Opera vulnerabilities

Products

• Browser 282
• Opera 19
• Mini 4
• Mini 2

Newest

• opera mini The Opera Mini application 47.1.2249.129326 for Android allows remote attackers to spoof the... CVE-2018-16135 6.5 MediumDecember 26, 2022
• opera mini Opera Mini for Android below 53.1 displays URL left-aligned in the address field. This allows a... CVE-2021-23253 5.3 MediumJanuary 11, 2021
• opera, opera software as for android +1 more URLs using “javascript:” have the protocol removed when pasted into the address bar to protect... CVE-2020-6159 6.1 MediumDecember 23, 2020
• opera touch Opera Touch for iOS before version 2.4.5 is vulnerable to an address bar spoofing attack. The... CVE-2020-6157 4.3 MediumNovember 13, 2020
• opera Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are... CVE-2019-12278 4.3 MediumMarch 12, 2020
• opera, opera software as for android +1 more Opera for Android before 54.0.2669.49432 is vulnerable to a sandboxed cross-origin iframe bypass... CVE-2019-19788 5.5 MediumDecember 18, 2019
• opera mini Opera Mini for Android allows attackers to bypass intended restrictions on .apk file download... CVE-2019-18624 9.8 CriticalOctober 29, 2019
• opera mini The Opera Mini application through 16.0.14 for iOS has a UXSS vulnerability that can be triggered... CVE-2019-13607 6.1 MediumJuly 18, 2019
• opera browser Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker... CVE-2018-18913 7.8 HighMarch 21, 2019
• opera browser In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather... CVE-2018-6608 4.3 MediumMarch 28, 2018
• opera mini, browser +1 more Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted... CVE-2016-4075 6.1 MediumApril 21, 2017
• opera browser Characters from languages are such as Arabic, Hebrew are displayed from RTL (Right To Left) order... CVE-2016-6908 6.1 MediumJanuary 26, 2017
• opera browser, apple safari, google chrome +3 more +5 more The HTTP/2 protocol does not consider the role of the TCP congestion window in providing... CVE-2016-7153 EPSS 12.8% 5.3 MediumSeptember 6, 2016
• apple safari, google chrome, microsoft edge +3 more +5 more The HTTPS protocol does not consider the role of the TCP congestion window in providing... CVE-2016-7152 EPSS 12.8% 5.3 MediumSeptember 6, 2016
• opera mail Unspecified vulnerability in Opera Mail before 2016-02-16 on Windows allows user-assisted remote... CVE-2016-5101 8.8 HighJune 29, 2016
• opera browser Opera before 19 on Mac OS X allows user-assisted remote attackers to spoof the address bar via... CVE-2014-1870 4.3 MediumFebruary 6, 2014
• opera browser The intent: URL implementation in Opera before 18 on Android allows attackers to read local files... CVE-2014-0815 4.3 MediumFebruary 6, 2014
• opera browser Cross-site scripting (XSS) vulnerability in Opera before 15.00 allows remote attackers to inject... CVE-2013-4705 4.3 MediumSeptember 13, 2013
• opera browser Unspecified vulnerability in Opera before 12.15 has unknown impact and attack vectors, related to... CVE-2013-3211 10.0 HighApril 19, 2013
• opera browser Opera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows... CVE-2013-3210 5.0 MediumApril 19, 2013
• opera browser The TLS implementation in Opera before 12.13 does not properly consider timing side-channel... CVE-2013-1618 4.0 MediumFebruary 8, 2013
• opera browser Opera before 12.13 does not send CORS preflight requests in all required cases, which allows... CVE-2013-1639 6.8 MediumFebruary 8, 2013
• opera browser Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an... CVE-2013-1638 Public exploit 9.3 HighFebruary 8, 2013
• opera browser Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM... CVE-2013-1637 9.3 HighFebruary 8, 2013
• opera browser Opera before 12.12 on UNIX uses weak permissions for the profile directory, which allows local... CVE-2012-6472 4.6 MediumJanuary 2, 2013
• opera browser Opera before 12.12 allows remote attackers to spoof the address field via a high rate of HTTP... CVE-2012-6471 5.0 MediumJanuary 2, 2013
• opera browser Opera before 12.12 does not properly allocate memory for GIF images, which allows remote... CVE-2012-6470 Public exploit 9.3 HighJanuary 2, 2013
• opera browser Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files... CVE-2012-6469 5.0 MediumJanuary 2, 2013
• opera browser Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary... CVE-2012-6468 9.3 HighJanuary 2, 2013
• opera browser Opera before 12.10 follows Internet shortcuts that are referenced by a (1) IMG element or (2)... CVE-2012-6467 4.3 MediumJanuary 2, 2013
• opera browser Opera before 12.10 does not properly handle incorrect size data in a WebP image, which allows... CVE-2012-6466 5.0 MediumJanuary 2, 2013
• opera browser Opera before 12.10 allows remote attackers to execute arbitrary code or cause a denial of service... CVE-2012-6465 9.3 HighJanuary 2, 2013
• opera browser Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject... CVE-2012-6464 4.3 MediumJanuary 2, 2013
• opera browser Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject... CVE-2012-6463 4.3 MediumJanuary 2, 2013
• opera browser Opera before 12.10 does not properly implement the Cross-Origin Resource Sharing (CORS)... CVE-2012-6462 5.0 MediumJanuary 2, 2013
• opera browser The X.509 certificate-validation functionality in the https implementation in Opera before 12.10... CVE-2012-6461 5.0 MediumJanuary 2, 2013
• opera browser Opera before 11.67 and 12.x before 12.02 allows remote attackers to cause truncation of a dialog,... CVE-2012-6460 5.0 MediumJanuary 2, 2013
• opera mini, mobile +1 more The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not... CVE-2012-5180 4.3 MediumDecember 26, 2012
• opera Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges... CVE-2010-5227 Public exploit 6.9 MediumSeptember 7, 2012
• apple iphone os, mac os x, safari +21 more +23 more The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on... CVE-2015-4000 Public exploitFix available EPSS 99.9% 3.7 LowAugust 30, 2012
• opera browser Opera before 11.60 allows remote attackers to spoof the address bar via unspecified homograph... CVE-2012-4010 5.0 MediumAugust 30, 2012
• opera browser Opera before 12.01 allows remote attackers to cause a denial of service (application crash) via a... CVE-2012-4146 4.3 MediumAugust 6, 2012
• opera browser Unspecified vulnerability in Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x... CVE-2012-4145 10.0 HighAugust 6, 2012
• opera browser Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, does... CVE-2012-4144 4.3 MediumAugust 6, 2012
• opera browser Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X,... CVE-2012-4143 6.8 MediumAugust 6, 2012
• opera browser Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X,... CVE-2012-4142 4.3 MediumAugust 6, 2012
• opera browser Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash)... CVE-2012-3568 5.0 MediumJune 14, 2012
• opera browser Opera before 12.00 Beta allows remote attackers to cause a denial of service (memory consumption... CVE-2012-3567 5.0 MediumJune 14, 2012
• opera browser Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service ... CVE-2012-3566 4.3 MediumJune 14, 2012
• opera browser Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash)... CVE-2012-3565 5.0 MediumJune 14, 2012
• Show olderLoading…