Product:

Opera_browser

(Opera)
Repositories

Unknown:

This might be proprietary software.

#Vulnerabilities 282
Date Id Summary Products Score Patch Annotated
2010-12-22 CVE-2010-4582 Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote attackers to bypass intended access restrictions via unspecified vectors. Opera_browser N/A
2010-12-22 CVE-2010-4581 Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue." Opera_browser N/A
2010-12-22 CVE-2010-4580 Opera before 11.00 does not clear WAP WML form fields after manual navigation to a new web site, which allows remote attackers to obtain sensitive information via an input field that has the same name as an input field on a previously visited web site. Opera_browser N/A
2010-12-22 CVE-2010-4579 Opera before 11.00 does not properly constrain dialogs to appear on top of rendered documents, which makes it easier for remote attackers to trick users into interacting with a crafted web site that spoofs the (1) security information dialog or (2) download dialog. Opera_browser N/A
2010-10-21 CVE-2010-4050 Opera before 10.63 allows remote attackers to cause a denial of service (memory corruption) by referencing an SVG document in an IMG element. Opera_browser N/A
2010-10-21 CVE-2010-4049 Opera before 10.63 allows remote attackers to cause a denial of service (application crash) via a Flash movie with a transparent Window Mode (aka wmode) property, which is not properly handled during navigation away from the containing HTML document. Opera_browser N/A
2010-10-21 CVE-2010-4048 Opera before 10.63 allows user-assisted remote web servers to cause a denial of service (application crash) by sending a redirect during the saving of a file. Opera_browser N/A
2010-10-21 CVE-2010-4047 Opera before 10.63 does not properly select the security context of JavaScript code associated with an error page, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site. Opera_browser N/A
2010-10-21 CVE-2010-4046 Opera before 10.63 does not properly verify the origin of video content, which allows remote attackers to obtain sensitive information by using a video stream as HTML5 canvas content. Opera_browser N/A
2010-10-21 CVE-2010-4045 Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote attackers to spoof the Address Bar, conduct cross-site scripting (XSS) attacks, and possibly execute arbitrary code by leveraging the ability of a script to interact with a web page from (1) a different domain or (2) a different security context. Opera_browser N/A