Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

opera opera browser 9.20 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2007-1115
The child frames in Opera 9 prior to 9.20 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag, which allows remote malicious users to conduct cross-site scripting (XSS) attacks, as demonstrated using the UT...
Opera Opera Browser 9.20Opera Opera Browser 9.12Opera Opera Browser 9.0Opera Opera Browser 9.02Opera Opera Browser 9.01Opera Opera Browser 9.10
NA
CVE-2007-4944
The canvas.createPattern function in Opera 9.x prior to 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process a new pattern, which allows remote malicious users to obtain sensitive information (memory contents) via JavaScript.
Opera Opera Browser 9.0Opera Opera Browser 9.01Opera Opera Browser 9.02Opera Opera Browser 9.10Opera Opera Browser 9.20Opera Opera Browser 9.21Opera Opera Browser 9.12
NA
CVE-2007-6523
Algorithmic complexity vulnerability in Opera 9.50 beta and 9.x prior to 9.25 allows remote malicious users to cause a denial of service (CPU consumption) via a crafted bitmap (BMP) file that triggers a large number of calculations and checks.
Opera Opera Browser 9.0Opera Opera Browser 9.01Opera Opera Browser 9.22Opera Opera Browser 9.23Opera Opera Browser 9.50Opera Opera Browser 9.12Opera Opera Browser 9.20Opera Opera Browser 9.21Opera Opera Browser 9.02Opera Opera Browser 9.10Opera Opera Browser 9.24
NA
CVE-2009-2059
Opera, possibly prior to 9.25, uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle malicious users to execute arbitrary web script by modifying this CONNECT response...
Opera Opera Browser 7.0Opera Opera Browser 7.23Opera Opera Browser 8.0Opera Opera Browser 8.01Opera Opera Browser 7.60Opera Opera Browser 9.10Opera Opera Browser 9.21Opera Opera Browser 9.01Opera Opera Browser 8.52Opera Opera Browser 8.54Opera Opera Browser 7.53Opera Opera Browser 8.51Opera Opera Browser 8.02Opera Opera Browser 9.12Opera Opera BrowserOpera Opera Browser 9.0Opera Opera Browser 7.54Opera Opera Browser 8.53Opera Opera Browser 8.50Opera Opera Browser 9.20Opera Opera Browser 9.02
NA
CVE-2009-2067
Opera detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle malicious users to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script f...
Opera Opera Browser 9.10Opera Opera Browser 7.23Opera Opera Browser 8.0Opera Opera Browser 9.01Opera Opera Browser 9.0Opera Opera Browser 7.53Opera Opera Browser 8.51Opera Opera Browser 8.53Opera Opera Browser 9.20Opera Opera Browser 9.12Opera Opera Browser 9.02Opera Opera Browser 9.21Opera Opera Browser 8.54Opera Opera Browser 8.01Opera Opera Browser 7.60Opera Opera Browser 8.52Opera Opera Browser 7.54Opera Opera Browser 7.0Opera Opera Browser 8.02Opera Opera Browser 8.50Opera Opera Browser
NA
CVE-2009-2351
Opera 9.52 and previous versions does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refres...
Opera Opera Browser 9.0Opera Opera Browser 7.53Opera Opera Browser 8.51Opera Opera Browser 8.53Opera Opera Browser 8.02Opera Opera Browser 9.22Opera Opera Browser 9.20Opera Opera Browser 9.10Opera Opera Browser 7.23Opera Opera Browser 8.0Opera Opera Browser 9.01Opera Opera BrowserOpera Opera Browser 10.00Opera Opera Browser 7.54Opera Opera Browser 7.0Opera Opera Browser 8.50Opera Opera Browser 9.51Opera Opera Browser 9.12Opera Opera Browser 9.02Opera Opera Browser 9.21Opera Opera Browser 8.54Opera Opera Browser 8.01
NA
CVE-2009-3013
Opera 9.52 and previous versions, and 10.00 Beta 3 Build 1699, does not properly block data: URIs in Location headers in HTTP responses, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location header that c...
Opera Opera Browser 9.10Opera Opera Browser 8.0Opera Opera Browser 8.01Opera Opera Browser 9.01Opera Opera Browser 10.00Opera Opera Browser 9.02Opera Opera Browser 9.0Opera Opera Browser 7.53Opera Opera Browser 8.53Opera Opera Browser 8.02Opera Opera Browser 9.22Opera Opera Browser 9.20Opera Opera Browser 9.21Opera Opera Browser 8.54Opera Opera Browser 7.60Opera Opera Browser 8.51Opera Opera Browser 8.52Opera Opera Browser 7.54Opera Opera Browser 7.0Opera Opera Browser 7.23Opera Opera Browser 8.50Opera Opera Browser 9.51
NA
CVE-2009-2577
Opera 9.52 and previous versions allows remote malicious users to cause a denial of service (CPU and memory consumption, and application hang) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479.
Opera Opera BrowserOpera Opera Browser 9.51Opera Opera Browser 9.0Opera Opera Browser 8.54Opera Opera Browser 8.0Opera Opera Browser 7.60Opera Opera Browser 9.10Opera Opera Browser 9.02Opera Opera Browser 9.01Opera Opera Browser 8.02Opera Opera Browser 8.01Opera Opera Browser 9.22Opera Opera Browser 9.21Opera Opera Browser 8.53Opera Opera Browser 8.52Opera Opera Browser 7.54Opera Opera Browser 7.53Opera Opera Browser 9.20Opera Opera Browser 9.12Opera Opera Browser 8.51Opera Opera Browser 8.50Opera Opera Browser 7.23
NA
CVE-2009-3047
Opera prior to 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously visited site to the currently visited site, which might allow remote malicious users to spoof URLs.
Opera Opera Browser 7.53Opera Opera Browser 8.54Opera Opera Browser 8.02Opera Opera Browser 9.02Opera Opera Browser 9.20Opera Opera Browser 9.12Opera Opera Browser 8.01Opera Opera Browser 7.60Opera Opera Browser 8.51Opera Opera Browser 8.53Opera Opera Browser 9.52Opera Opera Browser 9.22Opera Opera Browser 7.54Opera Opera Browser 7.0Opera Opera Browser 9.0Opera Opera Browser 9.01Opera Opera Browser 8.50Opera Opera Browser 9.10Opera Opera Browser 9.51Opera Opera BrowserOpera Opera Browser 7.23Opera Opera Browser 8.0
NA
CVE-2009-3049
Opera prior to 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote malicious users to spoof URLs and conduct phishing attacks, related to Unicode and Punycode.
Opera Opera Browser 7.0Opera Opera Browser 7.23Opera Opera Browser 9.01Opera Opera Browser 9.10Opera Opera Browser 9.51Opera Opera Browser 7.53Opera Opera Browser 7.54Opera Opera Browser 8.54Opera Opera Browser 9.0Opera Opera Browser 9.02Opera Opera Browser 8.50Opera Opera Browser 9.12Opera Opera BrowserOpera Opera Browser 8.0Opera Opera Browser 8.01Opera Opera Browser 8.52Opera Opera Browser 8.51Opera Opera Browser 9.21Opera Opera Browser 9.64Opera Opera Browser 7.60Opera Opera Browser 8.53Opera Opera Browser 8.02
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook