Vulnerabilities > Opera > Opera Browser > Critical

DATE CVE VULNERABILITY TITLE RISK
2011-12-07 CVE-2011-4683 Remote Security vulnerability in Opera Web Browser
Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe issue."
network
low complexity
opera
critical
10.0
2011-12-07 CVE-2011-4684 Cryptographic Issues vulnerability in Opera Browser
Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corner cases."
network
low complexity
opera CWE-310
critical
10.0
2011-07-01 CVE-2011-2610 Security vulnerability in Opera Web Browser
Unspecified vulnerability in Opera before 11.50 has unknown impact and attack vectors, related to a "moderately severe issue."
network
low complexity
opera
critical
10.0
2011-07-01 CVE-2011-2628 Improper Input Validation vulnerability in Opera Browser
Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to page unload.
network
low complexity
opera CWE-20
critical
10.0
2010-12-22 CVE-2010-4581 Unspecified vulnerability in Opera Browser
Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."
network
low complexity
opera
critical
10.0
2010-12-22 CVE-2010-4586 Configuration vulnerability in Opera Browser
The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, possibly a related issue to CVE-2010-4508.
network
low complexity
opera CWE-16
critical
10.0
2010-12-22 CVE-2010-4587 Unspecified vulnerability in Opera Browser
Opera before 11.00 on Windows does not properly implement the Insecure Third Party Module warning message, which might make it easier for user-assisted remote attackers to have an unspecified impact via a crafted module.
network
opera microsoft
critical
9.3
2010-10-21 CVE-2010-4045 Permissions, Privileges, and Access Controls vulnerability in Opera Browser
Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote attackers to spoof the Address Bar, conduct cross-site scripting (XSS) attacks, and possibly execute arbitrary code by leveraging the ability of a script to interact with a web page from (1) a different domain or (2) a different security context.
network
opera CWE-264
critical
9.3
2010-08-16 CVE-2010-3019 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Opera Browser
Heap-based buffer overflow in Opera before 10.61 allows remote attackers to execute arbitrary code or cause a denial of service (application crash or hang) via vectors related to HTML5 canvas painting operations that occur during the application of transformations.
network
opera CWE-119
critical
9.3
2010-07-08 CVE-2010-2657 Permissions, Privileges, and Access Controls vulnerability in Opera Browser
Opera before 10.60 on Windows and Mac OS X does not properly prevent certain double-click operations from running a program located on a web site, which allows user-assisted remote attackers to execute arbitrary code via a crafted web page that bypasses a dialog.
network
opera CWE-264
critical
9.3