Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

opera opera browser 9.27 vulnerabilities and exploits

(subscribe to this query)
9.3
CVSSv2
CVE-2008-1762
Opera prior to 9.27 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption.
Opera Opera Browser 5.0Opera Opera Browser 5.11Opera Opera Browser 6.04Opera Opera Browser 6.05Opera Opera Browser 6.1Opera Opera Browser 7.50Opera Opera Browser 7.20Opera Opera Browser 7.21Opera Opera Browser 7.11Opera Opera Browser 7.0Opera Opera Browser 7.02Opera Opera Browser 8.51Opera Opera Browser 8.53Opera Opera Browser 9.0Opera Opera Browser 9.10Opera Opera BrowserOpera Opera Browser 9.25Opera Opera Browser 6.0Opera Opera Browser 6.02Opera Opera Browser 7.52Opera Opera Browser 7.51Opera Opera Browser 7.54
5
CVSSv2
CVE-2008-4199
Opera prior to 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote malicious users to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation.&...
Opera Opera Browser 9.12Opera Opera Browser 9.10Opera Opera Browser 8.51Opera Opera Browser 8.50Opera Opera Browser 7.23Opera Opera Browser 7.0Opera Opera Browser 9.25Opera Opera Browser 9.20Opera Opera Browser 7.54Opera Opera Browser 7.52Opera Opera Browser 7.03Opera Opera Browser 7.10Opera Opera Browser 7.11Opera Opera Browser 6.05Opera Opera Browser 6.06Opera Opera Browser 6.12Opera Opera Browser 6.11Opera Opera Browser 5.0Opera Opera Browser 9.22Opera Opera Browser 9.0Opera Opera Browser 8.54Opera Opera Browser 8.0
5
CVSSv2
CVE-2008-4195
Opera prior to 9.52 does not properly restrict the ability of a framed web page to change the address associated with a different frame, which allows remote malicious users to trigger the display of an arbitrary address in a frame via unspecified use of web script.
Opera Opera Browser 9.0Opera Opera Browser 8.54Opera Opera Browser 8.0Opera Opera Browser 7.60Opera Opera Browser 9.50Opera Opera Browser 9.23Opera Opera Browser 9.26Opera Opera Browser 7.20Opera Opera Browser 7.21Opera Opera Browser 7.0Opera Opera Browser 7.01Opera Opera Browser 6.0Opera Opera Browser 6.03Opera Opera Browser 6.02Opera Opera Browser 5.0Opera Opera Browser 5.12Opera Opera Browser 5.02Opera Opera Browser 9.12Opera Opera Browser 9.10Opera Opera Browser 8.51Opera Opera Browser 8.50Opera Opera Browser 7.23
10
CVSSv2
CVE-2008-4292
Opera prior to 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown impact and attack vectors. NOTE: it is not clear whether this is a vulnerability, but the vendor included it in a security section of the advisory.
Opera Opera Browser 9.22Opera Opera Browser 8.54Opera Opera Browser 8.53Opera Opera Browser 9.21Opera Opera Browser 9.20Opera Opera Browser 8.52Opera Opera Browser 8.51Opera Opera Browser 7.53Opera Opera Browser 7.23Opera Opera Browser 9.27Opera Opera Browser 9.24Opera Opera Browser 7.54Opera Opera Browser 7.50Opera Opera Browser 7.03Opera Opera Browser 7.02Opera Opera Browser 7.0Opera Opera Browser 6.04Opera Opera Browser 6.05Opera Opera Browser 6.1Opera Opera Browser 5.0Opera Opera Browser 7.60Opera Opera Browser 9.23
5
CVSSv2
CVE-2008-4198
Opera prior to 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security information dialog reporting a secure connection, which might allow remote malicious users to trick a user into performing unsafe actions on ...
Opera Opera Browser 9.22Opera Opera Browser 9.21Opera Opera Browser 8.53Opera Opera Browser 8.52Opera Opera Browser 7.54Opera Opera Browser 7.53Opera Opera Browser 9.26Opera Opera Browser 9.27Opera Opera Browser 8.0Opera Opera Browser 7.22Opera Opera Browser 7.50Opera Opera Browser 7.01Opera Opera Browser 7.02Opera Opera Browser 6.0Opera Opera Browser 6.04Opera Opera Browser 6.1Opera Opera Browser 9.10Opera Opera Browser 9.02Opera Opera Browser 8.02Opera Opera Browser 8.01Opera Opera Browser 9.50Opera Opera Browser 9.20
6.4
CVSSv2
CVE-2008-4200
Opera prior to 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote malicious users to change this field to display the URL of a page containing web script controlled by the attacker.
