Skip to content

Opera Browser vulnerabilities

opera browserOpera 7.x and 8 before 8.01 does not clearly associate a Javascript dialog box with the web page...CVE-2005-22732.6 LowJuly 13, 2005
opera browserCross-site scripting (XSS) vulnerability in Opera 8.0 Final Build 1095 allows remote attackers to...CVE-2005-16696.8 MediumJune 16, 2005
opera browserThe XMLHttpRequest object in Opera 8.0 Final Build 1095 allows remote attackers to bypass access...CVE-2005-14757.5 HighJune 16, 2005
opera browserOpera 8 Beta 3, when using first-generation vetted digital certificates, displays the...CVE-2005-11397.5 HighApril 14, 2005
opera browserOpera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local...CVE-2005-04577.2 HighFebruary 17, 2005
gnome epiphany, mozilla camino, mozilla +2 more +4 moreThe International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain...CVE-2005-0238Fix available5.0 MediumFebruary 7, 2005
opera browserThe International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain...CVE-2005-02355.0 MediumFebruary 7, 2005
mozilla camino, firefox, mozilla +3 more +5 moreThe International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6...CVE-2005-0233EPSS 20.4%7.5 HighFebruary 7, 2005
opera browserOpera 7.54 and earlier does not properly validate base64 encoded binary data in a data: (RFC 2397...CVE-2005-04565.0 MediumJanuary 12, 2005
mozilla, opera browser +1 moreOpera offers an Open button to verify that a user wishes to execute a downloaded file, which...CVE-2004-26594.0 MediumDecember 31, 2004
opera browserOpera before 7.54 allows remote attackers to modify properties and methods of the location object...CVE-2004-25705.0 MediumDecember 31, 2004
opera browserA race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar...CVE-2004-2491Public exploit2.6 LowDecember 31, 2004
opera browserOpera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user...CVE-2004-22605.0 MediumDecember 31, 2004
opera browserThe Javascript engine in Opera 7.23 allows remote attackers to cause a denial of service (crash)...CVE-2004-18105.0 MediumDecember 31, 2004
gentoo linux, kde, opera browser +2 moreOpera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote...CVE-2004-1491Public exploitEPSS 12.6%5.0 MediumDecember 31, 2004
opera browserOpera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via...CVE-2004-14902.6 LowDecember 31, 2004
opera browserOpera 7.54 and earlier does not properly limit an applet's access to internal Java packages from...CVE-2004-14892.6 LowDecember 31, 2004
opera browserOpera 7.54 allows remote attackers to cause a denial of service (application crash from memory...CVE-2004-12015.0 MediumDecember 15, 2004
opera browserOpera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web...CVE-2004-11577.5 HighDecember 10, 2004
opera browserOpera allows remote attackers to cause a denial of service (invalid memory reference and...CVE-2004-16152.6 LowOctober 18, 2004
opera browserOpera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent...CVE-2004-08725.0 MediumSeptember 16, 2004
opera browserOpera 7.51 for Windows and 7.50 for Linux does not properly prevent a frame in one domain from...CVE-2004-07177.5 HighJuly 23, 2004
opera browserOpera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" (favicon) that is...CVE-2004-05375.0 MediumJune 8, 2004
opera browserArgument injection vulnerability in Opera before 7.50 does not properly filter "-" characters...CVE-2004-04732.6 LowMay 20, 2004
opera browserOpera allows remote attackers to bypass intended cookie access restrictions on a web application...CVE-2003-05937.5 HighMarch 16, 2004
opera browserOpera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a...CVE-2004-20832.6 LowFebruary 11, 2004
opera browserCross-site scripting (XSS) vulnerability in Opera 6.0 through 7.0 with automatic redirection...CVE-2003-14204.3 MediumDecember 31, 2003
opera browserThe PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of...CVE-2003-1397Public exploit4.3 MediumDecember 31, 2003
opera browserHeap-based buffer overflow in Opera 6.05 through 7.10 allows remote attackers to cause a denial...CVE-2003-1396Public exploit6.8 MediumDecember 31, 2003
opera browserBuffer overflow in Opera 7.02 Build 2668 allows remote attackers to crash Opera via a long HTTP...CVE-2003-13889.3 HighDecember 31, 2003
opera browserBuffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to...CVE-2003-1387Public exploitEPSS 14.7%7.5 HighDecember 31, 2003
opera browserHeap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary...CVE-2003-0870Public exploitEPSS 15.4%7.5 HighOctober 21, 2003