs, and the clipboard, which allows user-assisted remote attackers to trigger the uploading of arbitrary files via a crafted web site.
CVE-2011-2617 1 Opera 1 Opera Browser 2025-04-11 5.0 MEDIUM N/A
Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors related to selecting a text node, and closed pop-up windows, removed pop-up windows, and IFRAME elements.
CVE-2010-1310 1 Opera 1 Opera Browser 2025-04-11 5.0 MEDIUM N/A
Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents of other pages.
CVE-2012-3559 2 Apple, Opera 2 Mac Os X, Opera Browser 2025-04-11 10.0 HIGH N/A
Unspecified vulnerability in Opera before 12.00 on Mac OS X has unknown impact and attack vectors, related to a "moderate severity issue."