Opera Opera Browser 9.22Opera Opera Browser 9.0Opera Opera Browser 8.54Opera Opera Browser 7.60Opera Opera Browser 7.54Opera Opera Browser 9.23Opera Opera Browser 9.26Opera Opera Browser 8.0Opera Opera Browser 7.21Opera Opera Browser 7.22Opera Opera Browser 7.0Opera Opera Browser 7.01Opera Opera Browser 6.0Opera Opera Browser 6.02Opera Opera Browser 5.0Opera Opera Browser 5.12Opera Opera Browser 5.02Opera Opera Browser 9.02Opera Opera Browser 9.01Opera Opera Browser 8.02Opera Opera Browser 8.01Opera Opera Browser 9.50
4.3
CVSSv2
CVE-2008-4196
Cross-site scripting (XSS) vulnerability in Opera prior to 9.52 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Opera Opera Browser 9.01Opera Opera Browser 8.54Opera Opera Browser 8.0Opera Opera Browser 7.54Opera Opera Browser 9.50Opera Opera Browser 9.23Opera Opera Browser 9.0Opera Opera Browser 7.20Opera Opera Browser 7.22Opera Opera Browser 7.0Opera Opera Browser 6.0Opera Opera Browser 6.03Opera Opera Browser 9.21Opera Opera Browser 9.20Opera Opera Browser 9.12Opera Opera Browser 9.10Opera Opera Browser 7.53Opera Opera Browser 7.23Opera Opera Browser 7.52Opera Opera Browser 7.51Opera Opera Browser 7.02Opera Opera Browser 7.11
5.8
CVSSv2
CVE-2008-4698
Opera prior to 9.61 does not properly block scripts during preview of a news feed, which allows remote malicious users to create arbitrary new feed subscriptions and read the contents of arbitrary feeds.
Opera Opera Browser 9.20Opera Opera Browser 9.12Opera Opera Browser 9.22Opera Opera Browser 9.21Opera Opera Browser 8.54Opera Opera Browser 8.53Opera Opera Browser 7.54Opera Opera Browser 7.53Opera Opera Browser 9.26Opera Opera Browser 9.27Opera Opera Browser 8.0Opera Opera Browser 7.22Opera Opera Browser 7.50Opera Opera Browser 7.01Opera Opera Browser 7.02Opera Opera Browser 6.0Opera Opera Browser 6.1Opera Opera Browser 5.0Opera Opera Browser 5.02Opera Opera Browser 9.51Opera Opera Browser 9.52Opera Opera Browser 9.01
4.3
CVSSv2
CVE-2008-4697
The Fast Forward feature in Opera prior to 9.61, when a page is located in a frame, executes a javascript: URL in the context of the outermost page instead of the page that contains this URL, which allows remote malicious users to conduct cross-site scripting (XSS) attacks.
Opera Opera Browser 9.12Opera Opera Browser 9.10Opera Opera Browser 8.51Opera Opera Browser 8.50Opera Opera Browser 7.23Opera Opera Browser 7.0Opera Opera Browser 9.50Opera Opera Browser 9.25Opera Opera Browser 9.21Opera Opera Browser 9.20Opera Opera Browser 8.53Opera Opera Browser 8.52Opera Opera Browser 7.54Opera Opera Browser 7.53Opera Opera Browser 9.27Opera Opera Browser 9.24Opera Opera Browser 8.0Opera Opera Browser 7.22Opera Opera Browser 7.50Opera Opera Browser 7.03Opera Opera Browser 7.02Opera Opera Browser 6.0
9.3
CVSSv2
CVE-2008-4694
Unspecified vulnerability in Opera prior to 9.60 allows remote malicious users to cause a denial of service (application crash) or execute arbitrary code via a redirect that specifies a crafted URL.
Opera Opera Browser 9.10Opera Opera Browser 9.02Opera Opera Browser 8.50Opera Opera Browser 8.02Opera Opera Browser 7.0Opera Opera Browser 9.50Opera Opera Browser 9.20Opera Opera Browser 9.0Opera Opera Browser 7.52Opera Opera Browser 7.51Opera Opera Browser 7.10Opera Opera Browser 7.11Opera Opera Browser 6.0Opera Opera Browser 6.06Opera Opera Browser 6.01Opera Opera Browser 6.12Opera Opera Browser 6.11Opera Opera Browser 5.0Opera Opera Browser 5.11Opera Opera Browser 9.01Opera Opera Browser 8.01Opera Opera Browser 8.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook