Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

opera opera browser 6.02 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2003-0593
Opera allows remote malicious users to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Opera to send the cookie outside the specified URL subsets, e.g. to a vulnerable ap...
Opera Opera Browser 5.0Opera Opera Browser 5.02Opera Opera Browser 5.10Opera Opera Browser 5.11Opera Opera Browser 5.12Opera Opera Browser 6.0Opera Opera Browser 6.01Opera Opera Browser 6.02Opera Opera Browser 6.03Opera Opera Browser 6.04Opera Opera Browser 6.05Opera Opera Browser 6.06Opera Opera Browser 6.10Opera Opera Browser 7.0Opera Opera Browser 7.01Opera Opera Browser 7.02Opera Opera Browser 7.03Opera Opera Browser 7.10Opera Opera Browser 7.11Opera Opera Browser 7.20Opera Opera Browser 7.21Opera Opera Browser 7.22
7.8
CVSSv2
CVE-2007-6524
Opera prior to 9.25 allows remote malicious users to obtain potentially sensitive memory contents via a crafted bitmap (BMP) file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420...
Opera Opera Browser 5.0Opera Opera Browser 5.12Opera Opera Browser 5.02Opera Opera Browser 6.06Opera Opera Browser 6.01Opera Opera Browser 6.12Opera Opera Browser 6.11Opera Opera Browser 7.22Opera Opera Browser 7.50Opera Opera Browser 7.23Opera Opera Browser 7.20Opera Opera Browser 7.11Opera Opera Browser 7.10Opera Opera Browser 8.0Opera Opera Browser 8.02Opera Opera Browser 8.50Opera Opera Browser 9.21Opera Opera Browser 9.01Opera Opera Browser 5.11Opera Opera Browser 5.10Opera Opera Browser 6.04Opera Opera Browser 6.05
5
CVSSv2
CVE-2005-3006
The mail client in Opera prior to 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote malicious users to inject arbitrary web script and spoof attachment filenames.
Opera Opera Browser 8.0Opera Opera Browser 7.20Opera Opera Browser 7.21Opera Opera Browser 7.22Opera Opera Browser 7.0Opera Opera Browser 7.11Opera Opera Browser 6.05Opera Opera Browser 6.06Opera Opera Browser 6.01Opera Opera Browser 6.12Opera Opera Browser 6.11Opera Opera Browser 5.0Opera Opera Browser 4.01Opera Opera Browser 4.00Opera Opera Browser 3.61Opera Opera Browser 3.50Opera Opera Browser 2.10Opera Opera Browser 2.12Opera Opera Browser 7.54Opera Opera Browser 7.52Opera Opera Browser 7.53Opera Opera Browser 7.10
5
CVSSv2
CVE-2008-4195
Opera prior to 9.52 does not properly restrict the ability of a framed web page to change the address associated with a different frame, which allows remote malicious users to trigger the display of an arbitrary address in a frame via unspecified use of web script.
Opera Opera Browser 9.0Opera Opera Browser 8.54Opera Opera Browser 8.0Opera Opera Browser 7.60Opera Opera Browser 9.50Opera Opera Browser 9.23Opera Opera Browser 9.26Opera Opera Browser 7.20Opera Opera Browser 7.21Opera Opera Browser 7.0Opera Opera Browser 7.01Opera Opera Browser 6.0Opera Opera Browser 6.03Opera Opera Browser 6.02Opera Opera Browser 5.0Opera Opera Browser 5.12Opera Opera Browser 5.02Opera Opera Browser 9.12Opera Opera Browser 9.10Opera Opera Browser 8.51Opera Opera Browser 8.50Opera Opera Browser 7.23
4.3
CVSSv2
CVE-2008-4196
Cross-site scripting (XSS) vulnerability in Opera prior to 9.52 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Opera Opera Browser 9.01Opera Opera Browser 8.54Opera Opera Browser 8.0Opera Opera Browser 7.54Opera Opera Browser 9.50Opera Opera Browser 9.23Opera Opera Browser 9.0Opera Opera Browser 7.20Opera Opera Browser 7.22Opera Opera Browser 7.0Opera Opera Browser 6.0Opera Opera Browser 6.03Opera Opera Browser 9.21Opera Opera Browser 9.20Opera Opera Browser 9.12Opera Opera Browser 9.10Opera Opera Browser 7.53Opera Opera Browser 7.23Opera Opera Browser 7.52Opera Opera Browser 7.51Opera Opera Browser 7.02Opera Opera Browser 7.11
5
CVSSv2
CVE-2008-4198
Opera prior to 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security information dialog reporting a secure connection, which might allow remote malicious users to trick a user into performing unsafe actions on ...
