Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
opera vulnerabilities and exploits
(subscribe to this query)
685
VMScore
CVE-2007-1563
The FTP protocol implementation in Opera 9.10 allows remote malicious users to allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.
Opera Opera Browser 9.10
1 EDB exploit
685
VMScore
CVE-2003-1396
Heap-based buffer overflow in Opera 6.05 up to and including 7.10 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a filename with a long extension.
Opera Opera Browser
1 EDB exploit
676
VMScore
CVE-2012-3555
Opera prior to 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted remote malicious users to conduct cross-site scripting (XSS) attacks or execute arbitrary code via a crafted web site, related to a "hid...
Opera Opera Browser 11.60
Opera Opera Browser 11.51
Opera Opera Browser 11.00
Opera Opera Browser 10.63
Opera Opera Browser 10.60
Opera Opera Browser 10.10
Opera Opera Browser 9.64
Opera Opera Browser 9.62
Opera Opera Browser 9.50
Opera Opera Browser 9.27
Opera Opera Browser 9.22
Opera Opera Browser 9.20
Opera Opera Browser 9.0
Opera Opera Browser 8.52
Opera Opera Browser 8.0
Opera Opera Browser 7.54
Opera Opera Browser 7.51
Opera Opera Browser 7.50
Opera Opera Browser 7.10
Opera Opera Browser 6.11
Opera Opera Browser 6.0
Opera Opera Browser 5.0
676
VMScore
CVE-2011-0450
The downloads manager in Opera prior to 11.01 on Windows does not properly determine the pathname of the filesystem-viewing application, which allows user-assisted remote malicious users to execute arbitrary code via a crafted web site that hosts an executable file.
Opera Opera Browser 5.0
Opera Opera Browser 6.0
Opera Opera Browser 9.25
Opera Opera Browser 9.52
Opera Opera Browser 10.50
Opera Opera Browser 9.60
Opera Opera Browser 9.20
Opera Opera Browser 7.54
Opera Opera Browser 7.50
Opera Opera Browser 7.52
Opera Opera Browser 8.0
Opera Opera Browser 9.23
Opera Opera Browser 10.10
Opera Opera Browser 10.53
Opera Opera Browser 10.00
Opera Opera Browser 7.20
Opera Opera Browser 7.21
Opera Opera Browser 7.22
Opera Opera Browser 7.03
Opera Opera Browser 7.01
Opera Opera Browser 7.0
Opera Opera Browser 8.01
672
VMScore
CVE-2020-17530
Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.
Apache Struts
Oracle Business Intelligence 12.2.1.3.0
Oracle Business Intelligence 12.2.1.4.0
Oracle Communications Policy Management 12.5.0
Oracle Financial Services Data Integration Hub 8.0.6
Oracle Financial Services Data Integration Hub 8.0.3
Oracle Hospitality Opera 5 5.6
Oracle Communications Pricing Design Center 12.0.0.3.0
Oracle Mysql Enterprise Monitor 8.0.23
Oracle Communications Diameter Intelligence Hub 8.2.3
Oracle Communications Diameter Intelligence Hub 8.0.0
Oracle Communications Diameter Intelligence Hub 8.2.0
Oracle Communications Diameter Intelligence Hub 8.1.0
18 Github repositories
1 Article
670
VMScore
CVE-2019-10086
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an malicious user to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of th...
Apache Commons Beanutils
Apache Nifi 1.14.0
Apache Nifi 1.15.0
Debian Debian Linux 8.0
Opensuse Leap 15.0
Opensuse Leap 15.1
Fedoraproject Fedora 30
Fedoraproject Fedora 31
Redhat Enterprise Linux Desktop 7.0
Redhat Enterprise Linux Workstation 7.0
Redhat Enterprise Linux Server 7.0
Redhat Enterprise Linux Server Aus 7.7
Redhat Enterprise Linux Server Tus 7.7
Redhat Enterprise Linux Eus 7.7
Redhat Jboss Enterprise Application Platform 7.2.0
Oracle Retail Xstore Point Of Service 15.0
Oracle Flexcube Private Banking 12.1.0
Oracle Banking Platform 2.4.0
Oracle Retail Xstore Point Of Service 7.1
Oracle Flexcube Private Banking 12.0.0
Oracle Service Bus 11.1.1.9.0
Oracle Fusion Middleware 11.1.1.9
668
VMScore
CVE-2020-14877
Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Logging). Supported versions that are affected are 5.5 and 5.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t...
Oracle Hospitality Opera 5 Property Services 5.5
Oracle Hospitality Opera 5 Property Services 5.6
668
VMScore
CVE-2018-1285
Apache log4net versions prior to 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.
Apache Log4net
Fedoraproject Fedora 30
Fedoraproject Fedora 31
Fedoraproject Fedora 32
Oracle Application Testing Suite 13.3.0.1
Oracle Hospitality Simphony 19.1.3
Oracle Hospitality Simphony 18.2.7.2
Oracle Hospitality Opera 5 5.5
Oracle Hospitality Opera 5 5.6
Netapp Snapcenter -
Netapp Manageability Software Development Kit -
4 Github repositories
668
VMScore
CVE-2019-18624
Opera Mini for Android allows malicious users to bypass intended restrictions on .apk file download/installation via an RTLO (aka Right to Left Override) approach, as demonstrated by misinterpretation of malicious%E2%80%AEtxt.apk as maliciouskpa.txt. This affects 44.1.2254.142553...
Opera Mini 44.1.2254.142553
Opera Mini 44.1.2254.142659
Opera Mini 44.1.2254.143214
668
VMScore
CVE-2013-6453
MediaWiki prior to 1.19.10, 1.2x prior to 1.21.4, and 1.22.x prior to 1.22.1 does not properly sanitize SVG files, which allows remote malicious users to have unspecified impact via invalid XML.
Mediawiki Mediawiki 1.22.0
Mediawiki Mediawiki 1.21.2
Mediawiki Mediawiki 1.21.1
Mediawiki Mediawiki 1.21.3
Mediawiki Mediawiki 1.21
Mediawiki Mediawiki 1.19.1
Mediawiki Mediawiki 1.19.3
Mediawiki Mediawiki 1.19.2
Mediawiki Mediawiki 1.19.4
Mediawiki Mediawiki 1.19
Mediawiki Mediawiki 1.19.0
Mediawiki Mediawiki 1.19.5
Mediawiki Mediawiki 1.19.6
Mediawiki Mediawiki 1.19.7
Mediawiki Mediawiki 1.19.8
Mediawiki Mediawiki
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223
CVE-2024-0044
information disclosure
CVE-2024-35753
HTML injection
CVE-2024-21306
CVE-2024-35733
SQL injection
CVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
3
4
5
6
7
8
9
10
NEXT »