Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

opera opera browser 9.26 vulnerabilities and exploits

(subscribe to this query)
9.3
CVSSv2
CVE-2008-1762
Opera prior to 9.27 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption.
Opera Opera Browser 5.0Opera Opera Browser 5.11Opera Opera Browser 6.04Opera Opera Browser 6.05Opera Opera Browser 6.1Opera Opera Browser 7.50Opera Opera Browser 7.20Opera Opera Browser 7.21Opera Opera Browser 7.11Opera Opera Browser 7.0Opera Opera Browser 7.02Opera Opera Browser 8.51Opera Opera Browser 8.53Opera Opera Browser 9.0Opera Opera Browser 9.10Opera Opera BrowserOpera Opera Browser 9.25Opera Opera Browser 6.0Opera Opera Browser 6.02Opera Opera Browser 7.52Opera Opera Browser 7.51Opera Opera Browser 7.54
5
CVSSv2
CVE-2008-2714
Opera prior to 9.26 allows remote malicious users to misrepresent web page addresses using "certain characters" that "cause the page address text to be misplaced."
Opera Opera Browser 9.23Opera Opera Browser 9.22Opera Opera Browser 9.0Opera Opera Browser 8.51Opera Opera Browser 8.53Opera Opera Browser 7.52Opera Opera Browser 7.51Opera Opera Browser 7.54Opera Opera Browser 7.10Opera Opera Browser 7.01Opera Opera Browser 7.60Opera Opera Browser 6.0Opera Opera Browser 6.04Opera Opera Browser 6.1Opera Opera Browser 5.0Opera Opera Browser 9.24Opera Opera Browser 9.02Opera Opera Browser 9.01Opera Opera Browser 8.54Opera Opera Browser 8.01Opera Opera Browser 7.53Opera Opera Browser 7.03
6.8
CVSSv2
CVE-2008-1080
Opera prior to 9.26 allows user-assisted remote malicious users to read arbitrary files by tricking a user into typing the characters of the target filename into a file input.
Opera Opera Browser 9.01Opera Opera Browser 9.0Opera Opera Browser 7.52Opera Opera Browser 7.51Opera Opera Browser 7.50Opera Opera Browser 7.20Opera Opera Browser 7.01Opera Opera Browser 7.60Opera Opera Browser 7.02Opera Opera Browser 7.0Opera Opera Browser 6.02Opera Opera Browser 6.0Opera Opera Browser 6.1Opera Opera Browser 6.12Opera Opera Browser 5.02Opera Opera Browser 4.00Opera Opera Browser 4.02Opera Opera Browser 4.01Opera Opera Browser 3.00Opera Opera Browser 2.12Opera Opera Browser 2.10Opera Opera Browser 9.23
6.8
CVSSv2
CVE-2008-1081
Opera prior to 9.26 allows user-assisted remote malicious users to execute arbitrary script via images that contain custom comments, which are treated as script when the user displays the image properties.
Opera Opera Browser 9.20Opera Opera Browser 9.12Opera Opera Browser 9.10Opera Opera Browser 9.02Opera Opera Browser 9.01Opera Opera Browser 8.52Opera Opera Browser 8.0Opera Opera Browser 7.54Opera Opera Browser 9.24Opera Opera Browser 8.54Opera Opera Browser 8.01Opera Opera Browser 7.22Opera Opera Browser 7.50Opera Opera Browser 7.53Opera Opera Browser 7.03Opera Opera Browser 7.11Opera Opera Browser 7.10Opera Opera Browser 6.0Opera Opera Browser 6.11Opera Opera Browser 5.0Opera Opera Browser 4.00Opera Opera Browser 2.10
4.3
CVSSv2
CVE-2008-1082
Opera prior to 9.26 allows remote malicious users to "bypass sanitization filters" and conduct cross-site scripting (XSS) attacks via crafted attribute values in an XML document, which are not properly handled during DOM presentation.
Opera Opera Browser 9.0Opera Opera Browser 8.0Opera Opera Browser 7.51Opera Opera Browser 7.50Opera Opera Browser 7.20Opera Opera Browser 7.21Opera Opera Browser 7.60Opera Opera Browser 7.02Opera Opera Browser 7.0Opera Opera Browser 7.11Opera Opera Browser 6.0Opera Opera Browser 6.1Opera Opera Browser 6.12Opera Opera Browser 4.00Opera Opera Browser 4.02Opera Opera Browser 4.01Opera Opera Browser 3.00Opera Opera Browser 2.12Opera Opera Browser 2.10Opera Opera Browser 9.22Opera Opera Browser 9.21Opera Opera Browser 9.20
5
CVSSv2
CVE-2008-4199
Opera prior to 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote malicious users to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation.&...