Opera Opera Browser 9.22Opera Opera Browser 9.21Opera Opera Browser 8.53Opera Opera Browser 8.52Opera Opera Browser 7.54Opera Opera Browser 7.53Opera Opera Browser 9.26Opera Opera Browser 9.27Opera Opera Browser 8.0Opera Opera Browser 7.22Opera Opera Browser 7.50Opera Opera Browser 7.01Opera Opera Browser 7.02Opera Opera Browser 6.0Opera Opera Browser 6.04Opera Opera Browser 6.1Opera Opera Browser 9.10Opera Opera Browser 9.02Opera Opera Browser 8.02Opera Opera Browser 8.01Opera Opera Browser 9.50Opera Opera Browser 9.20
5
CVSSv2
CVE-2008-4199
Opera prior to 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote malicious users to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation.&...
Opera Opera Browser 9.12Opera Opera Browser 9.10Opera Opera Browser 8.51Opera Opera Browser 8.50Opera Opera Browser 7.23Opera Opera Browser 7.0Opera Opera Browser 9.25Opera Opera Browser 9.20Opera Opera Browser 7.54Opera Opera Browser 7.52Opera Opera Browser 7.03Opera Opera Browser 7.10Opera Opera Browser 7.11Opera Opera Browser 6.05Opera Opera Browser 6.06Opera Opera Browser 6.12Opera Opera Browser 6.11Opera Opera Browser 5.0Opera Opera Browser 9.22Opera Opera Browser 9.0Opera Opera Browser 8.54Opera Opera Browser 8.0
10
CVSSv2
CVE-2008-4292
Opera prior to 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown impact and attack vectors. NOTE: it is not clear whether this is a vulnerability, but the vendor included it in a security section of the advisory.
Opera Opera Browser 9.22Opera Opera Browser 8.54Opera Opera Browser 8.53Opera Opera Browser 9.21Opera Opera Browser 9.20Opera Opera Browser 8.52Opera Opera Browser 8.51Opera Opera Browser 7.53Opera Opera Browser 7.23Opera Opera Browser 9.27Opera Opera Browser 9.24Opera Opera Browser 7.54Opera Opera Browser 7.50Opera Opera Browser 7.03Opera Opera Browser 7.02Opera Opera Browser 7.0Opera Opera Browser 6.04Opera Opera Browser 6.05Opera Opera Browser 6.1Opera Opera Browser 5.0Opera Opera Browser 7.60Opera Opera Browser 9.23
6.4
CVSSv2
CVE-2008-4200
Opera prior to 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote malicious users to change this field to display the URL of a page containing web script controlled by the attacker.
Opera Opera Browser 9.22Opera Opera Browser 9.0Opera Opera Browser 8.54Opera Opera Browser 7.60Opera Opera Browser 7.54Opera Opera Browser 9.23Opera Opera Browser 9.26Opera Opera Browser 8.0Opera Opera Browser 7.21Opera Opera Browser 7.22Opera Opera Browser 7.0Opera Opera Browser 7.01Opera Opera Browser 6.0Opera Opera Browser 6.02Opera Opera Browser 5.0Opera Opera Browser 5.12Opera Opera Browser 5.02Opera Opera Browser 9.02Opera Opera Browser 9.01Opera Opera Browser 8.02Opera Opera Browser 8.01Opera Opera Browser 9.50
5.1
CVSSv2
CVE-2006-1834
Integer signedness error in Opera prior to 8.54 allows remote malicious users to execute arbitrary code via long values in a stylesheet attribute, which pass a length check. NOTE: a sign extension problem makes the attack easier with shorter strings.
Opera Opera Browser 8.50Opera Opera Browser 8.02Opera Opera Browser 7.52Opera Opera Browser 7.51Opera Opera Browser 7.53Opera Opera Browser 7.10Opera Opera Browser 7.0Opera Opera Browser 7.01Opera Opera BrowserOpera Opera Browser 8.0Opera Opera Browser 7.21Opera Opera Browser 7.22Opera Opera Browser 7.20Opera Opera Browser 7.11Opera Opera Browser 6.06Opera Opera Browser 6.01Opera Opera Browser 6.12Opera Opera Browser 6.11Opera Opera Browser 5.0Opera Opera Browser 5.11Opera Opera Browser 4.01Opera Opera Browser 4.00
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook