Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Opera
Browser

Opera Browser vulnerabilities

Known exploitedIn KEVPublic exploitFix available

opera browserOpera before 10.53 on Windows and Mac OS X does not properly handle a series of document...CVE-2010-17289.3 HighMay 5, 2010
opera browserInteger overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code...CVE-2010-1349Public exploitEPSS 19.8%10.0 HighApril 12, 2010
opera browserOpera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs,...CVE-2010-13105.0 MediumApril 8, 2010
opera browserOpera before 10.10 permits cross-origin loading of CSS stylesheets even when the stylesheet...CVE-2010-06534.3 MediumFebruary 18, 2010
opera browserUnspecified vulnerability in Opera before 10.10 has unknown impact and attack vectors, related to...CVE-2009-407210.0 HighNovember 24, 2009
opera browserOpera before 10.10, when exception stacktraces are enabled, places scripting error messages from...CVE-2009-40715.8 MediumNovember 24, 2009
opera browserOpera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own...CVE-2009-38325.8 MediumOctober 30, 2009
opera browserOpera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service...CVE-2009-38319.3 HighOctober 30, 2009
opera browserOpera 9.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via...CVE-2009-32695.0 MediumSeptember 18, 2009
opera browserOpera before 10.01 does not properly restrict HTML in a (1) RSS or (2) Atom feed, which allows...CVE-2009-32664.3 MediumSeptember 18, 2009
opera browserCross-site scripting (XSS) vulnerability in Opera 9 and 10 allows remote attackers to inject...CVE-2009-32654.3 MediumSeptember 18, 2009
opera browserOpera 9.52 and earlier allows remote attackers to cause a denial of service (unusable browser) by...CVE-2008-7245Public exploit5.0 MediumSeptember 18, 2009
opera browserOpera before 10.00 does not properly display all characters in Internationalized Domain Names ...CVE-2009-30495.0 MediumSeptember 2, 2009
opera browserOpera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE...CVE-2009-30484.3 MediumSeptember 2, 2009
opera browserOpera before 10.00, when a collapsed address bar is used, does not properly update the domain...CVE-2009-30474.3 MediumSeptember 2, 2009
opera browserOpera before 10.00 does not check all intermediate X.509 certificates for revocation, which makes...CVE-2009-30467.5 HighSeptember 2, 2009
opera browserOpera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it...CVE-2009-30455.0 MediumSeptember 2, 2009
opera browserOpera before 10.00 does not properly handle a (1) '\0' character or (2) invalid wildcard...CVE-2009-30445.0 MediumSeptember 2, 2009
opera browserOpera 9.52 and earlier, and 10.00 Beta 3 Build 1699, does not properly block data: URIs in...CVE-2009-30134.3 MediumAugust 31, 2009
opera browserOpera 9.52 and earlier allows remote attackers to cause a denial of service (CPU and memory...CVE-2009-25775.0 MediumJuly 22, 2009
opera browserOpera, possibly 9.64 and earlier, allows remote attackers to cause a denial of service (memory...CVE-2009-25404.3 MediumJuly 20, 2009
opera browserOpera 9.52 and earlier does not block javascript: URIs in Refresh headers in HTTP responses,...CVE-2009-23514.3 MediumJuly 7, 2009
opera browserOpera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a...CVE-2009-20706.8 MediumJune 15, 2009
opera browserOpera detects http content in https web pages only when the top-level frame uses https, which...CVE-2009-20676.8 MediumJune 15, 2009
opera browserOpera, possibly before 9.25, processes a 3xx HTTP CONNECT response before a successful SSL...CVE-2009-20636.8 MediumJune 15, 2009
opera browserOpera, possibly before 9.25, uses the HTTP Host header to determine the context of a document...CVE-2009-20596.8 MediumJune 15, 2009
opera browserOpera executes DOM calls in response to a javascript: URI in the target attribute of a submit...CVE-2009-15999.3 HighMay 11, 2009
opera browserOpera 9.64 allows remote attackers to cause a denial of service (application crash) via an XML...CVE-2009-1234Public exploit4.3 MediumApril 2, 2009
opera browserUnspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to...CVE-2009-091610.0 HighMarch 16, 2009
opera browserOpera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via...CVE-2009-09156.8 MediumMarch 16, 2009
opera browserOpera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that...CVE-2009-09149.3 HighMarch 16, 2009
opera browserUnspecified vulnerability in Opera before 9.63 allows remote attackers to "reveal random data"...CVE-2008-56837.8 HighDecember 19, 2008
opera browserCross-site scripting (XSS) vulnerability in Opera before 9.63 allows remote attackers to inject...CVE-2008-56824.3 MediumDecember 19, 2008
opera browserOpera before 9.63 does not block unspecified "scripted URLs" during the feed preview, which...CVE-2008-56814.3 MediumDecember 19, 2008
opera browserMultiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute...CVE-2008-5680Public exploit9.3 HighDecember 19, 2008
opera browserCross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to...CVE-2008-4725Public exploit4.3 MediumOctober 23, 2008
opera browserOpera before 9.61 does not properly block scripts during preview of a news feed, which allows...CVE-2008-46985.8 MediumOctober 23, 2008
opera browserThe Fast Forward feature in Opera before 9.61, when a page is located in a frame, executes a...CVE-2008-46974.3 MediumOctober 23, 2008
opera browserUnspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of...CVE-2008-4694Public exploit9.3 HighOctober 23, 2008
opera browserOpera before 9.52 does not check the CRL override upon encountering a certificate that lacks a...CVE-2008-429210.0 HighSeptember 27, 2008
opera browserOpera before 9.52 does not ensure that the address field of a news feed represents the feed's...CVE-2008-42006.4 MediumSeptember 27, 2008
opera browserOpera before 9.52 does not prevent use of links from web pages to feed source files on the local...CVE-2008-41995.0 MediumSeptember 27, 2008
opera browserOpera before 9.52, when rendering an http page that has loaded an https page into a frame,...CVE-2008-41985.0 MediumSeptember 27, 2008
opera browserOpera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and...CVE-2008-41978.8 HighSeptember 27, 2008
opera browserCross-site scripting (XSS) vulnerability in Opera before 9.52 allows remote attackers to inject...CVE-2008-41964.3 MediumSeptember 27, 2008
opera browserOpera before 9.52 does not properly restrict the ability of a framed web page to change the...CVE-2008-41955.0 MediumSeptember 27, 2008
opera browserOpera before 9.51 does not properly manage memory within functions supporting the CANVAS element,...CVE-2008-30787.8 HighJuly 9, 2008
opera browserUnspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of...CVE-2008-27165.0 MediumJune 16, 2008
opera browserUnspecified vulnerability in Opera before 9.5 allows remote attackers to read cross-domain images...CVE-2008-27155.0 MediumJune 16, 2008
opera browserOpera before 9.26 allows remote attackers to misrepresent web page addresses using "certain...CVE-2008-27145.0 MediumJune 16, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open