Opera Opera Browser 9.12Opera Opera Browser 9.10Opera Opera Browser 8.51Opera Opera Browser 8.50Opera Opera Browser 7.23Opera Opera Browser 7.0Opera Opera Browser 9.25Opera Opera Browser 9.20Opera Opera Browser 7.54Opera Opera Browser 7.52Opera Opera Browser 7.03Opera Opera Browser 7.10Opera Opera Browser 7.11Opera Opera Browser 6.05Opera Opera Browser 6.06Opera Opera Browser 6.12Opera Opera Browser 6.11Opera Opera Browser 5.0Opera Opera Browser 9.22Opera Opera Browser 9.0Opera Opera Browser 8.54Opera Opera Browser 8.0
5
CVSSv2
CVE-2008-4195
Opera prior to 9.52 does not properly restrict the ability of a framed web page to change the address associated with a different frame, which allows remote malicious users to trigger the display of an arbitrary address in a frame via unspecified use of web script.
Opera Opera Browser 9.0Opera Opera Browser 8.54Opera Opera Browser 8.0Opera Opera Browser 7.60Opera Opera Browser 9.50Opera Opera Browser 9.23Opera Opera Browser 9.26Opera Opera Browser 7.20Opera Opera Browser 7.21Opera Opera Browser 7.0Opera Opera Browser 7.01Opera Opera Browser 6.0Opera Opera Browser 6.03Opera Opera Browser 6.02Opera Opera Browser 5.0Opera Opera Browser 5.12Opera Opera Browser 5.02Opera Opera Browser 9.12Opera Opera Browser 9.10Opera Opera Browser 8.51Opera Opera Browser 8.50Opera Opera Browser 7.23
10
CVSSv2
CVE-2008-4292
Opera prior to 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown impact and attack vectors. NOTE: it is not clear whether this is a vulnerability, but the vendor included it in a security section of the advisory.
Opera Opera Browser 9.22Opera Opera Browser 8.54Opera Opera Browser 8.53Opera Opera Browser 9.21Opera Opera Browser 9.20Opera Opera Browser 8.52Opera Opera Browser 8.51Opera Opera Browser 7.53Opera Opera Browser 7.23Opera Opera Browser 9.27Opera Opera Browser 9.24Opera Opera Browser 7.54Opera Opera Browser 7.50Opera Opera Browser 7.03Opera Opera Browser 7.02Opera Opera Browser 7.0Opera Opera Browser 6.04Opera Opera Browser 6.05Opera Opera Browser 6.1Opera Opera Browser 5.0Opera Opera Browser 7.60Opera Opera Browser 9.23
5
CVSSv2
CVE-2008-4198
Opera prior to 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security information dialog reporting a secure connection, which might allow remote malicious users to trick a user into performing unsafe actions on ...
Opera Opera Browser 9.22Opera Opera Browser 9.21Opera Opera Browser 8.53Opera Opera Browser 8.52Opera Opera Browser 7.54Opera Opera Browser 7.53Opera Opera Browser 9.26Opera Opera Browser 9.27Opera Opera Browser 8.0Opera Opera Browser 7.22Opera Opera Browser 7.50Opera Opera Browser 7.01Opera Opera Browser 7.02Opera Opera Browser 6.0Opera Opera Browser 6.04Opera Opera Browser 6.1Opera Opera Browser 9.10Opera Opera Browser 9.02Opera Opera Browser 8.02Opera Opera Browser 8.01Opera Opera Browser 9.50Opera Opera Browser 9.20
6.4
CVSSv2
CVE-2008-4200
Opera prior to 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote malicious users to change this field to display the URL of a page containing web script controlled by the attacker.
Opera Opera Browser 9.22Opera Opera Browser 9.0Opera Opera Browser 8.54Opera Opera Browser 7.60Opera Opera Browser 7.54Opera Opera Browser 9.23Opera Opera Browser 9.26Opera Opera Browser 8.0Opera Opera Browser 7.21Opera Opera Browser 7.22Opera Opera Browser 7.0Opera Opera Browser 7.01Opera Opera Browser 6.0Opera Opera Browser 6.02Opera Opera Browser 5.0Opera Opera Browser 5.12Opera Opera Browser 5.02Opera Opera Browser 9.02Opera Opera Browser 9.01Opera Opera Browser 8.02Opera Opera Browser 8.01Opera Opera Browser 9.50
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook